Sep 13 00:14:32.686374 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Sep 13 00:14:32.686393 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 12 23:05:37 -00 2025 Sep 13 00:14:32.686402 kernel: efi: EFI v2.70 by EDK II Sep 13 00:14:32.686407 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Sep 13 00:14:32.686412 kernel: random: crng init done Sep 13 00:14:32.686418 kernel: ACPI: Early table checksum verification disabled Sep 13 00:14:32.686424 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Sep 13 00:14:32.686431 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Sep 13 00:14:32.686437 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686442 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686456 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686462 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686468 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686473 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686484 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686491 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686498 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Sep 13 00:14:32.686504 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Sep 13 00:14:32.686510 kernel: NUMA: Failed to initialise from firmware Sep 13 00:14:32.686516 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Sep 13 00:14:32.686522 kernel: NUMA: NODE_DATA [mem 0xdcb0a900-0xdcb0ffff] Sep 13 00:14:32.686529 kernel: Zone ranges: Sep 13 00:14:32.686535 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Sep 13 00:14:32.686542 kernel: DMA32 empty Sep 13 00:14:32.686548 kernel: Normal empty Sep 13 00:14:32.686553 kernel: Movable zone start for each node Sep 13 00:14:32.686559 kernel: Early memory node ranges Sep 13 00:14:32.686565 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Sep 13 00:14:32.686570 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Sep 13 00:14:32.686576 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Sep 13 00:14:32.686582 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Sep 13 00:14:32.686588 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Sep 13 00:14:32.686594 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Sep 13 00:14:32.686599 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Sep 13 00:14:32.686605 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Sep 13 00:14:32.686612 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Sep 13 00:14:32.686618 kernel: psci: probing for conduit method from ACPI. Sep 13 00:14:32.686624 kernel: psci: PSCIv1.1 detected in firmware. Sep 13 00:14:32.686630 kernel: psci: Using standard PSCI v0.2 function IDs Sep 13 00:14:32.686635 kernel: psci: Trusted OS migration not required Sep 13 00:14:32.686643 kernel: psci: SMC Calling Convention v1.1 Sep 13 00:14:32.686650 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Sep 13 00:14:32.686657 kernel: ACPI: SRAT not present Sep 13 00:14:32.686663 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Sep 13 00:14:32.686669 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Sep 13 00:14:32.686676 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Sep 13 00:14:32.686681 kernel: Detected PIPT I-cache on CPU0 Sep 13 00:14:32.686688 kernel: CPU features: detected: GIC system register CPU interface Sep 13 00:14:32.686694 kernel: CPU features: detected: Hardware dirty bit management Sep 13 00:14:32.686700 kernel: CPU features: detected: Spectre-v4 Sep 13 00:14:32.686706 kernel: CPU features: detected: Spectre-BHB Sep 13 00:14:32.686713 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 13 00:14:32.686719 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 13 00:14:32.686725 kernel: CPU features: detected: ARM erratum 1418040 Sep 13 00:14:32.686731 kernel: CPU features: detected: SSBS not fully self-synchronizing Sep 13 00:14:32.686737 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Sep 13 00:14:32.686743 kernel: Policy zone: DMA Sep 13 00:14:32.686750 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 00:14:32.686757 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 13 00:14:32.686763 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 13 00:14:32.686770 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 13 00:14:32.686776 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 13 00:14:32.686790 kernel: Memory: 2457336K/2572288K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 114952K reserved, 0K cma-reserved) Sep 13 00:14:32.686797 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Sep 13 00:14:32.686803 kernel: trace event string verifier disabled Sep 13 00:14:32.686810 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 13 00:14:32.686818 kernel: rcu: RCU event tracing is enabled. Sep 13 00:14:32.686824 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Sep 13 00:14:32.686831 kernel: Trampoline variant of Tasks RCU enabled. Sep 13 00:14:32.686837 kernel: Tracing variant of Tasks RCU enabled. Sep 13 00:14:32.686843 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 13 00:14:32.686849 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Sep 13 00:14:32.686855 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 13 00:14:32.686862 kernel: GICv3: 256 SPIs implemented Sep 13 00:14:32.686868 kernel: GICv3: 0 Extended SPIs implemented Sep 13 00:14:32.686882 kernel: GICv3: Distributor has no Range Selector support Sep 13 00:14:32.686888 kernel: Root IRQ handler: gic_handle_irq Sep 13 00:14:32.686894 kernel: GICv3: 16 PPIs implemented Sep 13 00:14:32.686900 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Sep 13 00:14:32.686907 kernel: ACPI: SRAT not present Sep 13 00:14:32.686912 kernel: ITS [mem 0x08080000-0x0809ffff] Sep 13 00:14:32.686918 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Sep 13 00:14:32.686925 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Sep 13 00:14:32.686931 kernel: GICv3: using LPI property table @0x00000000400d0000 Sep 13 00:14:32.686937 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Sep 13 00:14:32.686944 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 13 00:14:32.686950 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Sep 13 00:14:32.686957 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Sep 13 00:14:32.686963 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Sep 13 00:14:32.686969 kernel: arm-pv: using stolen time PV Sep 13 00:14:32.686975 kernel: Console: colour dummy device 80x25 Sep 13 00:14:32.686982 kernel: ACPI: Core revision 20210730 Sep 13 00:14:32.686988 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Sep 13 00:14:32.686995 kernel: pid_max: default: 32768 minimum: 301 Sep 13 00:14:32.687001 kernel: LSM: Security Framework initializing Sep 13 00:14:32.687009 kernel: SELinux: Initializing. Sep 13 00:14:32.687015 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 00:14:32.687021 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 00:14:32.687027 kernel: rcu: Hierarchical SRCU implementation. Sep 13 00:14:32.687033 kernel: Platform MSI: ITS@0x8080000 domain created Sep 13 00:14:32.687039 kernel: PCI/MSI: ITS@0x8080000 domain created Sep 13 00:14:32.687046 kernel: Remapping and enabling EFI services. Sep 13 00:14:32.687052 kernel: smp: Bringing up secondary CPUs ... Sep 13 00:14:32.687058 kernel: Detected PIPT I-cache on CPU1 Sep 13 00:14:32.687100 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Sep 13 00:14:32.687107 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Sep 13 00:14:32.687114 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 13 00:14:32.687120 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Sep 13 00:14:32.687126 kernel: Detected PIPT I-cache on CPU2 Sep 13 00:14:32.687133 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Sep 13 00:14:32.687139 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Sep 13 00:14:32.687146 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 13 00:14:32.687152 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Sep 13 00:14:32.687158 kernel: Detected PIPT I-cache on CPU3 Sep 13 00:14:32.687167 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Sep 13 00:14:32.687173 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Sep 13 00:14:32.687179 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 13 00:14:32.687186 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Sep 13 00:14:32.687196 kernel: smp: Brought up 1 node, 4 CPUs Sep 13 00:14:32.687204 kernel: SMP: Total of 4 processors activated. Sep 13 00:14:32.687210 kernel: CPU features: detected: 32-bit EL0 Support Sep 13 00:14:32.687217 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Sep 13 00:14:32.687224 kernel: CPU features: detected: Common not Private translations Sep 13 00:14:32.687230 kernel: CPU features: detected: CRC32 instructions Sep 13 00:14:32.687237 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Sep 13 00:14:32.687244 kernel: CPU features: detected: LSE atomic instructions Sep 13 00:14:32.687251 kernel: CPU features: detected: Privileged Access Never Sep 13 00:14:32.687258 kernel: CPU features: detected: RAS Extension Support Sep 13 00:14:32.687265 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Sep 13 00:14:32.687271 kernel: CPU: All CPU(s) started at EL1 Sep 13 00:14:32.687278 kernel: alternatives: patching kernel code Sep 13 00:14:32.687285 kernel: devtmpfs: initialized Sep 13 00:14:32.687292 kernel: KASLR enabled Sep 13 00:14:32.687299 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 13 00:14:32.687305 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Sep 13 00:14:32.687312 kernel: pinctrl core: initialized pinctrl subsystem Sep 13 00:14:32.687318 kernel: SMBIOS 3.0.0 present. Sep 13 00:14:32.687325 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Sep 13 00:14:32.687331 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 13 00:14:32.687338 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 13 00:14:32.687347 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 13 00:14:32.687353 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 13 00:14:32.687360 kernel: audit: initializing netlink subsys (disabled) Sep 13 00:14:32.687367 kernel: audit: type=2000 audit(0.034:1): state=initialized audit_enabled=0 res=1 Sep 13 00:14:32.687373 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 13 00:14:32.687380 kernel: cpuidle: using governor menu Sep 13 00:14:32.687386 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 13 00:14:32.687393 kernel: ASID allocator initialised with 32768 entries Sep 13 00:14:32.687399 kernel: ACPI: bus type PCI registered Sep 13 00:14:32.687407 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 13 00:14:32.687414 kernel: Serial: AMBA PL011 UART driver Sep 13 00:14:32.687420 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 13 00:14:32.687427 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 13 00:14:32.687434 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 13 00:14:32.687440 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 13 00:14:32.687452 kernel: cryptd: max_cpu_qlen set to 1000 Sep 13 00:14:32.687459 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 13 00:14:32.687466 kernel: ACPI: Added _OSI(Module Device) Sep 13 00:14:32.687474 kernel: ACPI: Added _OSI(Processor Device) Sep 13 00:14:32.687481 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 13 00:14:32.687487 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 13 00:14:32.687494 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 13 00:14:32.687501 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 13 00:14:32.687507 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 13 00:14:32.687513 kernel: ACPI: Interpreter enabled Sep 13 00:14:32.687520 kernel: ACPI: Using GIC for interrupt routing Sep 13 00:14:32.687526 kernel: ACPI: MCFG table detected, 1 entries Sep 13 00:14:32.687534 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Sep 13 00:14:32.687541 kernel: printk: console [ttyAMA0] enabled Sep 13 00:14:32.687547 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Sep 13 00:14:32.687832 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 13 00:14:32.688395 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Sep 13 00:14:32.688512 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Sep 13 00:14:32.688576 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Sep 13 00:14:32.688645 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Sep 13 00:14:32.688655 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Sep 13 00:14:32.688661 kernel: PCI host bridge to bus 0000:00 Sep 13 00:14:32.688732 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Sep 13 00:14:32.688799 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Sep 13 00:14:32.688855 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Sep 13 00:14:32.688908 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Sep 13 00:14:32.688995 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Sep 13 00:14:32.689109 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Sep 13 00:14:32.689180 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Sep 13 00:14:32.689243 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Sep 13 00:14:32.689317 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Sep 13 00:14:32.689380 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Sep 13 00:14:32.689441 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Sep 13 00:14:32.689520 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Sep 13 00:14:32.689579 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Sep 13 00:14:32.689632 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Sep 13 00:14:32.689687 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Sep 13 00:14:32.689695 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Sep 13 00:14:32.689703 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Sep 13 00:14:32.689709 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Sep 13 00:14:32.689718 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Sep 13 00:14:32.689725 kernel: iommu: Default domain type: Translated Sep 13 00:14:32.689732 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 13 00:14:32.689738 kernel: vgaarb: loaded Sep 13 00:14:32.689745 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 13 00:14:32.689751 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 13 00:14:32.689758 kernel: PTP clock support registered Sep 13 00:14:32.689765 kernel: Registered efivars operations Sep 13 00:14:32.689772 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 13 00:14:32.689779 kernel: VFS: Disk quotas dquot_6.6.0 Sep 13 00:14:32.689787 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 13 00:14:32.689793 kernel: pnp: PnP ACPI init Sep 13 00:14:32.689860 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Sep 13 00:14:32.689870 kernel: pnp: PnP ACPI: found 1 devices Sep 13 00:14:32.689877 kernel: NET: Registered PF_INET protocol family Sep 13 00:14:32.689884 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 13 00:14:32.689890 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 13 00:14:32.689897 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 13 00:14:32.689905 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 13 00:14:32.689912 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 13 00:14:32.689919 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 13 00:14:32.689926 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 00:14:32.689932 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 00:14:32.689939 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 13 00:14:32.689946 kernel: PCI: CLS 0 bytes, default 64 Sep 13 00:14:32.689952 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Sep 13 00:14:32.689959 kernel: kvm [1]: HYP mode not available Sep 13 00:14:32.689967 kernel: Initialise system trusted keyrings Sep 13 00:14:32.689974 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 13 00:14:32.689980 kernel: Key type asymmetric registered Sep 13 00:14:32.689987 kernel: Asymmetric key parser 'x509' registered Sep 13 00:14:32.689994 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 13 00:14:32.690000 kernel: io scheduler mq-deadline registered Sep 13 00:14:32.690007 kernel: io scheduler kyber registered Sep 13 00:14:32.690013 kernel: io scheduler bfq registered Sep 13 00:14:32.690020 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Sep 13 00:14:32.690028 kernel: ACPI: button: Power Button [PWRB] Sep 13 00:14:32.690035 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Sep 13 00:14:32.690117 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Sep 13 00:14:32.690127 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 13 00:14:32.690134 kernel: thunder_xcv, ver 1.0 Sep 13 00:14:32.690141 kernel: thunder_bgx, ver 1.0 Sep 13 00:14:32.690147 kernel: nicpf, ver 1.0 Sep 13 00:14:32.690154 kernel: nicvf, ver 1.0 Sep 13 00:14:32.690223 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 13 00:14:32.690283 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-13T00:14:32 UTC (1757722472) Sep 13 00:14:32.690297 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 13 00:14:32.690304 kernel: NET: Registered PF_INET6 protocol family Sep 13 00:14:32.690310 kernel: Segment Routing with IPv6 Sep 13 00:14:32.690317 kernel: In-situ OAM (IOAM) with IPv6 Sep 13 00:14:32.690323 kernel: NET: Registered PF_PACKET protocol family Sep 13 00:14:32.690330 kernel: Key type dns_resolver registered Sep 13 00:14:32.690336 kernel: registered taskstats version 1 Sep 13 00:14:32.690344 kernel: Loading compiled-in X.509 certificates Sep 13 00:14:32.690351 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 47ac98e9306f36eebe4291d409359a5a5d0c2b9c' Sep 13 00:14:32.690358 kernel: Key type .fscrypt registered Sep 13 00:14:32.690364 kernel: Key type fscrypt-provisioning registered Sep 13 00:14:32.690371 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 13 00:14:32.690378 kernel: ima: Allocated hash algorithm: sha1 Sep 13 00:14:32.690384 kernel: ima: No architecture policies found Sep 13 00:14:32.690391 kernel: clk: Disabling unused clocks Sep 13 00:14:32.690398 kernel: Freeing unused kernel memory: 36416K Sep 13 00:14:32.690405 kernel: Run /init as init process Sep 13 00:14:32.690412 kernel: with arguments: Sep 13 00:14:32.690418 kernel: /init Sep 13 00:14:32.690427 kernel: with environment: Sep 13 00:14:32.690434 kernel: HOME=/ Sep 13 00:14:32.690440 kernel: TERM=linux Sep 13 00:14:32.690452 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 13 00:14:32.690461 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 00:14:32.690472 systemd[1]: Detected virtualization kvm. Sep 13 00:14:32.690482 systemd[1]: Detected architecture arm64. Sep 13 00:14:32.690489 systemd[1]: Running in initrd. Sep 13 00:14:32.690496 systemd[1]: No hostname configured, using default hostname. Sep 13 00:14:32.690503 systemd[1]: Hostname set to . Sep 13 00:14:32.690510 systemd[1]: Initializing machine ID from VM UUID. Sep 13 00:14:32.690519 systemd[1]: Queued start job for default target initrd.target. Sep 13 00:14:32.690526 systemd[1]: Started systemd-ask-password-console.path. Sep 13 00:14:32.690535 systemd[1]: Reached target cryptsetup.target. Sep 13 00:14:32.690542 systemd[1]: Reached target paths.target. Sep 13 00:14:32.690548 systemd[1]: Reached target slices.target. Sep 13 00:14:32.690557 systemd[1]: Reached target swap.target. Sep 13 00:14:32.690565 systemd[1]: Reached target timers.target. Sep 13 00:14:32.690572 systemd[1]: Listening on iscsid.socket. Sep 13 00:14:32.690579 systemd[1]: Listening on iscsiuio.socket. Sep 13 00:14:32.690587 systemd[1]: Listening on systemd-journald-audit.socket. Sep 13 00:14:32.690597 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 13 00:14:32.690604 systemd[1]: Listening on systemd-journald.socket. Sep 13 00:14:32.690611 systemd[1]: Listening on systemd-networkd.socket. Sep 13 00:14:32.690618 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 00:14:32.690625 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 00:14:32.690632 systemd[1]: Reached target sockets.target. Sep 13 00:14:32.690639 systemd[1]: Starting kmod-static-nodes.service... Sep 13 00:14:32.690646 systemd[1]: Finished network-cleanup.service. Sep 13 00:14:32.690657 systemd[1]: Starting systemd-fsck-usr.service... Sep 13 00:14:32.690664 systemd[1]: Starting systemd-journald.service... Sep 13 00:14:32.690675 systemd[1]: Starting systemd-modules-load.service... Sep 13 00:14:32.690683 systemd[1]: Starting systemd-resolved.service... Sep 13 00:14:32.690690 systemd[1]: Starting systemd-vconsole-setup.service... Sep 13 00:14:32.690698 systemd[1]: Finished kmod-static-nodes.service. Sep 13 00:14:32.690705 systemd[1]: Finished systemd-fsck-usr.service. Sep 13 00:14:32.690713 kernel: audit: type=1130 audit(1757722472.683:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.690720 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 00:14:32.690732 systemd-journald[290]: Journal started Sep 13 00:14:32.690779 systemd-journald[290]: Runtime Journal (/run/log/journal/f73cd77308534d8a8e9eef490e8c6a54) is 6.0M, max 48.7M, 42.6M free. Sep 13 00:14:32.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.686859 systemd-modules-load[291]: Inserted module 'overlay' Sep 13 00:14:32.696114 systemd[1]: Started systemd-journald.service. Sep 13 00:14:32.696151 kernel: audit: type=1130 audit(1757722472.693:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.694248 systemd[1]: Finished systemd-vconsole-setup.service. Sep 13 00:14:32.699687 kernel: audit: type=1130 audit(1757722472.696:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.697155 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 00:14:32.703111 kernel: audit: type=1130 audit(1757722472.700:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.701249 systemd[1]: Starting dracut-cmdline-ask.service... Sep 13 00:14:32.707088 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 13 00:14:32.709102 systemd-resolved[292]: Positive Trust Anchors: Sep 13 00:14:32.709115 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 00:14:32.709144 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 00:14:32.716583 kernel: Bridge firewalling registered Sep 13 00:14:32.711533 systemd-modules-load[291]: Inserted module 'br_netfilter' Sep 13 00:14:32.713420 systemd-resolved[292]: Defaulting to hostname 'linux'. Sep 13 00:14:32.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.714282 systemd[1]: Started systemd-resolved.service. Sep 13 00:14:32.721172 kernel: audit: type=1130 audit(1757722472.717:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.717977 systemd[1]: Reached target nss-lookup.target. Sep 13 00:14:32.722954 systemd[1]: Finished dracut-cmdline-ask.service. Sep 13 00:14:32.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.724579 systemd[1]: Starting dracut-cmdline.service... Sep 13 00:14:32.727261 kernel: audit: type=1130 audit(1757722472.723:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.728095 kernel: SCSI subsystem initialized Sep 13 00:14:32.733539 dracut-cmdline[308]: dracut-dracut-053 Sep 13 00:14:32.735930 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 13 00:14:32.735946 kernel: device-mapper: uevent: version 1.0.3 Sep 13 00:14:32.735954 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 13 00:14:32.735963 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 00:14:32.740848 systemd-modules-load[291]: Inserted module 'dm_multipath' Sep 13 00:14:32.753847 kernel: audit: type=1130 audit(1757722472.742:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.741770 systemd[1]: Finished systemd-modules-load.service. Sep 13 00:14:32.743292 systemd[1]: Starting systemd-sysctl.service... Sep 13 00:14:32.756140 systemd[1]: Finished systemd-sysctl.service. Sep 13 00:14:32.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.760092 kernel: audit: type=1130 audit(1757722472.756:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.796087 kernel: Loading iSCSI transport class v2.0-870. Sep 13 00:14:32.808101 kernel: iscsi: registered transport (tcp) Sep 13 00:14:32.823088 kernel: iscsi: registered transport (qla4xxx) Sep 13 00:14:32.823103 kernel: QLogic iSCSI HBA Driver Sep 13 00:14:32.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.859434 systemd[1]: Finished dracut-cmdline.service. Sep 13 00:14:32.862451 kernel: audit: type=1130 audit(1757722472.859:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:32.860894 systemd[1]: Starting dracut-pre-udev.service... Sep 13 00:14:32.903094 kernel: raid6: neonx8 gen() 13710 MB/s Sep 13 00:14:32.920105 kernel: raid6: neonx8 xor() 10819 MB/s Sep 13 00:14:32.937104 kernel: raid6: neonx4 gen() 13517 MB/s Sep 13 00:14:32.954098 kernel: raid6: neonx4 xor() 10812 MB/s Sep 13 00:14:32.971102 kernel: raid6: neonx2 gen() 12849 MB/s Sep 13 00:14:32.988109 kernel: raid6: neonx2 xor() 10231 MB/s Sep 13 00:14:33.005087 kernel: raid6: neonx1 gen() 10580 MB/s Sep 13 00:14:33.022093 kernel: raid6: neonx1 xor() 8783 MB/s Sep 13 00:14:33.039119 kernel: raid6: int64x8 gen() 6224 MB/s Sep 13 00:14:33.056110 kernel: raid6: int64x8 xor() 3485 MB/s Sep 13 00:14:33.073105 kernel: raid6: int64x4 gen() 7155 MB/s Sep 13 00:14:33.090105 kernel: raid6: int64x4 xor() 3842 MB/s Sep 13 00:14:33.107115 kernel: raid6: int64x2 gen() 6147 MB/s Sep 13 00:14:33.124108 kernel: raid6: int64x2 xor() 3291 MB/s Sep 13 00:14:33.141106 kernel: raid6: int64x1 gen() 5028 MB/s Sep 13 00:14:33.158366 kernel: raid6: int64x1 xor() 2635 MB/s Sep 13 00:14:33.158415 kernel: raid6: using algorithm neonx8 gen() 13710 MB/s Sep 13 00:14:33.158426 kernel: raid6: .... xor() 10819 MB/s, rmw enabled Sep 13 00:14:33.158466 kernel: raid6: using neon recovery algorithm Sep 13 00:14:33.169289 kernel: xor: measuring software checksum speed Sep 13 00:14:33.169333 kernel: 8regs : 17209 MB/sec Sep 13 00:14:33.170303 kernel: 32regs : 20707 MB/sec Sep 13 00:14:33.170323 kernel: arm64_neon : 27570 MB/sec Sep 13 00:14:33.170332 kernel: xor: using function: arm64_neon (27570 MB/sec) Sep 13 00:14:33.223114 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 13 00:14:33.232355 systemd[1]: Finished dracut-pre-udev.service. Sep 13 00:14:33.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:33.235000 audit: BPF prog-id=7 op=LOAD Sep 13 00:14:33.235000 audit: BPF prog-id=8 op=LOAD Sep 13 00:14:33.235872 systemd[1]: Starting systemd-udevd.service... Sep 13 00:14:33.249475 systemd-udevd[492]: Using default interface naming scheme 'v252'. Sep 13 00:14:33.252837 systemd[1]: Started systemd-udevd.service. Sep 13 00:14:33.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:33.258252 systemd[1]: Starting dracut-pre-trigger.service... Sep 13 00:14:33.269049 dracut-pre-trigger[506]: rd.md=0: removing MD RAID activation Sep 13 00:14:33.295304 systemd[1]: Finished dracut-pre-trigger.service. Sep 13 00:14:33.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:33.296875 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 00:14:33.330340 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 00:14:33.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:33.376087 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Sep 13 00:14:33.390318 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 13 00:14:33.390340 kernel: GPT:9289727 != 19775487 Sep 13 00:14:33.390349 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 13 00:14:33.390358 kernel: GPT:9289727 != 19775487 Sep 13 00:14:33.390366 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 13 00:14:33.390374 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 13 00:14:33.414110 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (537) Sep 13 00:14:33.414778 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 13 00:14:33.418142 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 13 00:14:33.422602 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 13 00:14:33.423432 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 13 00:14:33.427961 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 00:14:33.429481 systemd[1]: Starting disk-uuid.service... Sep 13 00:14:33.435522 disk-uuid[561]: Primary Header is updated. Sep 13 00:14:33.435522 disk-uuid[561]: Secondary Entries is updated. Sep 13 00:14:33.435522 disk-uuid[561]: Secondary Header is updated. Sep 13 00:14:33.438210 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 13 00:14:34.457085 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 13 00:14:34.457301 disk-uuid[562]: The operation has completed successfully. Sep 13 00:14:34.483146 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 13 00:14:34.484250 systemd[1]: Finished disk-uuid.service. Sep 13 00:14:34.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.489079 systemd[1]: Starting verity-setup.service... Sep 13 00:14:34.503103 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 13 00:14:34.524517 systemd[1]: Found device dev-mapper-usr.device. Sep 13 00:14:34.525900 systemd[1]: Mounting sysusr-usr.mount... Sep 13 00:14:34.526642 systemd[1]: Finished verity-setup.service. Sep 13 00:14:34.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.578076 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 13 00:14:34.578311 systemd[1]: Mounted sysusr-usr.mount. Sep 13 00:14:34.578960 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 13 00:14:34.579680 systemd[1]: Starting ignition-setup.service... Sep 13 00:14:34.581527 systemd[1]: Starting parse-ip-for-networkd.service... Sep 13 00:14:34.590122 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:14:34.590157 kernel: BTRFS info (device vda6): using free space tree Sep 13 00:14:34.590167 kernel: BTRFS info (device vda6): has skinny extents Sep 13 00:14:34.597976 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 13 00:14:34.605400 systemd[1]: Finished ignition-setup.service. Sep 13 00:14:34.606841 systemd[1]: Starting ignition-fetch-offline.service... Sep 13 00:14:34.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.658658 systemd[1]: Finished parse-ip-for-networkd.service. Sep 13 00:14:34.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.660000 audit: BPF prog-id=9 op=LOAD Sep 13 00:14:34.660656 systemd[1]: Starting systemd-networkd.service... Sep 13 00:14:34.662958 ignition[657]: Ignition 2.14.0 Sep 13 00:14:34.663672 ignition[657]: Stage: fetch-offline Sep 13 00:14:34.664259 ignition[657]: no configs at "/usr/lib/ignition/base.d" Sep 13 00:14:34.664948 ignition[657]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 13 00:14:34.666009 ignition[657]: parsed url from cmdline: "" Sep 13 00:14:34.666074 ignition[657]: no config URL provided Sep 13 00:14:34.666685 ignition[657]: reading system config file "/usr/lib/ignition/user.ign" Sep 13 00:14:34.667584 ignition[657]: no config at "/usr/lib/ignition/user.ign" Sep 13 00:14:34.668442 ignition[657]: op(1): [started] loading QEMU firmware config module Sep 13 00:14:34.669108 ignition[657]: op(1): executing: "modprobe" "qemu_fw_cfg" Sep 13 00:14:34.672586 ignition[657]: op(1): [finished] loading QEMU firmware config module Sep 13 00:14:34.681829 systemd-networkd[739]: lo: Link UP Sep 13 00:14:34.681842 systemd-networkd[739]: lo: Gained carrier Sep 13 00:14:34.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.682270 systemd-networkd[739]: Enumeration completed Sep 13 00:14:34.682565 systemd-networkd[739]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 00:14:34.682633 systemd[1]: Started systemd-networkd.service. Sep 13 00:14:34.684077 systemd[1]: Reached target network.target. Sep 13 00:14:34.684732 systemd-networkd[739]: eth0: Link UP Sep 13 00:14:34.684736 systemd-networkd[739]: eth0: Gained carrier Sep 13 00:14:34.686313 systemd[1]: Starting iscsiuio.service... Sep 13 00:14:34.693723 systemd[1]: Started iscsiuio.service. Sep 13 00:14:34.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.695924 systemd[1]: Starting iscsid.service... Sep 13 00:14:34.699316 iscsid[747]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 13 00:14:34.699316 iscsid[747]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 13 00:14:34.699316 iscsid[747]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 13 00:14:34.699316 iscsid[747]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 13 00:14:34.699316 iscsid[747]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 13 00:14:34.699316 iscsid[747]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 13 00:14:34.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.702173 systemd[1]: Started iscsid.service. Sep 13 00:14:34.706359 systemd-networkd[739]: eth0: DHCPv4 address 10.0.0.69/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 13 00:14:34.707235 systemd[1]: Starting dracut-initqueue.service... Sep 13 00:14:34.717528 systemd[1]: Finished dracut-initqueue.service. Sep 13 00:14:34.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.718462 systemd[1]: Reached target remote-fs-pre.target. Sep 13 00:14:34.719907 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 00:14:34.721389 systemd[1]: Reached target remote-fs.target. Sep 13 00:14:34.723611 systemd[1]: Starting dracut-pre-mount.service... Sep 13 00:14:34.731322 systemd[1]: Finished dracut-pre-mount.service. Sep 13 00:14:34.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.740245 ignition[657]: parsing config with SHA512: 414a3950cafa4ea8ea0002dd5c20a3f17d1301cc25cb73b242cf5ca3bec8c6aa5492c784af215c8c14c39e78d124733e9ce7bdd95532bfc5d4375a9609e74d46 Sep 13 00:14:34.751292 unknown[657]: fetched base config from "system" Sep 13 00:14:34.751304 unknown[657]: fetched user config from "qemu" Sep 13 00:14:34.751711 ignition[657]: fetch-offline: fetch-offline passed Sep 13 00:14:34.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.752750 systemd[1]: Finished ignition-fetch-offline.service. Sep 13 00:14:34.751763 ignition[657]: Ignition finished successfully Sep 13 00:14:34.754008 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Sep 13 00:14:34.754823 systemd[1]: Starting ignition-kargs.service... Sep 13 00:14:34.764149 ignition[761]: Ignition 2.14.0 Sep 13 00:14:34.764159 ignition[761]: Stage: kargs Sep 13 00:14:34.764258 ignition[761]: no configs at "/usr/lib/ignition/base.d" Sep 13 00:14:34.766344 systemd[1]: Finished ignition-kargs.service. Sep 13 00:14:34.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.764268 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 13 00:14:34.765113 ignition[761]: kargs: kargs passed Sep 13 00:14:34.768319 systemd[1]: Starting ignition-disks.service... Sep 13 00:14:34.765156 ignition[761]: Ignition finished successfully Sep 13 00:14:34.775153 ignition[767]: Ignition 2.14.0 Sep 13 00:14:34.775165 ignition[767]: Stage: disks Sep 13 00:14:34.775267 ignition[767]: no configs at "/usr/lib/ignition/base.d" Sep 13 00:14:34.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.777091 systemd[1]: Finished ignition-disks.service. Sep 13 00:14:34.775278 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 13 00:14:34.777859 systemd[1]: Reached target initrd-root-device.target. Sep 13 00:14:34.776142 ignition[767]: disks: disks passed Sep 13 00:14:34.778557 systemd[1]: Reached target local-fs-pre.target. Sep 13 00:14:34.776187 ignition[767]: Ignition finished successfully Sep 13 00:14:34.779828 systemd[1]: Reached target local-fs.target. Sep 13 00:14:34.781100 systemd[1]: Reached target sysinit.target. Sep 13 00:14:34.782149 systemd[1]: Reached target basic.target. Sep 13 00:14:34.783882 systemd[1]: Starting systemd-fsck-root.service... Sep 13 00:14:34.795782 systemd-fsck[775]: ROOT: clean, 629/553520 files, 56027/553472 blocks Sep 13 00:14:34.799693 systemd[1]: Finished systemd-fsck-root.service. Sep 13 00:14:34.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.802061 systemd[1]: Mounting sysroot.mount... Sep 13 00:14:34.808950 systemd[1]: Mounted sysroot.mount. Sep 13 00:14:34.810014 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 13 00:14:34.809614 systemd[1]: Reached target initrd-root-fs.target. Sep 13 00:14:34.811602 systemd[1]: Mounting sysroot-usr.mount... Sep 13 00:14:34.812360 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 13 00:14:34.812399 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 13 00:14:34.812423 systemd[1]: Reached target ignition-diskful.target. Sep 13 00:14:34.814394 systemd[1]: Mounted sysroot-usr.mount. Sep 13 00:14:34.816597 systemd[1]: Starting initrd-setup-root.service... Sep 13 00:14:34.820936 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Sep 13 00:14:34.825773 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Sep 13 00:14:34.828702 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Sep 13 00:14:34.832733 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Sep 13 00:14:34.875620 systemd[1]: Finished initrd-setup-root.service. Sep 13 00:14:34.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.877116 systemd[1]: Starting ignition-mount.service... Sep 13 00:14:34.878390 systemd[1]: Starting sysroot-boot.service... Sep 13 00:14:34.884998 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Sep 13 00:14:34.893922 systemd[1]: Finished sysroot-boot.service. Sep 13 00:14:34.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:34.897836 ignition[828]: INFO : Ignition 2.14.0 Sep 13 00:14:34.898738 ignition[828]: INFO : Stage: mount Sep 13 00:14:34.899533 ignition[828]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 13 00:14:34.900512 ignition[828]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 13 00:14:34.902581 ignition[828]: INFO : mount: mount passed Sep 13 00:14:34.903338 ignition[828]: INFO : Ignition finished successfully Sep 13 00:14:34.904873 systemd[1]: Finished ignition-mount.service. Sep 13 00:14:34.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:35.535380 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 00:14:35.541087 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (837) Sep 13 00:14:35.542374 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:14:35.542387 kernel: BTRFS info (device vda6): using free space tree Sep 13 00:14:35.542397 kernel: BTRFS info (device vda6): has skinny extents Sep 13 00:14:35.545579 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 00:14:35.547022 systemd[1]: Starting ignition-files.service... Sep 13 00:14:35.560831 ignition[857]: INFO : Ignition 2.14.0 Sep 13 00:14:35.560831 ignition[857]: INFO : Stage: files Sep 13 00:14:35.562408 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 13 00:14:35.562408 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 13 00:14:35.562408 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Sep 13 00:14:35.565745 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 13 00:14:35.565745 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 13 00:14:35.565745 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 13 00:14:35.565745 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 13 00:14:35.565745 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 13 00:14:35.565745 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Sep 13 00:14:35.565745 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Sep 13 00:14:35.564900 unknown[857]: wrote ssh authorized keys file for user: core Sep 13 00:14:35.617970 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 13 00:14:35.748348 systemd-networkd[739]: eth0: Gained IPv6LL Sep 13 00:14:35.805311 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Sep 13 00:14:35.805311 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:14:35.808228 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Sep 13 00:14:36.161460 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Sep 13 00:14:36.580590 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:14:36.580590 ignition[857]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Sep 13 00:14:36.585918 ignition[857]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Sep 13 00:14:36.611466 ignition[857]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Sep 13 00:14:36.611466 ignition[857]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Sep 13 00:14:36.611466 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 13 00:14:36.611466 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 13 00:14:36.611466 ignition[857]: INFO : files: files passed Sep 13 00:14:36.611466 ignition[857]: INFO : Ignition finished successfully Sep 13 00:14:36.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.612133 systemd[1]: Finished ignition-files.service. Sep 13 00:14:36.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.614985 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 13 00:14:36.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.625426 initrd-setup-root-after-ignition[882]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Sep 13 00:14:36.616784 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 13 00:14:36.632931 initrd-setup-root-after-ignition[885]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 13 00:14:36.617459 systemd[1]: Starting ignition-quench.service... Sep 13 00:14:36.622263 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 13 00:14:36.622348 systemd[1]: Finished ignition-quench.service. Sep 13 00:14:36.623699 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 13 00:14:36.624811 systemd[1]: Reached target ignition-complete.target. Sep 13 00:14:36.626510 systemd[1]: Starting initrd-parse-etc.service... Sep 13 00:14:36.641453 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 13 00:14:36.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.641547 systemd[1]: Finished initrd-parse-etc.service. Sep 13 00:14:36.642322 systemd[1]: Reached target initrd-fs.target. Sep 13 00:14:36.644369 systemd[1]: Reached target initrd.target. Sep 13 00:14:36.645941 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 13 00:14:36.646724 systemd[1]: Starting dracut-pre-pivot.service... Sep 13 00:14:36.657440 systemd[1]: Finished dracut-pre-pivot.service. Sep 13 00:14:36.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.658817 systemd[1]: Starting initrd-cleanup.service... Sep 13 00:14:36.669739 systemd[1]: Stopped target nss-lookup.target. Sep 13 00:14:36.670557 systemd[1]: Stopped target remote-cryptsetup.target. Sep 13 00:14:36.672131 systemd[1]: Stopped target timers.target. Sep 13 00:14:36.673123 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 13 00:14:36.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.673227 systemd[1]: Stopped dracut-pre-pivot.service. Sep 13 00:14:36.674252 systemd[1]: Stopped target initrd.target. Sep 13 00:14:36.675435 systemd[1]: Stopped target basic.target. Sep 13 00:14:36.676720 systemd[1]: Stopped target ignition-complete.target. Sep 13 00:14:36.678766 systemd[1]: Stopped target ignition-diskful.target. Sep 13 00:14:36.680658 systemd[1]: Stopped target initrd-root-device.target. Sep 13 00:14:36.681824 systemd[1]: Stopped target remote-fs.target. Sep 13 00:14:36.682946 systemd[1]: Stopped target remote-fs-pre.target. Sep 13 00:14:36.685314 systemd[1]: Stopped target sysinit.target. Sep 13 00:14:36.687206 systemd[1]: Stopped target local-fs.target. Sep 13 00:14:36.688174 systemd[1]: Stopped target local-fs-pre.target. Sep 13 00:14:36.689237 systemd[1]: Stopped target swap.target. Sep 13 00:14:36.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.690138 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 13 00:14:36.690250 systemd[1]: Stopped dracut-pre-mount.service. Sep 13 00:14:36.692303 systemd[1]: Stopped target cryptsetup.target. Sep 13 00:14:36.694807 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 13 00:14:36.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.695135 systemd[1]: Stopped dracut-initqueue.service. Sep 13 00:14:36.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.697460 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 13 00:14:36.697766 systemd[1]: Stopped ignition-fetch-offline.service. Sep 13 00:14:36.699712 systemd[1]: Stopped target paths.target. Sep 13 00:14:36.700543 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 13 00:14:36.702176 systemd[1]: Stopped systemd-ask-password-console.path. Sep 13 00:14:36.703236 systemd[1]: Stopped target slices.target. Sep 13 00:14:36.704392 systemd[1]: Stopped target sockets.target. Sep 13 00:14:36.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.705464 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 13 00:14:36.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.705571 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 13 00:14:36.706695 systemd[1]: ignition-files.service: Deactivated successfully. Sep 13 00:14:36.710303 iscsid[747]: iscsid shutting down. Sep 13 00:14:36.706778 systemd[1]: Stopped ignition-files.service. Sep 13 00:14:36.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.708612 systemd[1]: Stopping ignition-mount.service... Sep 13 00:14:36.709817 systemd[1]: Stopping iscsid.service... Sep 13 00:14:36.710664 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 13 00:14:36.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.710762 systemd[1]: Stopped kmod-static-nodes.service. Sep 13 00:14:36.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.716574 ignition[898]: INFO : Ignition 2.14.0 Sep 13 00:14:36.716574 ignition[898]: INFO : Stage: umount Sep 13 00:14:36.716574 ignition[898]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 13 00:14:36.716574 ignition[898]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 13 00:14:36.712569 systemd[1]: Stopping sysroot-boot.service... Sep 13 00:14:36.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.721477 ignition[898]: INFO : umount: umount passed Sep 13 00:14:36.721477 ignition[898]: INFO : Ignition finished successfully Sep 13 00:14:36.713510 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 13 00:14:36.713632 systemd[1]: Stopped systemd-udev-trigger.service. Sep 13 00:14:36.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.714875 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 13 00:14:36.715008 systemd[1]: Stopped dracut-pre-trigger.service. Sep 13 00:14:36.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.718271 systemd[1]: iscsid.service: Deactivated successfully. Sep 13 00:14:36.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.718368 systemd[1]: Stopped iscsid.service. Sep 13 00:14:36.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.719559 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 13 00:14:36.719649 systemd[1]: Stopped ignition-mount.service. Sep 13 00:14:36.722502 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 13 00:14:36.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.722582 systemd[1]: Finished initrd-cleanup.service. Sep 13 00:14:36.724614 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 13 00:14:36.724872 systemd[1]: iscsid.socket: Deactivated successfully. Sep 13 00:14:36.724902 systemd[1]: Closed iscsid.socket. Sep 13 00:14:36.726316 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 13 00:14:36.726358 systemd[1]: Stopped ignition-disks.service. Sep 13 00:14:36.727750 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 13 00:14:36.727788 systemd[1]: Stopped ignition-kargs.service. Sep 13 00:14:36.728887 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 13 00:14:36.728922 systemd[1]: Stopped ignition-setup.service. Sep 13 00:14:36.730137 systemd[1]: Stopping iscsiuio.service... Sep 13 00:14:36.732912 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 13 00:14:36.733020 systemd[1]: Stopped iscsiuio.service. Sep 13 00:14:36.734200 systemd[1]: Stopped target network.target. Sep 13 00:14:36.737379 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 13 00:14:36.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.737421 systemd[1]: Closed iscsiuio.socket. Sep 13 00:14:36.738559 systemd[1]: Stopping systemd-networkd.service... Sep 13 00:14:36.741345 systemd[1]: Stopping systemd-resolved.service... Sep 13 00:14:36.747125 systemd-networkd[739]: eth0: DHCPv6 lease lost Sep 13 00:14:36.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.751322 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 13 00:14:36.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.751429 systemd[1]: Stopped systemd-networkd.service. Sep 13 00:14:36.752651 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 13 00:14:36.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.760000 audit: BPF prog-id=9 op=UNLOAD Sep 13 00:14:36.760000 audit: BPF prog-id=6 op=UNLOAD Sep 13 00:14:36.752742 systemd[1]: Stopped systemd-resolved.service. Sep 13 00:14:36.753801 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 13 00:14:36.753829 systemd[1]: Closed systemd-networkd.socket. Sep 13 00:14:36.755434 systemd[1]: Stopping network-cleanup.service... Sep 13 00:14:36.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.756559 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 13 00:14:36.756615 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 13 00:14:36.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.758006 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 13 00:14:36.758045 systemd[1]: Stopped systemd-sysctl.service. Sep 13 00:14:36.759859 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 13 00:14:36.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.759896 systemd[1]: Stopped systemd-modules-load.service. Sep 13 00:14:36.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.761448 systemd[1]: Stopping systemd-udevd.service... Sep 13 00:14:36.765787 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 13 00:14:36.766334 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 13 00:14:36.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.766425 systemd[1]: Stopped sysroot-boot.service. Sep 13 00:14:36.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.768235 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 13 00:14:36.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.768294 systemd[1]: Stopped initrd-setup-root.service. Sep 13 00:14:36.771429 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 13 00:14:36.771534 systemd[1]: Stopped network-cleanup.service. Sep 13 00:14:36.772691 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 13 00:14:36.772799 systemd[1]: Stopped systemd-udevd.service. Sep 13 00:14:36.774128 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 13 00:14:36.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.774167 systemd[1]: Closed systemd-udevd-control.socket. Sep 13 00:14:36.775172 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 13 00:14:36.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:36.775208 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 13 00:14:36.776347 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 13 00:14:36.776389 systemd[1]: Stopped dracut-pre-udev.service. Sep 13 00:14:36.777842 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 13 00:14:36.777878 systemd[1]: Stopped dracut-cmdline.service. Sep 13 00:14:36.779176 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 13 00:14:36.779211 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 13 00:14:36.781149 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 13 00:14:36.782505 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 13 00:14:36.782573 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 13 00:14:36.786807 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 13 00:14:36.786898 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 13 00:14:36.788355 systemd[1]: Reached target initrd-switch-root.target. Sep 13 00:14:36.790451 systemd[1]: Starting initrd-switch-root.service... Sep 13 00:14:36.797286 systemd[1]: Switching root. Sep 13 00:14:36.817492 systemd-journald[290]: Journal stopped Sep 13 00:14:38.846314 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Sep 13 00:14:38.846364 kernel: SELinux: Class mctp_socket not defined in policy. Sep 13 00:14:38.846376 kernel: SELinux: Class anon_inode not defined in policy. Sep 13 00:14:38.846386 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 13 00:14:38.846403 kernel: SELinux: policy capability network_peer_controls=1 Sep 13 00:14:38.846415 kernel: SELinux: policy capability open_perms=1 Sep 13 00:14:38.846424 kernel: SELinux: policy capability extended_socket_class=1 Sep 13 00:14:38.846437 kernel: SELinux: policy capability always_check_network=0 Sep 13 00:14:38.846446 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 13 00:14:38.846456 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 13 00:14:38.846465 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 13 00:14:38.846474 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 13 00:14:38.846488 systemd[1]: Successfully loaded SELinux policy in 33.060ms. Sep 13 00:14:38.846504 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.575ms. Sep 13 00:14:38.846516 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 00:14:38.846526 systemd[1]: Detected virtualization kvm. Sep 13 00:14:38.846538 systemd[1]: Detected architecture arm64. Sep 13 00:14:38.846548 systemd[1]: Detected first boot. Sep 13 00:14:38.846558 systemd[1]: Initializing machine ID from VM UUID. Sep 13 00:14:38.846568 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 13 00:14:38.846578 systemd[1]: Populated /etc with preset unit settings. Sep 13 00:14:38.846591 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:14:38.846603 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:14:38.846615 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:14:38.846626 kernel: kauditd_printk_skb: 81 callbacks suppressed Sep 13 00:14:38.846641 kernel: audit: type=1334 audit(1757722478.737:85): prog-id=12 op=LOAD Sep 13 00:14:38.846650 kernel: audit: type=1334 audit(1757722478.737:86): prog-id=3 op=UNLOAD Sep 13 00:14:38.846660 kernel: audit: type=1334 audit(1757722478.738:87): prog-id=13 op=LOAD Sep 13 00:14:38.846670 kernel: audit: type=1334 audit(1757722478.738:88): prog-id=14 op=LOAD Sep 13 00:14:38.846680 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 13 00:14:38.846690 kernel: audit: type=1334 audit(1757722478.738:89): prog-id=4 op=UNLOAD Sep 13 00:14:38.846699 systemd[1]: Stopped initrd-switch-root.service. Sep 13 00:14:38.846709 kernel: audit: type=1334 audit(1757722478.738:90): prog-id=5 op=UNLOAD Sep 13 00:14:38.846719 kernel: audit: type=1131 audit(1757722478.739:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.846729 kernel: audit: type=1130 audit(1757722478.745:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.846739 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 13 00:14:38.846751 kernel: audit: type=1131 audit(1757722478.745:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.846761 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 13 00:14:38.846771 kernel: audit: type=1334 audit(1757722478.752:94): prog-id=12 op=UNLOAD Sep 13 00:14:38.846781 systemd[1]: Created slice system-addon\x2drun.slice. Sep 13 00:14:38.846792 systemd[1]: Created slice system-getty.slice. Sep 13 00:14:38.846802 systemd[1]: Created slice system-modprobe.slice. Sep 13 00:14:38.846815 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 13 00:14:38.846825 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 13 00:14:38.846836 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 13 00:14:38.846846 systemd[1]: Created slice user.slice. Sep 13 00:14:38.846859 systemd[1]: Started systemd-ask-password-console.path. Sep 13 00:14:38.846870 systemd[1]: Started systemd-ask-password-wall.path. Sep 13 00:14:38.846880 systemd[1]: Set up automount boot.automount. Sep 13 00:14:38.846890 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 13 00:14:38.846900 systemd[1]: Stopped target initrd-switch-root.target. Sep 13 00:14:38.846912 systemd[1]: Stopped target initrd-fs.target. Sep 13 00:14:38.846922 systemd[1]: Stopped target initrd-root-fs.target. Sep 13 00:14:38.846932 systemd[1]: Reached target integritysetup.target. Sep 13 00:14:38.846943 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 00:14:38.846953 systemd[1]: Reached target remote-fs.target. Sep 13 00:14:38.846963 systemd[1]: Reached target slices.target. Sep 13 00:14:38.846973 systemd[1]: Reached target swap.target. Sep 13 00:14:38.846984 systemd[1]: Reached target torcx.target. Sep 13 00:14:38.846994 systemd[1]: Reached target veritysetup.target. Sep 13 00:14:38.847004 systemd[1]: Listening on systemd-coredump.socket. Sep 13 00:14:38.847016 systemd[1]: Listening on systemd-initctl.socket. Sep 13 00:14:38.847027 systemd[1]: Listening on systemd-networkd.socket. Sep 13 00:14:38.847038 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 00:14:38.847049 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 00:14:38.847060 systemd[1]: Listening on systemd-userdbd.socket. Sep 13 00:14:38.847077 systemd[1]: Mounting dev-hugepages.mount... Sep 13 00:14:38.847088 systemd[1]: Mounting dev-mqueue.mount... Sep 13 00:14:38.847098 systemd[1]: Mounting media.mount... Sep 13 00:14:38.847108 systemd[1]: Mounting sys-kernel-debug.mount... Sep 13 00:14:38.847121 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 13 00:14:38.847132 systemd[1]: Mounting tmp.mount... Sep 13 00:14:38.847142 systemd[1]: Starting flatcar-tmpfiles.service... Sep 13 00:14:38.847152 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:14:38.847162 systemd[1]: Starting kmod-static-nodes.service... Sep 13 00:14:38.847172 systemd[1]: Starting modprobe@configfs.service... Sep 13 00:14:38.847182 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:14:38.847192 systemd[1]: Starting modprobe@drm.service... Sep 13 00:14:38.847203 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:14:38.847215 systemd[1]: Starting modprobe@fuse.service... Sep 13 00:14:38.847225 systemd[1]: Starting modprobe@loop.service... Sep 13 00:14:38.847236 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 13 00:14:38.847246 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 13 00:14:38.847256 systemd[1]: Stopped systemd-fsck-root.service. Sep 13 00:14:38.847268 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 13 00:14:38.847278 systemd[1]: Stopped systemd-fsck-usr.service. Sep 13 00:14:38.847288 systemd[1]: Stopped systemd-journald.service. Sep 13 00:14:38.847298 kernel: fuse: init (API version 7.34) Sep 13 00:14:38.847310 systemd[1]: Starting systemd-journald.service... Sep 13 00:14:38.847321 kernel: loop: module loaded Sep 13 00:14:38.847333 systemd[1]: Starting systemd-modules-load.service... Sep 13 00:14:38.847343 systemd[1]: Starting systemd-network-generator.service... Sep 13 00:14:38.847354 systemd[1]: Starting systemd-remount-fs.service... Sep 13 00:14:38.847364 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 00:14:38.847374 systemd[1]: verity-setup.service: Deactivated successfully. Sep 13 00:14:38.847384 systemd[1]: Stopped verity-setup.service. Sep 13 00:14:38.847400 systemd[1]: Mounted dev-hugepages.mount. Sep 13 00:14:38.847412 systemd[1]: Mounted dev-mqueue.mount. Sep 13 00:14:38.847424 systemd-journald[1002]: Journal started Sep 13 00:14:38.847475 systemd-journald[1002]: Runtime Journal (/run/log/journal/f73cd77308534d8a8e9eef490e8c6a54) is 6.0M, max 48.7M, 42.6M free. Sep 13 00:14:36.875000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 13 00:14:36.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 00:14:36.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 00:14:36.959000 audit: BPF prog-id=10 op=LOAD Sep 13 00:14:36.959000 audit: BPF prog-id=10 op=UNLOAD Sep 13 00:14:36.959000 audit: BPF prog-id=11 op=LOAD Sep 13 00:14:36.959000 audit: BPF prog-id=11 op=UNLOAD Sep 13 00:14:37.028000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 00:14:37.028000 audit[932]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c58b4 a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:37.028000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 00:14:37.029000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 13 00:14:37.029000 audit[932]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5989 a2=1ed a3=0 items=2 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:37.029000 audit: CWD cwd="/" Sep 13 00:14:37.029000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:14:37.029000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:14:37.029000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 00:14:38.737000 audit: BPF prog-id=12 op=LOAD Sep 13 00:14:38.737000 audit: BPF prog-id=3 op=UNLOAD Sep 13 00:14:38.738000 audit: BPF prog-id=13 op=LOAD Sep 13 00:14:38.738000 audit: BPF prog-id=14 op=LOAD Sep 13 00:14:38.738000 audit: BPF prog-id=4 op=UNLOAD Sep 13 00:14:38.738000 audit: BPF prog-id=5 op=UNLOAD Sep 13 00:14:38.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.752000 audit: BPF prog-id=12 op=UNLOAD Sep 13 00:14:38.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.828000 audit: BPF prog-id=15 op=LOAD Sep 13 00:14:38.828000 audit: BPF prog-id=16 op=LOAD Sep 13 00:14:38.828000 audit: BPF prog-id=17 op=LOAD Sep 13 00:14:38.828000 audit: BPF prog-id=13 op=UNLOAD Sep 13 00:14:38.828000 audit: BPF prog-id=14 op=UNLOAD Sep 13 00:14:38.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.845000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 13 00:14:38.845000 audit[1002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffd8185500 a2=4000 a3=1 items=0 ppid=1 pid=1002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:38.845000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 13 00:14:38.735965 systemd[1]: Queued start job for default target multi-user.target. Sep 13 00:14:37.027077 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:14:38.735976 systemd[1]: Unnecessary job was removed for dev-vda6.device. Sep 13 00:14:37.027335 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 00:14:38.739612 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 13 00:14:37.027354 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 00:14:37.027384 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 13 00:14:37.027393 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 13 00:14:37.027431 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 13 00:14:37.027443 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 13 00:14:37.027634 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 13 00:14:37.027667 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 00:14:37.027679 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 00:14:37.028369 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 13 00:14:37.028404 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 13 00:14:37.028430 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 13 00:14:37.028444 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 13 00:14:37.028462 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 13 00:14:37.028475 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:37Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 13 00:14:38.482843 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:38Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:14:38.483133 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:38Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:14:38.483234 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:38Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:14:38.483411 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:38Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:14:38.483464 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:38Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 13 00:14:38.483524 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-13T00:14:38Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 13 00:14:38.850514 systemd[1]: Started systemd-journald.service. Sep 13 00:14:38.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.851052 systemd[1]: Mounted media.mount. Sep 13 00:14:38.851668 systemd[1]: Mounted sys-kernel-debug.mount. Sep 13 00:14:38.852344 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 13 00:14:38.853010 systemd[1]: Mounted tmp.mount. Sep 13 00:14:38.854047 systemd[1]: Finished kmod-static-nodes.service. Sep 13 00:14:38.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.854912 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 13 00:14:38.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.855408 systemd[1]: Finished modprobe@configfs.service. Sep 13 00:14:38.856260 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:14:38.856418 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:14:38.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.857252 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 00:14:38.857394 systemd[1]: Finished modprobe@drm.service. Sep 13 00:14:38.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.858239 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:14:38.858378 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:14:38.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.859238 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 13 00:14:38.859374 systemd[1]: Finished modprobe@fuse.service. Sep 13 00:14:38.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.860334 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:14:38.860472 systemd[1]: Finished modprobe@loop.service. Sep 13 00:14:38.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.861383 systemd[1]: Finished flatcar-tmpfiles.service. Sep 13 00:14:38.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.862353 systemd[1]: Finished systemd-modules-load.service. Sep 13 00:14:38.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.863353 systemd[1]: Finished systemd-network-generator.service. Sep 13 00:14:38.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.864298 systemd[1]: Finished systemd-remount-fs.service. Sep 13 00:14:38.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.865367 systemd[1]: Reached target network-pre.target. Sep 13 00:14:38.867251 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 13 00:14:38.869042 systemd[1]: Mounting sys-kernel-config.mount... Sep 13 00:14:38.869625 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 13 00:14:38.870964 systemd[1]: Starting systemd-hwdb-update.service... Sep 13 00:14:38.873032 systemd[1]: Starting systemd-journal-flush.service... Sep 13 00:14:38.873901 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:14:38.874945 systemd[1]: Starting systemd-random-seed.service... Sep 13 00:14:38.875777 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:14:38.876956 systemd[1]: Starting systemd-sysctl.service... Sep 13 00:14:38.878991 systemd-journald[1002]: Time spent on flushing to /var/log/journal/f73cd77308534d8a8e9eef490e8c6a54 is 14.523ms for 986 entries. Sep 13 00:14:38.878991 systemd-journald[1002]: System Journal (/var/log/journal/f73cd77308534d8a8e9eef490e8c6a54) is 8.0M, max 195.6M, 187.6M free. Sep 13 00:14:38.908188 systemd-journald[1002]: Received client request to flush runtime journal. Sep 13 00:14:38.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:38.880161 systemd[1]: Starting systemd-sysusers.service... Sep 13 00:14:38.883759 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 13 00:14:38.909336 udevadm[1034]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 13 00:14:38.884693 systemd[1]: Mounted sys-kernel-config.mount. Sep 13 00:14:38.885643 systemd[1]: Finished systemd-random-seed.service. Sep 13 00:14:38.886590 systemd[1]: Reached target first-boot-complete.target. Sep 13 00:14:38.892672 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 00:14:38.894484 systemd[1]: Starting systemd-udev-settle.service... Sep 13 00:14:38.900363 systemd[1]: Finished systemd-sysctl.service. Sep 13 00:14:38.904612 systemd[1]: Finished systemd-sysusers.service. Sep 13 00:14:38.909006 systemd[1]: Finished systemd-journal-flush.service. Sep 13 00:14:38.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.243653 systemd[1]: Finished systemd-hwdb-update.service. Sep 13 00:14:39.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.247000 audit: BPF prog-id=18 op=LOAD Sep 13 00:14:39.247000 audit: BPF prog-id=19 op=LOAD Sep 13 00:14:39.247000 audit: BPF prog-id=7 op=UNLOAD Sep 13 00:14:39.247000 audit: BPF prog-id=8 op=UNLOAD Sep 13 00:14:39.247991 systemd[1]: Starting systemd-udevd.service... Sep 13 00:14:39.263692 systemd-udevd[1036]: Using default interface naming scheme 'v252'. Sep 13 00:14:39.276060 systemd[1]: Started systemd-udevd.service. Sep 13 00:14:39.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.277000 audit: BPF prog-id=20 op=LOAD Sep 13 00:14:39.281627 systemd[1]: Starting systemd-networkd.service... Sep 13 00:14:39.296000 audit: BPF prog-id=21 op=LOAD Sep 13 00:14:39.297000 audit: BPF prog-id=22 op=LOAD Sep 13 00:14:39.297000 audit: BPF prog-id=23 op=LOAD Sep 13 00:14:39.298060 systemd[1]: Starting systemd-userdbd.service... Sep 13 00:14:39.304969 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Sep 13 00:14:39.329255 systemd[1]: Started systemd-userdbd.service. Sep 13 00:14:39.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.335013 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 00:14:39.376912 systemd-networkd[1043]: lo: Link UP Sep 13 00:14:39.376926 systemd-networkd[1043]: lo: Gained carrier Sep 13 00:14:39.377329 systemd-networkd[1043]: Enumeration completed Sep 13 00:14:39.377454 systemd[1]: Started systemd-networkd.service. Sep 13 00:14:39.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.378417 systemd-networkd[1043]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 00:14:39.379736 systemd-networkd[1043]: eth0: Link UP Sep 13 00:14:39.379749 systemd-networkd[1043]: eth0: Gained carrier Sep 13 00:14:39.390460 systemd[1]: Finished systemd-udev-settle.service. Sep 13 00:14:39.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.392627 systemd[1]: Starting lvm2-activation-early.service... Sep 13 00:14:39.397197 systemd-networkd[1043]: eth0: DHCPv4 address 10.0.0.69/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 13 00:14:39.402579 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 00:14:39.429016 systemd[1]: Finished lvm2-activation-early.service. Sep 13 00:14:39.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.430142 systemd[1]: Reached target cryptsetup.target. Sep 13 00:14:39.432136 systemd[1]: Starting lvm2-activation.service... Sep 13 00:14:39.435902 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 00:14:39.467114 systemd[1]: Finished lvm2-activation.service. Sep 13 00:14:39.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.468141 systemd[1]: Reached target local-fs-pre.target. Sep 13 00:14:39.469032 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 13 00:14:39.469077 systemd[1]: Reached target local-fs.target. Sep 13 00:14:39.469855 systemd[1]: Reached target machines.target. Sep 13 00:14:39.472004 systemd[1]: Starting ldconfig.service... Sep 13 00:14:39.473289 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:14:39.473359 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:14:39.476474 systemd[1]: Starting systemd-boot-update.service... Sep 13 00:14:39.478864 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 13 00:14:39.482405 systemd[1]: Starting systemd-machine-id-commit.service... Sep 13 00:14:39.484964 systemd[1]: Starting systemd-sysext.service... Sep 13 00:14:39.486500 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1072 (bootctl) Sep 13 00:14:39.488553 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 13 00:14:39.499311 systemd[1]: Unmounting usr-share-oem.mount... Sep 13 00:14:39.507536 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 13 00:14:39.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.509966 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 13 00:14:39.510339 systemd[1]: Unmounted usr-share-oem.mount. Sep 13 00:14:39.556089 kernel: loop0: detected capacity change from 0 to 203944 Sep 13 00:14:39.558010 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 13 00:14:39.558909 systemd[1]: Finished systemd-machine-id-commit.service. Sep 13 00:14:39.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.568247 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 13 00:14:39.574189 systemd-fsck[1081]: fsck.fat 4.2 (2021-01-31) Sep 13 00:14:39.574189 systemd-fsck[1081]: /dev/vda1: 236 files, 117310/258078 clusters Sep 13 00:14:39.578827 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 13 00:14:39.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.582426 systemd[1]: Mounting boot.mount... Sep 13 00:14:39.586080 kernel: loop1: detected capacity change from 0 to 203944 Sep 13 00:14:39.590497 systemd[1]: Mounted boot.mount. Sep 13 00:14:39.594244 (sd-sysext)[1085]: Using extensions 'kubernetes'. Sep 13 00:14:39.595048 (sd-sysext)[1085]: Merged extensions into '/usr'. Sep 13 00:14:39.604925 systemd[1]: Finished systemd-boot-update.service. Sep 13 00:14:39.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.617410 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:14:39.618825 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:14:39.620743 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:14:39.622807 systemd[1]: Starting modprobe@loop.service... Sep 13 00:14:39.623648 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:14:39.623783 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:14:39.624587 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:14:39.624720 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:14:39.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.625940 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:14:39.626060 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:14:39.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.627264 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:14:39.627383 systemd[1]: Finished modprobe@loop.service. Sep 13 00:14:39.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.628477 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:14:39.628583 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:14:39.672907 ldconfig[1071]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 13 00:14:39.676660 systemd[1]: Finished ldconfig.service. Sep 13 00:14:39.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.845174 systemd[1]: Mounting usr-share-oem.mount... Sep 13 00:14:39.849933 systemd[1]: Mounted usr-share-oem.mount. Sep 13 00:14:39.851597 systemd[1]: Finished systemd-sysext.service. Sep 13 00:14:39.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:39.853445 systemd[1]: Starting ensure-sysext.service... Sep 13 00:14:39.854950 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 13 00:14:39.859399 systemd[1]: Reloading. Sep 13 00:14:39.866573 systemd-tmpfiles[1092]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 13 00:14:39.868676 systemd-tmpfiles[1092]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 13 00:14:39.871433 systemd-tmpfiles[1092]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 13 00:14:39.899143 /usr/lib/systemd/system-generators/torcx-generator[1112]: time="2025-09-13T00:14:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:14:39.899175 /usr/lib/systemd/system-generators/torcx-generator[1112]: time="2025-09-13T00:14:39Z" level=info msg="torcx already run" Sep 13 00:14:39.952344 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:14:39.952368 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:14:39.969287 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:14:40.010000 audit: BPF prog-id=24 op=LOAD Sep 13 00:14:40.010000 audit: BPF prog-id=25 op=LOAD Sep 13 00:14:40.010000 audit: BPF prog-id=18 op=UNLOAD Sep 13 00:14:40.011000 audit: BPF prog-id=19 op=UNLOAD Sep 13 00:14:40.011000 audit: BPF prog-id=26 op=LOAD Sep 13 00:14:40.011000 audit: BPF prog-id=15 op=UNLOAD Sep 13 00:14:40.011000 audit: BPF prog-id=27 op=LOAD Sep 13 00:14:40.011000 audit: BPF prog-id=28 op=LOAD Sep 13 00:14:40.011000 audit: BPF prog-id=16 op=UNLOAD Sep 13 00:14:40.011000 audit: BPF prog-id=17 op=UNLOAD Sep 13 00:14:40.013000 audit: BPF prog-id=29 op=LOAD Sep 13 00:14:40.013000 audit: BPF prog-id=20 op=UNLOAD Sep 13 00:14:40.014000 audit: BPF prog-id=30 op=LOAD Sep 13 00:14:40.014000 audit: BPF prog-id=21 op=UNLOAD Sep 13 00:14:40.014000 audit: BPF prog-id=31 op=LOAD Sep 13 00:14:40.014000 audit: BPF prog-id=32 op=LOAD Sep 13 00:14:40.014000 audit: BPF prog-id=22 op=UNLOAD Sep 13 00:14:40.014000 audit: BPF prog-id=23 op=UNLOAD Sep 13 00:14:40.016859 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 13 00:14:40.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.021277 systemd[1]: Starting audit-rules.service... Sep 13 00:14:40.022955 systemd[1]: Starting clean-ca-certificates.service... Sep 13 00:14:40.024960 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 13 00:14:40.026000 audit: BPF prog-id=33 op=LOAD Sep 13 00:14:40.028000 audit: BPF prog-id=34 op=LOAD Sep 13 00:14:40.027296 systemd[1]: Starting systemd-resolved.service... Sep 13 00:14:40.029401 systemd[1]: Starting systemd-timesyncd.service... Sep 13 00:14:40.031334 systemd[1]: Starting systemd-update-utmp.service... Sep 13 00:14:40.032537 systemd[1]: Finished clean-ca-certificates.service. Sep 13 00:14:40.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.035000 audit[1162]: SYSTEM_BOOT pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.035210 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:14:40.038196 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.039480 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:14:40.041294 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:14:40.044103 systemd[1]: Starting modprobe@loop.service... Sep 13 00:14:40.044770 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.044941 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:14:40.045092 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:14:40.046255 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:14:40.046399 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:14:40.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.047535 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:14:40.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.047639 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:14:40.048838 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 13 00:14:40.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.050115 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:14:40.050232 systemd[1]: Finished modprobe@loop.service. Sep 13 00:14:40.051331 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:14:40.051458 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.052797 systemd[1]: Starting systemd-update-done.service... Sep 13 00:14:40.054057 systemd[1]: Finished systemd-update-utmp.service. Sep 13 00:14:40.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.056717 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.057869 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:14:40.059618 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:14:40.061360 systemd[1]: Starting modprobe@loop.service... Sep 13 00:14:40.061961 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.062093 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:14:40.062185 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:14:40.062960 systemd[1]: Finished systemd-update-done.service. Sep 13 00:14:40.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.064380 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:14:40.064521 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:14:40.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.065685 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:14:40.065797 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:14:40.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.066869 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:14:40.066982 systemd[1]: Finished modprobe@loop.service. Sep 13 00:14:40.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:40.068181 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:14:40.068276 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.070484 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.072200 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:14:40.073000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 13 00:14:40.073000 audit[1178]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe6bc70c0 a2=420 a3=0 items=0 ppid=1151 pid=1178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:40.073000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 13 00:14:40.074869 augenrules[1178]: No rules Sep 13 00:14:40.074004 systemd[1]: Starting modprobe@drm.service... Sep 13 00:14:40.075962 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:14:40.077789 systemd[1]: Starting modprobe@loop.service... Sep 13 00:14:40.078700 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.078826 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:14:40.080089 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 13 00:14:40.080931 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:14:40.082003 systemd[1]: Finished audit-rules.service. Sep 13 00:14:40.083293 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:14:40.083428 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:14:40.084511 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 00:14:40.084625 systemd[1]: Finished modprobe@drm.service. Sep 13 00:14:40.085328 systemd-resolved[1157]: Positive Trust Anchors: Sep 13 00:14:40.085340 systemd-resolved[1157]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 00:14:40.085366 systemd-resolved[1157]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 00:14:40.085696 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:14:40.085807 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:14:40.087039 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:14:40.087170 systemd[1]: Finished modprobe@loop.service. Sep 13 00:14:40.088186 systemd[1]: Started systemd-timesyncd.service. Sep 13 00:14:40.088279 systemd-timesyncd[1159]: Contacted time server 10.0.0.1:123 (10.0.0.1). Sep 13 00:14:40.088547 systemd-timesyncd[1159]: Initial clock synchronization to Sat 2025-09-13 00:14:40.027182 UTC. Sep 13 00:14:40.089800 systemd[1]: Reached target time-set.target. Sep 13 00:14:40.090648 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:14:40.090688 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.090965 systemd[1]: Finished ensure-sysext.service. Sep 13 00:14:40.094556 systemd-resolved[1157]: Defaulting to hostname 'linux'. Sep 13 00:14:40.096279 systemd[1]: Started systemd-resolved.service. Sep 13 00:14:40.097008 systemd[1]: Reached target network.target. Sep 13 00:14:40.097751 systemd[1]: Reached target nss-lookup.target. Sep 13 00:14:40.098432 systemd[1]: Reached target sysinit.target. Sep 13 00:14:40.099113 systemd[1]: Started motdgen.path. Sep 13 00:14:40.099664 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 13 00:14:40.100758 systemd[1]: Started logrotate.timer. Sep 13 00:14:40.101489 systemd[1]: Started mdadm.timer. Sep 13 00:14:40.102034 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 13 00:14:40.102746 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 13 00:14:40.102774 systemd[1]: Reached target paths.target. Sep 13 00:14:40.103340 systemd[1]: Reached target timers.target. Sep 13 00:14:40.104222 systemd[1]: Listening on dbus.socket. Sep 13 00:14:40.105794 systemd[1]: Starting docker.socket... Sep 13 00:14:40.109230 systemd[1]: Listening on sshd.socket. Sep 13 00:14:40.109932 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:14:40.110453 systemd[1]: Listening on docker.socket. Sep 13 00:14:40.111153 systemd[1]: Reached target sockets.target. Sep 13 00:14:40.111741 systemd[1]: Reached target basic.target. Sep 13 00:14:40.112364 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.112405 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 00:14:40.113449 systemd[1]: Starting containerd.service... Sep 13 00:14:40.115185 systemd[1]: Starting dbus.service... Sep 13 00:14:40.116812 systemd[1]: Starting enable-oem-cloudinit.service... Sep 13 00:14:40.118686 systemd[1]: Starting extend-filesystems.service... Sep 13 00:14:40.119609 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 13 00:14:40.120773 systemd[1]: Starting motdgen.service... Sep 13 00:14:40.121249 jq[1193]: false Sep 13 00:14:40.122810 systemd[1]: Starting prepare-helm.service... Sep 13 00:14:40.124618 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 13 00:14:40.126450 systemd[1]: Starting sshd-keygen.service... Sep 13 00:14:40.129100 systemd[1]: Starting systemd-logind.service... Sep 13 00:14:40.129828 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:14:40.129910 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 13 00:14:40.130351 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 13 00:14:40.131432 systemd[1]: Starting update-engine.service... Sep 13 00:14:40.134213 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 13 00:14:40.136511 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 13 00:14:40.136706 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 13 00:14:40.136940 jq[1211]: true Sep 13 00:14:40.137905 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 13 00:14:40.138118 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 13 00:14:40.147034 tar[1214]: linux-arm64/helm Sep 13 00:14:40.149383 jq[1215]: true Sep 13 00:14:40.153441 dbus-daemon[1192]: [system] SELinux support is enabled Sep 13 00:14:40.153683 systemd[1]: Started dbus.service. Sep 13 00:14:40.155070 extend-filesystems[1194]: Found loop1 Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda1 Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda2 Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda3 Sep 13 00:14:40.155768 extend-filesystems[1194]: Found usr Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda4 Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda6 Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda7 Sep 13 00:14:40.155768 extend-filesystems[1194]: Found vda9 Sep 13 00:14:40.155768 extend-filesystems[1194]: Checking size of /dev/vda9 Sep 13 00:14:40.156014 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 13 00:14:40.156039 systemd[1]: Reached target system-config.target. Sep 13 00:14:40.156907 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 13 00:14:40.156920 systemd[1]: Reached target user-config.target. Sep 13 00:14:40.161885 systemd[1]: motdgen.service: Deactivated successfully. Sep 13 00:14:40.162048 systemd[1]: Finished motdgen.service. Sep 13 00:14:40.167668 extend-filesystems[1194]: Resized partition /dev/vda9 Sep 13 00:14:40.170040 extend-filesystems[1235]: resize2fs 1.46.5 (30-Dec-2021) Sep 13 00:14:40.186169 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Sep 13 00:14:40.186515 systemd-logind[1203]: Watching system buttons on /dev/input/event0 (Power Button) Sep 13 00:14:40.187501 systemd-logind[1203]: New seat seat0. Sep 13 00:14:40.193916 systemd[1]: Started systemd-logind.service. Sep 13 00:14:40.201734 update_engine[1207]: I0913 00:14:40.201493 1207 main.cc:92] Flatcar Update Engine starting Sep 13 00:14:40.204318 systemd[1]: Started update-engine.service. Sep 13 00:14:40.204458 update_engine[1207]: I0913 00:14:40.204437 1207 update_check_scheduler.cc:74] Next update check in 10m41s Sep 13 00:14:40.207044 systemd[1]: Started locksmithd.service. Sep 13 00:14:40.213088 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Sep 13 00:14:40.229380 bash[1242]: Updated "/home/core/.ssh/authorized_keys" Sep 13 00:14:40.230265 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 13 00:14:40.231887 extend-filesystems[1235]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Sep 13 00:14:40.231887 extend-filesystems[1235]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 13 00:14:40.231887 extend-filesystems[1235]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Sep 13 00:14:40.237803 extend-filesystems[1194]: Resized filesystem in /dev/vda9 Sep 13 00:14:40.233944 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 13 00:14:40.234101 systemd[1]: Finished extend-filesystems.service. Sep 13 00:14:40.250475 env[1216]: time="2025-09-13T00:14:40.249618920Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 13 00:14:40.268508 env[1216]: time="2025-09-13T00:14:40.268459440Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 13 00:14:40.268761 env[1216]: time="2025-09-13T00:14:40.268739680Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:14:40.270633 env[1216]: time="2025-09-13T00:14:40.270597400Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:14:40.270749 env[1216]: time="2025-09-13T00:14:40.270733760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:14:40.271144 env[1216]: time="2025-09-13T00:14:40.271118320Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:14:40.271365 env[1216]: time="2025-09-13T00:14:40.271346920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 13 00:14:40.271523 env[1216]: time="2025-09-13T00:14:40.271442160Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 13 00:14:40.271599 env[1216]: time="2025-09-13T00:14:40.271582960Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 13 00:14:40.271844 env[1216]: time="2025-09-13T00:14:40.271824040Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:14:40.272409 env[1216]: time="2025-09-13T00:14:40.272375280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:14:40.272760 env[1216]: time="2025-09-13T00:14:40.272734840Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:14:40.272830 env[1216]: time="2025-09-13T00:14:40.272816040Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 13 00:14:40.272974 env[1216]: time="2025-09-13T00:14:40.272952960Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 13 00:14:40.273182 env[1216]: time="2025-09-13T00:14:40.273164120Z" level=info msg="metadata content store policy set" policy=shared Sep 13 00:14:40.276475 env[1216]: time="2025-09-13T00:14:40.276449080Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 13 00:14:40.276580 env[1216]: time="2025-09-13T00:14:40.276564160Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 13 00:14:40.276676 env[1216]: time="2025-09-13T00:14:40.276660760Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 13 00:14:40.276849 env[1216]: time="2025-09-13T00:14:40.276830840Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.276919 env[1216]: time="2025-09-13T00:14:40.276905080Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.277034 env[1216]: time="2025-09-13T00:14:40.277019240Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.277240 env[1216]: time="2025-09-13T00:14:40.277222760Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.277730 env[1216]: time="2025-09-13T00:14:40.277693640Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.277854 env[1216]: time="2025-09-13T00:14:40.277836520Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.277920 env[1216]: time="2025-09-13T00:14:40.277906640Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.277978 env[1216]: time="2025-09-13T00:14:40.277963640Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.278057 env[1216]: time="2025-09-13T00:14:40.278022040Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 13 00:14:40.278335 env[1216]: time="2025-09-13T00:14:40.278312040Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 13 00:14:40.278513 env[1216]: time="2025-09-13T00:14:40.278494320Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 13 00:14:40.278818 env[1216]: time="2025-09-13T00:14:40.278796120Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 13 00:14:40.278920 env[1216]: time="2025-09-13T00:14:40.278903040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.278984 env[1216]: time="2025-09-13T00:14:40.278969600Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 13 00:14:40.279189 env[1216]: time="2025-09-13T00:14:40.279172360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279368 env[1216]: time="2025-09-13T00:14:40.279350400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279447 env[1216]: time="2025-09-13T00:14:40.279432840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279505 env[1216]: time="2025-09-13T00:14:40.279492400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279566 env[1216]: time="2025-09-13T00:14:40.279554120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279646 env[1216]: time="2025-09-13T00:14:40.279632200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279795 env[1216]: time="2025-09-13T00:14:40.279778360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279871 env[1216]: time="2025-09-13T00:14:40.279857080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.279972 env[1216]: time="2025-09-13T00:14:40.279957000Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 13 00:14:40.280408 env[1216]: time="2025-09-13T00:14:40.280374160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.280501 env[1216]: time="2025-09-13T00:14:40.280483480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.280560 env[1216]: time="2025-09-13T00:14:40.280547560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.280616 env[1216]: time="2025-09-13T00:14:40.280603320Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 13 00:14:40.280758 env[1216]: time="2025-09-13T00:14:40.280680800Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 13 00:14:40.280839 env[1216]: time="2025-09-13T00:14:40.280822600Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 13 00:14:40.280906 env[1216]: time="2025-09-13T00:14:40.280890360Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 13 00:14:40.280995 env[1216]: time="2025-09-13T00:14:40.280980000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 13 00:14:40.281301 locksmithd[1243]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 13 00:14:40.281543 env[1216]: time="2025-09-13T00:14:40.281264160Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 13 00:14:40.282188 env[1216]: time="2025-09-13T00:14:40.281909040Z" level=info msg="Connect containerd service" Sep 13 00:14:40.282188 env[1216]: time="2025-09-13T00:14:40.281991040Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 13 00:14:40.282878 env[1216]: time="2025-09-13T00:14:40.282850920Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 00:14:40.283193 env[1216]: time="2025-09-13T00:14:40.283149320Z" level=info msg="Start subscribing containerd event" Sep 13 00:14:40.283241 env[1216]: time="2025-09-13T00:14:40.283206040Z" level=info msg="Start recovering state" Sep 13 00:14:40.283279 env[1216]: time="2025-09-13T00:14:40.283269040Z" level=info msg="Start event monitor" Sep 13 00:14:40.283302 env[1216]: time="2025-09-13T00:14:40.283287640Z" level=info msg="Start snapshots syncer" Sep 13 00:14:40.283302 env[1216]: time="2025-09-13T00:14:40.283298320Z" level=info msg="Start cni network conf syncer for default" Sep 13 00:14:40.283340 env[1216]: time="2025-09-13T00:14:40.283305720Z" level=info msg="Start streaming server" Sep 13 00:14:40.283516 env[1216]: time="2025-09-13T00:14:40.283491280Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 13 00:14:40.283564 env[1216]: time="2025-09-13T00:14:40.283541040Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 13 00:14:40.284614 env[1216]: time="2025-09-13T00:14:40.283585840Z" level=info msg="containerd successfully booted in 0.044003s" Sep 13 00:14:40.283662 systemd[1]: Started containerd.service. Sep 13 00:14:40.526025 tar[1214]: linux-arm64/LICENSE Sep 13 00:14:40.526025 tar[1214]: linux-arm64/README.md Sep 13 00:14:40.530103 systemd[1]: Finished prepare-helm.service. Sep 13 00:14:41.188008 sshd_keygen[1212]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 13 00:14:41.188222 systemd-networkd[1043]: eth0: Gained IPv6LL Sep 13 00:14:41.190108 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 13 00:14:41.191210 systemd[1]: Reached target network-online.target. Sep 13 00:14:41.193561 systemd[1]: Starting kubelet.service... Sep 13 00:14:41.206091 systemd[1]: Finished sshd-keygen.service. Sep 13 00:14:41.208189 systemd[1]: Starting issuegen.service... Sep 13 00:14:41.212772 systemd[1]: issuegen.service: Deactivated successfully. Sep 13 00:14:41.212927 systemd[1]: Finished issuegen.service. Sep 13 00:14:41.214950 systemd[1]: Starting systemd-user-sessions.service... Sep 13 00:14:41.220833 systemd[1]: Finished systemd-user-sessions.service. Sep 13 00:14:41.223229 systemd[1]: Started getty@tty1.service. Sep 13 00:14:41.225266 systemd[1]: Started serial-getty@ttyAMA0.service. Sep 13 00:14:41.226231 systemd[1]: Reached target getty.target. Sep 13 00:14:41.786409 systemd[1]: Started kubelet.service. Sep 13 00:14:41.787984 systemd[1]: Reached target multi-user.target. Sep 13 00:14:41.792833 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 13 00:14:41.798627 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 13 00:14:41.799916 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 13 00:14:41.801481 systemd[1]: Startup finished in 547ms (kernel) + 4.288s (initrd) + 4.961s (userspace) = 9.797s. Sep 13 00:14:42.209461 kubelet[1273]: E0913 00:14:42.209356 1273 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:14:42.211522 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:14:42.211635 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:14:45.645956 systemd[1]: Created slice system-sshd.slice. Sep 13 00:14:45.653354 systemd[1]: Started sshd@0-10.0.0.69:22-10.0.0.1:32910.service. Sep 13 00:14:45.704925 sshd[1283]: Accepted publickey for core from 10.0.0.1 port 32910 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:14:45.706936 sshd[1283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:45.715369 systemd[1]: Created slice user-500.slice. Sep 13 00:14:45.717323 systemd[1]: Starting user-runtime-dir@500.service... Sep 13 00:14:45.721278 systemd-logind[1203]: New session 1 of user core. Sep 13 00:14:45.725795 systemd[1]: Finished user-runtime-dir@500.service. Sep 13 00:14:45.730138 systemd[1]: Starting user@500.service... Sep 13 00:14:45.732708 (systemd)[1286]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:45.796613 systemd[1286]: Queued start job for default target default.target. Sep 13 00:14:45.797128 systemd[1286]: Reached target paths.target. Sep 13 00:14:45.797161 systemd[1286]: Reached target sockets.target. Sep 13 00:14:45.797173 systemd[1286]: Reached target timers.target. Sep 13 00:14:45.797183 systemd[1286]: Reached target basic.target. Sep 13 00:14:45.797223 systemd[1286]: Reached target default.target. Sep 13 00:14:45.797252 systemd[1286]: Startup finished in 57ms. Sep 13 00:14:45.797588 systemd[1]: Started user@500.service. Sep 13 00:14:45.799682 systemd[1]: Started session-1.scope. Sep 13 00:14:45.855254 systemd[1]: Started sshd@1-10.0.0.69:22-10.0.0.1:32920.service. Sep 13 00:14:45.911837 sshd[1295]: Accepted publickey for core from 10.0.0.1 port 32920 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:14:45.913111 sshd[1295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:45.916932 systemd-logind[1203]: New session 2 of user core. Sep 13 00:14:45.918324 systemd[1]: Started session-2.scope. Sep 13 00:14:45.971916 sshd[1295]: pam_unix(sshd:session): session closed for user core Sep 13 00:14:45.975736 systemd[1]: sshd@1-10.0.0.69:22-10.0.0.1:32920.service: Deactivated successfully. Sep 13 00:14:45.976500 systemd[1]: session-2.scope: Deactivated successfully. Sep 13 00:14:45.977027 systemd-logind[1203]: Session 2 logged out. Waiting for processes to exit. Sep 13 00:14:46.006922 systemd[1]: Started sshd@2-10.0.0.69:22-10.0.0.1:32932.service. Sep 13 00:14:46.007732 systemd-logind[1203]: Removed session 2. Sep 13 00:14:46.045427 sshd[1301]: Accepted publickey for core from 10.0.0.1 port 32932 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:14:46.046615 sshd[1301]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:46.049807 systemd-logind[1203]: New session 3 of user core. Sep 13 00:14:46.050659 systemd[1]: Started session-3.scope. Sep 13 00:14:46.111930 sshd[1301]: pam_unix(sshd:session): session closed for user core Sep 13 00:14:46.116053 systemd[1]: Started sshd@3-10.0.0.69:22-10.0.0.1:32942.service. Sep 13 00:14:46.116529 systemd[1]: sshd@2-10.0.0.69:22-10.0.0.1:32932.service: Deactivated successfully. Sep 13 00:14:46.117818 systemd[1]: session-3.scope: Deactivated successfully. Sep 13 00:14:46.118379 systemd-logind[1203]: Session 3 logged out. Waiting for processes to exit. Sep 13 00:14:46.120168 systemd-logind[1203]: Removed session 3. Sep 13 00:14:46.156236 sshd[1306]: Accepted publickey for core from 10.0.0.1 port 32942 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:14:46.157494 sshd[1306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:46.162130 systemd-logind[1203]: New session 4 of user core. Sep 13 00:14:46.162179 systemd[1]: Started session-4.scope. Sep 13 00:14:46.219858 sshd[1306]: pam_unix(sshd:session): session closed for user core Sep 13 00:14:46.223889 systemd[1]: sshd@3-10.0.0.69:22-10.0.0.1:32942.service: Deactivated successfully. Sep 13 00:14:46.224618 systemd[1]: session-4.scope: Deactivated successfully. Sep 13 00:14:46.225241 systemd-logind[1203]: Session 4 logged out. Waiting for processes to exit. Sep 13 00:14:46.226422 systemd[1]: Started sshd@4-10.0.0.69:22-10.0.0.1:32946.service. Sep 13 00:14:46.231108 systemd-logind[1203]: Removed session 4. Sep 13 00:14:46.268388 sshd[1313]: Accepted publickey for core from 10.0.0.1 port 32946 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:14:46.269950 sshd[1313]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:46.274892 systemd-logind[1203]: New session 5 of user core. Sep 13 00:14:46.275774 systemd[1]: Started session-5.scope. Sep 13 00:14:46.350142 sudo[1316]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 13 00:14:46.350370 sudo[1316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:14:46.367995 dbus-daemon[1192]: avc: received setenforce notice (enforcing=1) Sep 13 00:14:46.368342 sudo[1316]: pam_unix(sudo:session): session closed for user root Sep 13 00:14:46.370428 sshd[1313]: pam_unix(sshd:session): session closed for user core Sep 13 00:14:46.374333 systemd[1]: Started sshd@5-10.0.0.69:22-10.0.0.1:32948.service. Sep 13 00:14:46.375847 systemd[1]: sshd@4-10.0.0.69:22-10.0.0.1:32946.service: Deactivated successfully. Sep 13 00:14:46.376477 systemd[1]: session-5.scope: Deactivated successfully. Sep 13 00:14:46.378820 systemd-logind[1203]: Session 5 logged out. Waiting for processes to exit. Sep 13 00:14:46.380530 systemd-logind[1203]: Removed session 5. Sep 13 00:14:46.413842 sshd[1319]: Accepted publickey for core from 10.0.0.1 port 32948 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:14:46.415695 sshd[1319]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:46.420873 systemd-logind[1203]: New session 6 of user core. Sep 13 00:14:46.421898 systemd[1]: Started session-6.scope. Sep 13 00:14:46.478569 sudo[1324]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 13 00:14:46.478802 sudo[1324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:14:46.481566 sudo[1324]: pam_unix(sudo:session): session closed for user root Sep 13 00:14:46.485755 sudo[1323]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 13 00:14:46.485968 sudo[1323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:14:46.499193 systemd[1]: Stopping audit-rules.service... Sep 13 00:14:46.500000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 00:14:46.501979 auditctl[1327]: No rules Sep 13 00:14:46.503687 kernel: kauditd_printk_skb: 104 callbacks suppressed Sep 13 00:14:46.503730 kernel: audit: type=1305 audit(1757722486.500:195): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 00:14:46.503747 kernel: audit: type=1300 audit(1757722486.500:195): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeadf7910 a2=420 a3=0 items=0 ppid=1 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.500000 audit[1327]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeadf7910 a2=420 a3=0 items=0 ppid=1 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.502380 systemd[1]: audit-rules.service: Deactivated successfully. Sep 13 00:14:46.502533 systemd[1]: Stopped audit-rules.service. Sep 13 00:14:46.506879 kernel: audit: type=1327 audit(1757722486.500:195): proctitle=2F7362696E2F617564697463746C002D44 Sep 13 00:14:46.500000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 13 00:14:46.507773 kernel: audit: type=1131 audit(1757722486.501:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.507244 systemd[1]: Starting audit-rules.service... Sep 13 00:14:46.521804 augenrules[1344]: No rules Sep 13 00:14:46.522436 systemd[1]: Finished audit-rules.service. Sep 13 00:14:46.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.523991 sudo[1323]: pam_unix(sudo:session): session closed for user root Sep 13 00:14:46.523000 audit[1323]: USER_END pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.526228 sshd[1319]: pam_unix(sshd:session): session closed for user core Sep 13 00:14:46.529947 kernel: audit: type=1130 audit(1757722486.521:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.529992 kernel: audit: type=1106 audit(1757722486.523:198): pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.530009 kernel: audit: type=1104 audit(1757722486.524:199): pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.524000 audit[1323]: CRED_DISP pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.69:22-10.0.0.1:32962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.531364 systemd[1]: Started sshd@6-10.0.0.69:22-10.0.0.1:32962.service. Sep 13 00:14:46.533614 systemd[1]: sshd@5-10.0.0.69:22-10.0.0.1:32948.service: Deactivated successfully. Sep 13 00:14:46.531000 audit[1319]: USER_END pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.534317 systemd[1]: session-6.scope: Deactivated successfully. Sep 13 00:14:46.535039 systemd-logind[1203]: Session 6 logged out. Waiting for processes to exit. Sep 13 00:14:46.538447 kernel: audit: type=1130 audit(1757722486.531:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.69:22-10.0.0.1:32962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.538500 kernel: audit: type=1106 audit(1757722486.531:201): pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.538517 kernel: audit: type=1104 audit(1757722486.531:202): pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.531000 audit[1319]: CRED_DISP pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.69:22-10.0.0.1:32948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.538956 systemd-logind[1203]: Removed session 6. Sep 13 00:14:46.572000 audit[1349]: USER_ACCT pid=1349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.574046 sshd[1349]: Accepted publickey for core from 10.0.0.1 port 32962 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:14:46.574000 audit[1349]: CRED_ACQ pid=1349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.574000 audit[1349]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe539aa50 a2=3 a3=1 items=0 ppid=1 pid=1349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.574000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:14:46.575568 sshd[1349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:14:46.578901 systemd-logind[1203]: New session 7 of user core. Sep 13 00:14:46.579704 systemd[1]: Started session-7.scope. Sep 13 00:14:46.582000 audit[1349]: USER_START pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.583000 audit[1352]: CRED_ACQ pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:14:46.631000 audit[1353]: USER_ACCT pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.633123 sudo[1353]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 13 00:14:46.632000 audit[1353]: CRED_REFR pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.633497 sudo[1353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:14:46.634000 audit[1353]: USER_START pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:14:46.677089 systemd[1]: Starting docker.service... Sep 13 00:14:46.740572 env[1365]: time="2025-09-13T00:14:46.740516422Z" level=info msg="Starting up" Sep 13 00:14:46.742101 env[1365]: time="2025-09-13T00:14:46.742055107Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 00:14:46.742196 env[1365]: time="2025-09-13T00:14:46.742183125Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 00:14:46.742261 env[1365]: time="2025-09-13T00:14:46.742247114Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 00:14:46.742322 env[1365]: time="2025-09-13T00:14:46.742309987Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 00:14:46.745368 env[1365]: time="2025-09-13T00:14:46.745008125Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 00:14:46.745368 env[1365]: time="2025-09-13T00:14:46.745024939Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 00:14:46.745368 env[1365]: time="2025-09-13T00:14:46.745037490Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 00:14:46.745368 env[1365]: time="2025-09-13T00:14:46.745047809Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 00:14:46.750714 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3403342930-merged.mount: Deactivated successfully. Sep 13 00:14:46.865162 env[1365]: time="2025-09-13T00:14:46.865103702Z" level=info msg="Loading containers: start." Sep 13 00:14:46.918000 audit[1399]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.918000 audit[1399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe3652bb0 a2=0 a3=1 items=0 ppid=1365 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.918000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 13 00:14:46.920000 audit[1401]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.920000 audit[1401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdc5afab0 a2=0 a3=1 items=0 ppid=1365 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 13 00:14:46.922000 audit[1403]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.922000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd2d540a0 a2=0 a3=1 items=0 ppid=1365 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.922000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 00:14:46.924000 audit[1405]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.924000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd46825d0 a2=0 a3=1 items=0 ppid=1365 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.924000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 00:14:46.927000 audit[1407]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.927000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeace9490 a2=0 a3=1 items=0 ppid=1365 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.927000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 13 00:14:46.957000 audit[1412]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.957000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff145b3c0 a2=0 a3=1 items=0 ppid=1365 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.957000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 13 00:14:46.965000 audit[1414]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.965000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc2befd40 a2=0 a3=1 items=0 ppid=1365 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 13 00:14:46.967000 audit[1416]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.967000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc44e5910 a2=0 a3=1 items=0 ppid=1365 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 13 00:14:46.969000 audit[1418]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.969000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffee1d0090 a2=0 a3=1 items=0 ppid=1365 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.969000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:14:46.979000 audit[1422]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.979000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffda9dfc90 a2=0 a3=1 items=0 ppid=1365 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.979000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:14:46.996000 audit[1423]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:46.996000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc1e26930 a2=0 a3=1 items=0 ppid=1365 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:46.996000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:14:47.023085 kernel: Initializing XFRM netlink socket Sep 13 00:14:47.049040 env[1365]: time="2025-09-13T00:14:47.048996301Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 13 00:14:47.067000 audit[1431]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.067000 audit[1431]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffe091690 a2=0 a3=1 items=0 ppid=1365 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.067000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 13 00:14:47.085000 audit[1434]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.085000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe6af0640 a2=0 a3=1 items=0 ppid=1365 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.085000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 13 00:14:47.088000 audit[1437]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.088000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffef28db10 a2=0 a3=1 items=0 ppid=1365 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.088000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 13 00:14:47.090000 audit[1439]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.090000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe633d770 a2=0 a3=1 items=0 ppid=1365 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.090000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 13 00:14:47.091000 audit[1441]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.091000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd52376b0 a2=0 a3=1 items=0 ppid=1365 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 13 00:14:47.093000 audit[1443]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.093000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc7b7ff60 a2=0 a3=1 items=0 ppid=1365 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 13 00:14:47.095000 audit[1445]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.095000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffe0bff700 a2=0 a3=1 items=0 ppid=1365 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.095000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 13 00:14:47.101000 audit[1448]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.101000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffda0519f0 a2=0 a3=1 items=0 ppid=1365 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.101000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 13 00:14:47.103000 audit[1450]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.103000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe3cdc2e0 a2=0 a3=1 items=0 ppid=1365 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.103000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 00:14:47.104000 audit[1452]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.104000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd965fce0 a2=0 a3=1 items=0 ppid=1365 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.104000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 00:14:47.106000 audit[1454]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.106000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe150bb30 a2=0 a3=1 items=0 ppid=1365 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 13 00:14:47.108181 systemd-networkd[1043]: docker0: Link UP Sep 13 00:14:47.115000 audit[1458]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.115000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffced0f3c0 a2=0 a3=1 items=0 ppid=1365 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.115000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:14:47.126000 audit[1459]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:14:47.126000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffff25aa60 a2=0 a3=1 items=0 ppid=1365 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:14:47.126000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:14:47.128354 env[1365]: time="2025-09-13T00:14:47.128304105Z" level=info msg="Loading containers: done." Sep 13 00:14:47.143655 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1718543395-merged.mount: Deactivated successfully. Sep 13 00:14:47.152456 env[1365]: time="2025-09-13T00:14:47.152397980Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 13 00:14:47.152714 env[1365]: time="2025-09-13T00:14:47.152667735Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 13 00:14:47.152845 env[1365]: time="2025-09-13T00:14:47.152817461Z" level=info msg="Daemon has completed initialization" Sep 13 00:14:47.166914 systemd[1]: Started docker.service. Sep 13 00:14:47.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:47.175370 env[1365]: time="2025-09-13T00:14:47.175252426Z" level=info msg="API listen on /run/docker.sock" Sep 13 00:14:47.765531 env[1216]: time="2025-09-13T00:14:47.765285735Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.13\"" Sep 13 00:14:48.364752 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1939787131.mount: Deactivated successfully. Sep 13 00:14:49.622526 env[1216]: time="2025-09-13T00:14:49.622481637Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:49.625207 env[1216]: time="2025-09-13T00:14:49.625181912Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0b1c07d8fd4a3526d5c44502e682df3627a3b01c1e608e5e24c3519c8fb337b6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:49.627021 env[1216]: time="2025-09-13T00:14:49.626998026Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:49.628966 env[1216]: time="2025-09-13T00:14:49.628935422Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:9abeb8a2d3e53e356d1f2e5d5dc2081cf28f23242651b0552c9e38f4a7ae960e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:49.629793 env[1216]: time="2025-09-13T00:14:49.629763928Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.13\" returns image reference \"sha256:0b1c07d8fd4a3526d5c44502e682df3627a3b01c1e608e5e24c3519c8fb337b6\"" Sep 13 00:14:49.631083 env[1216]: time="2025-09-13T00:14:49.631034155Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.13\"" Sep 13 00:14:50.959583 env[1216]: time="2025-09-13T00:14:50.959536592Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:50.961746 env[1216]: time="2025-09-13T00:14:50.961713275Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c359cb88f3d2147f2cb4c5ada4fbdeadc4b1c009d66c8f33f3856efaf04ee6ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:50.964081 env[1216]: time="2025-09-13T00:14:50.964051189Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:50.965717 env[1216]: time="2025-09-13T00:14:50.965690107Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:facc91288697a288a691520949fe4eec40059ef065c89da8e10481d14e131b09,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:50.966575 env[1216]: time="2025-09-13T00:14:50.966545863Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.13\" returns image reference \"sha256:c359cb88f3d2147f2cb4c5ada4fbdeadc4b1c009d66c8f33f3856efaf04ee6ef\"" Sep 13 00:14:50.967096 env[1216]: time="2025-09-13T00:14:50.967075328Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.13\"" Sep 13 00:14:52.167252 env[1216]: time="2025-09-13T00:14:52.167190872Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:52.168800 env[1216]: time="2025-09-13T00:14:52.168776128Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e3cbe2ba7db787c6aebfcf4484156dd4ebd7ede811ef72e8929593e59a5fa27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:52.170902 env[1216]: time="2025-09-13T00:14:52.170875960Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:52.173090 env[1216]: time="2025-09-13T00:14:52.173038801Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:c5ce150dcce2419fdef9f9875fef43014355ccebf937846ed3a2971953f9b241,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:52.173907 env[1216]: time="2025-09-13T00:14:52.173871139Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.13\" returns image reference \"sha256:5e3cbe2ba7db787c6aebfcf4484156dd4ebd7ede811ef72e8929593e59a5fa27\"" Sep 13 00:14:52.174313 env[1216]: time="2025-09-13T00:14:52.174293517Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.13\"" Sep 13 00:14:52.462344 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 13 00:14:52.463326 kernel: kauditd_printk_skb: 84 callbacks suppressed Sep 13 00:14:52.463371 kernel: audit: type=1130 audit(1757722492.462:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:52.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:52.462519 systemd[1]: Stopped kubelet.service. Sep 13 00:14:52.464106 systemd[1]: Starting kubelet.service... Sep 13 00:14:52.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:52.466998 kernel: audit: type=1131 audit(1757722492.462:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:52.554788 systemd[1]: Started kubelet.service. Sep 13 00:14:52.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:52.561171 kernel: audit: type=1130 audit(1757722492.553:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:14:52.590055 kubelet[1501]: E0913 00:14:52.589950 1501 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:14:52.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:14:52.592711 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:14:52.592826 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:14:52.595092 kernel: audit: type=1131 audit(1757722492.591:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:14:53.342208 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1931810588.mount: Deactivated successfully. Sep 13 00:14:53.938703 env[1216]: time="2025-09-13T00:14:53.938650249Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:53.945141 env[1216]: time="2025-09-13T00:14:53.945095745Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c15699f0b7002450249485b10f20211982dfd2bec4d61c86c35acebc659e794e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:53.947892 env[1216]: time="2025-09-13T00:14:53.947857981Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:53.950983 env[1216]: time="2025-09-13T00:14:53.950952506Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:a39637326e88d128d38da6ff2b2ceb4e856475887bfcb5f7a55734d4f63d9fae,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:53.952851 env[1216]: time="2025-09-13T00:14:53.952466620Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.13\" returns image reference \"sha256:c15699f0b7002450249485b10f20211982dfd2bec4d61c86c35acebc659e794e\"" Sep 13 00:14:53.953708 env[1216]: time="2025-09-13T00:14:53.953360247Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 13 00:14:54.510782 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1296981672.mount: Deactivated successfully. Sep 13 00:14:55.400095 env[1216]: time="2025-09-13T00:14:55.400039197Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.401656 env[1216]: time="2025-09-13T00:14:55.401621297Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.405778 env[1216]: time="2025-09-13T00:14:55.405737217Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.408668 env[1216]: time="2025-09-13T00:14:55.408620426Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.410564 env[1216]: time="2025-09-13T00:14:55.409720293Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Sep 13 00:14:55.411057 env[1216]: time="2025-09-13T00:14:55.411028514Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 13 00:14:55.835980 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount316816547.mount: Deactivated successfully. Sep 13 00:14:55.849279 env[1216]: time="2025-09-13T00:14:55.849213060Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.853103 env[1216]: time="2025-09-13T00:14:55.853015268Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.855811 env[1216]: time="2025-09-13T00:14:55.855425035Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.858959 env[1216]: time="2025-09-13T00:14:55.858363059Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:55.858959 env[1216]: time="2025-09-13T00:14:55.858922482Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 13 00:14:55.860703 env[1216]: time="2025-09-13T00:14:55.860207930Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Sep 13 00:14:56.380625 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount533352053.mount: Deactivated successfully. Sep 13 00:14:58.543781 env[1216]: time="2025-09-13T00:14:58.543732557Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:58.546296 env[1216]: time="2025-09-13T00:14:58.546257049Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:58.548322 env[1216]: time="2025-09-13T00:14:58.548289929Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:58.551201 env[1216]: time="2025-09-13T00:14:58.551170740Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:14:58.551922 env[1216]: time="2025-09-13T00:14:58.551863834Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Sep 13 00:15:02.844253 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 13 00:15:02.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:02.844536 systemd[1]: Stopped kubelet.service. Sep 13 00:15:02.846273 systemd[1]: Starting kubelet.service... Sep 13 00:15:02.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:02.849177 kernel: audit: type=1130 audit(1757722502.843:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:02.849289 kernel: audit: type=1131 audit(1757722502.843:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:02.943161 systemd[1]: Started kubelet.service. Sep 13 00:15:02.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:02.946084 kernel: audit: type=1130 audit(1757722502.943:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:02.976557 kubelet[1533]: E0913 00:15:02.976516 1533 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:15:02.978194 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:15:02.978323 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:15:02.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:15:02.981089 kernel: audit: type=1131 audit(1757722502.978:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:15:04.066710 systemd[1]: Stopped kubelet.service. Sep 13 00:15:04.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:04.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:04.069946 systemd[1]: Starting kubelet.service... Sep 13 00:15:04.071211 kernel: audit: type=1130 audit(1757722504.065:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:04.071273 kernel: audit: type=1131 audit(1757722504.065:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:04.105317 systemd[1]: Reloading. Sep 13 00:15:04.157363 /usr/lib/systemd/system-generators/torcx-generator[1567]: time="2025-09-13T00:15:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:15:04.157395 /usr/lib/systemd/system-generators/torcx-generator[1567]: time="2025-09-13T00:15:04Z" level=info msg="torcx already run" Sep 13 00:15:04.285619 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:15:04.285641 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:15:04.301126 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.354704 kernel: audit: type=1400 audit(1757722504.349:247): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.354773 kernel: audit: type=1400 audit(1757722504.349:248): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.354793 kernel: audit: type=1400 audit(1757722504.349:249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.356837 kernel: audit: type=1400 audit(1757722504.349:250): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit: BPF prog-id=40 op=LOAD Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit: BPF prog-id=41 op=LOAD Sep 13 00:15:04.353000 audit: BPF prog-id=24 op=UNLOAD Sep 13 00:15:04.353000 audit: BPF prog-id=25 op=UNLOAD Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit: BPF prog-id=42 op=LOAD Sep 13 00:15:04.355000 audit: BPF prog-id=26 op=UNLOAD Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit: BPF prog-id=43 op=LOAD Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.359000 audit: BPF prog-id=44 op=LOAD Sep 13 00:15:04.359000 audit: BPF prog-id=27 op=UNLOAD Sep 13 00:15:04.359000 audit: BPF prog-id=28 op=UNLOAD Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.360000 audit: BPF prog-id=45 op=LOAD Sep 13 00:15:04.360000 audit: BPF prog-id=34 op=UNLOAD Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.361000 audit: BPF prog-id=46 op=LOAD Sep 13 00:15:04.361000 audit: BPF prog-id=38 op=UNLOAD Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit: BPF prog-id=47 op=LOAD Sep 13 00:15:04.364000 audit: BPF prog-id=35 op=UNLOAD Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit: BPF prog-id=48 op=LOAD Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit: BPF prog-id=49 op=LOAD Sep 13 00:15:04.364000 audit: BPF prog-id=36 op=UNLOAD Sep 13 00:15:04.364000 audit: BPF prog-id=37 op=UNLOAD Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.364000 audit: BPF prog-id=50 op=LOAD Sep 13 00:15:04.364000 audit: BPF prog-id=29 op=UNLOAD Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit: BPF prog-id=51 op=LOAD Sep 13 00:15:04.366000 audit: BPF prog-id=30 op=UNLOAD Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit: BPF prog-id=52 op=LOAD Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.367000 audit: BPF prog-id=53 op=LOAD Sep 13 00:15:04.367000 audit: BPF prog-id=31 op=UNLOAD Sep 13 00:15:04.367000 audit: BPF prog-id=32 op=UNLOAD Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:04.368000 audit: BPF prog-id=54 op=LOAD Sep 13 00:15:04.368000 audit: BPF prog-id=33 op=UNLOAD Sep 13 00:15:04.377713 systemd[1]: Started kubelet.service. Sep 13 00:15:04.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:04.389090 systemd[1]: Stopping kubelet.service... Sep 13 00:15:04.389799 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 00:15:04.390115 systemd[1]: Stopped kubelet.service. Sep 13 00:15:04.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:04.392611 systemd[1]: Starting kubelet.service... Sep 13 00:15:04.481857 systemd[1]: Started kubelet.service. Sep 13 00:15:04.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:04.522213 kubelet[1616]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:15:04.522213 kubelet[1616]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 13 00:15:04.522213 kubelet[1616]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:15:04.522552 kubelet[1616]: I0913 00:15:04.522254 1616 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 00:15:05.653319 kubelet[1616]: I0913 00:15:05.653269 1616 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 13 00:15:05.653319 kubelet[1616]: I0913 00:15:05.653301 1616 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 00:15:05.653777 kubelet[1616]: I0913 00:15:05.653707 1616 server.go:934] "Client rotation is on, will bootstrap in background" Sep 13 00:15:05.689640 kubelet[1616]: I0913 00:15:05.689601 1616 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 00:15:05.690278 kubelet[1616]: E0913 00:15:05.690202 1616 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.69:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:05.696730 kubelet[1616]: E0913 00:15:05.696690 1616 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 00:15:05.696835 kubelet[1616]: I0913 00:15:05.696822 1616 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 00:15:05.700958 kubelet[1616]: I0913 00:15:05.700934 1616 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 00:15:05.701378 kubelet[1616]: I0913 00:15:05.701361 1616 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 13 00:15:05.701611 kubelet[1616]: I0913 00:15:05.701581 1616 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 00:15:05.701833 kubelet[1616]: I0913 00:15:05.701669 1616 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 00:15:05.702016 kubelet[1616]: I0913 00:15:05.702003 1616 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 00:15:05.702094 kubelet[1616]: I0913 00:15:05.702063 1616 container_manager_linux.go:300] "Creating device plugin manager" Sep 13 00:15:05.702386 kubelet[1616]: I0913 00:15:05.702371 1616 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:15:05.709758 kubelet[1616]: I0913 00:15:05.709732 1616 kubelet.go:408] "Attempting to sync node with API server" Sep 13 00:15:05.709858 kubelet[1616]: I0913 00:15:05.709844 1616 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 00:15:05.709924 kubelet[1616]: I0913 00:15:05.709914 1616 kubelet.go:314] "Adding apiserver pod source" Sep 13 00:15:05.710042 kubelet[1616]: I0913 00:15:05.710032 1616 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 00:15:05.720778 kubelet[1616]: W0913 00:15:05.720719 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.69:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:05.720852 kubelet[1616]: E0913 00:15:05.720800 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.69:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:05.720911 kubelet[1616]: W0913 00:15:05.720883 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:05.720941 kubelet[1616]: E0913 00:15:05.720918 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:05.728139 kubelet[1616]: I0913 00:15:05.728106 1616 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 00:15:05.728966 kubelet[1616]: I0913 00:15:05.728952 1616 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 00:15:05.729134 kubelet[1616]: W0913 00:15:05.729123 1616 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 13 00:15:05.730625 kubelet[1616]: I0913 00:15:05.730602 1616 server.go:1274] "Started kubelet" Sep 13 00:15:05.730903 kubelet[1616]: I0913 00:15:05.730864 1616 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 00:15:05.733354 kubelet[1616]: I0913 00:15:05.733322 1616 server.go:449] "Adding debug handlers to kubelet server" Sep 13 00:15:05.734000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:05.734000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:15:05.734000 audit[1616]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000784c60 a1=4000c8b1a0 a2=4000784c30 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.734000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:15:05.734000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:05.734000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:15:05.734000 audit[1616]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c91440 a1=4000c8b1b8 a2=4000784cf0 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.734000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:15:05.734987 kubelet[1616]: I0913 00:15:05.734679 1616 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 00:15:05.734987 kubelet[1616]: I0913 00:15:05.734717 1616 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 13 00:15:05.734987 kubelet[1616]: I0913 00:15:05.734777 1616 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 00:15:05.735458 kubelet[1616]: I0913 00:15:05.735397 1616 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 00:15:05.736183 kubelet[1616]: I0913 00:15:05.736163 1616 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 13 00:15:05.736726 kubelet[1616]: I0913 00:15:05.736698 1616 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 13 00:15:05.736726 kubelet[1616]: I0913 00:15:05.736745 1616 reconciler.go:26] "Reconciler: start to sync state" Sep 13 00:15:05.738183 kubelet[1616]: E0913 00:15:05.737301 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:05.738676 kubelet[1616]: W0913 00:15:05.738637 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.69:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:05.738732 kubelet[1616]: E0913 00:15:05.738681 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.69:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:05.738757 kubelet[1616]: E0913 00:15:05.738731 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.69:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.69:6443: connect: connection refused" interval="200ms" Sep 13 00:15:05.740000 audit[1629]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.740000 audit[1629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffee445fc0 a2=0 a3=1 items=0 ppid=1616 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.740000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 00:15:05.741000 audit[1630]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.741000 audit[1630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc83682f0 a2=0 a3=1 items=0 ppid=1616 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.741000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 00:15:05.743470 kubelet[1616]: I0913 00:15:05.743437 1616 factory.go:221] Registration of the systemd container factory successfully Sep 13 00:15:05.743552 kubelet[1616]: I0913 00:15:05.743535 1616 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 00:15:05.744000 audit[1632]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.744000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff01766f0 a2=0 a3=1 items=0 ppid=1616 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.744000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:15:05.746495 kubelet[1616]: I0913 00:15:05.746475 1616 factory.go:221] Registration of the containerd container factory successfully Sep 13 00:15:05.747000 audit[1634]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.747000 audit[1634]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd0ddb8b0 a2=0 a3=1 items=0 ppid=1616 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.747000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:15:05.749631 kubelet[1616]: I0913 00:15:05.749575 1616 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 00:15:05.749813 kubelet[1616]: I0913 00:15:05.749796 1616 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 00:15:05.752603 kubelet[1616]: E0913 00:15:05.752583 1616 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 00:15:05.755117 kubelet[1616]: E0913 00:15:05.753991 1616 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.69:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.69:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1864af4e5fc7d5d7 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-13 00:15:05.730577879 +0000 UTC m=+1.245332321,LastTimestamp:2025-09-13 00:15:05.730577879 +0000 UTC m=+1.245332321,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 13 00:15:05.760000 audit[1638]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.760000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffda916220 a2=0 a3=1 items=0 ppid=1616 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 13 00:15:05.760774 kubelet[1616]: I0913 00:15:05.760725 1616 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 00:15:05.761000 audit[1640]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:05.761000 audit[1640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff8687b30 a2=0 a3=1 items=0 ppid=1616 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.761000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 00:15:05.761685 kubelet[1616]: I0913 00:15:05.761664 1616 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 00:15:05.761721 kubelet[1616]: I0913 00:15:05.761687 1616 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 13 00:15:05.761721 kubelet[1616]: I0913 00:15:05.761707 1616 kubelet.go:2321] "Starting kubelet main sync loop" Sep 13 00:15:05.761762 kubelet[1616]: E0913 00:15:05.761741 1616 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 00:15:05.762000 audit[1642]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.762000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe85c3980 a2=0 a3=1 items=0 ppid=1616 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.762000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 00:15:05.763000 audit[1643]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.763000 audit[1643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf2b6440 a2=0 a3=1 items=0 ppid=1616 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 00:15:05.764000 audit[1644]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:05.764000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd8320e50 a2=0 a3=1 items=0 ppid=1616 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.764000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 00:15:05.764000 audit[1645]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:05.764000 audit[1645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff1c62d10 a2=0 a3=1 items=0 ppid=1616 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.764000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 00:15:05.765158 kubelet[1616]: I0913 00:15:05.765117 1616 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 13 00:15:05.765158 kubelet[1616]: I0913 00:15:05.765138 1616 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 13 00:15:05.765254 kubelet[1616]: I0913 00:15:05.765168 1616 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:15:05.765462 kubelet[1616]: W0913 00:15:05.765421 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:05.765525 kubelet[1616]: E0913 00:15:05.765469 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:05.766000 audit[1649]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:05.766000 audit[1649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff9bed4a0 a2=0 a3=1 items=0 ppid=1616 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 00:15:05.767000 audit[1650]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:05.767000 audit[1650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffebaff950 a2=0 a3=1 items=0 ppid=1616 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 00:15:05.836365 kubelet[1616]: I0913 00:15:05.836325 1616 policy_none.go:49] "None policy: Start" Sep 13 00:15:05.837166 kubelet[1616]: I0913 00:15:05.837143 1616 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 13 00:15:05.837259 kubelet[1616]: I0913 00:15:05.837176 1616 state_mem.go:35] "Initializing new in-memory state store" Sep 13 00:15:05.837524 kubelet[1616]: E0913 00:15:05.837464 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:05.841808 systemd[1]: Created slice kubepods.slice. Sep 13 00:15:05.854486 systemd[1]: Created slice kubepods-burstable.slice. Sep 13 00:15:05.856902 systemd[1]: Created slice kubepods-besteffort.slice. Sep 13 00:15:05.862687 kubelet[1616]: E0913 00:15:05.862663 1616 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 13 00:15:05.869000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:05.869000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:15:05.869000 audit[1616]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f00f90 a1=4000f0e9c0 a2=4000f00f60 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:05.869000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:15:05.871286 kubelet[1616]: I0913 00:15:05.870169 1616 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 00:15:05.871286 kubelet[1616]: I0913 00:15:05.870242 1616 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 00:15:05.871286 kubelet[1616]: I0913 00:15:05.870389 1616 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 00:15:05.871286 kubelet[1616]: I0913 00:15:05.870400 1616 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 00:15:05.871286 kubelet[1616]: I0913 00:15:05.870763 1616 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 00:15:05.873554 kubelet[1616]: E0913 00:15:05.873535 1616 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Sep 13 00:15:05.939669 kubelet[1616]: E0913 00:15:05.939198 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.69:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.69:6443: connect: connection refused" interval="400ms" Sep 13 00:15:05.974063 kubelet[1616]: I0913 00:15:05.973657 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 13 00:15:05.974528 kubelet[1616]: E0913 00:15:05.974492 1616 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.69:6443/api/v1/nodes\": dial tcp 10.0.0.69:6443: connect: connection refused" node="localhost" Sep 13 00:15:06.083200 systemd[1]: Created slice kubepods-burstable-pod79c07c93a7d61ced5b4d56e1bd6f387a.slice. Sep 13 00:15:06.113490 systemd[1]: Created slice kubepods-burstable-pod71d8bf7bd9b7c7432927bee9d50592b5.slice. Sep 13 00:15:06.118746 systemd[1]: Created slice kubepods-burstable-podfe5e332fba00ba0b5b33a25fe2e8fd7b.slice. Sep 13 00:15:06.139354 kubelet[1616]: I0913 00:15:06.139308 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/79c07c93a7d61ced5b4d56e1bd6f387a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"79c07c93a7d61ced5b4d56e1bd6f387a\") " pod="kube-system/kube-apiserver-localhost" Sep 13 00:15:06.139354 kubelet[1616]: I0913 00:15:06.139350 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:06.139458 kubelet[1616]: I0913 00:15:06.139382 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:06.139458 kubelet[1616]: I0913 00:15:06.139399 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fe5e332fba00ba0b5b33a25fe2e8fd7b-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fe5e332fba00ba0b5b33a25fe2e8fd7b\") " pod="kube-system/kube-scheduler-localhost" Sep 13 00:15:06.139458 kubelet[1616]: I0913 00:15:06.139416 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/79c07c93a7d61ced5b4d56e1bd6f387a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"79c07c93a7d61ced5b4d56e1bd6f387a\") " pod="kube-system/kube-apiserver-localhost" Sep 13 00:15:06.139458 kubelet[1616]: I0913 00:15:06.139431 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:06.139458 kubelet[1616]: I0913 00:15:06.139445 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:06.139577 kubelet[1616]: I0913 00:15:06.139469 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:06.139577 kubelet[1616]: I0913 00:15:06.139484 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/79c07c93a7d61ced5b4d56e1bd6f387a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"79c07c93a7d61ced5b4d56e1bd6f387a\") " pod="kube-system/kube-apiserver-localhost" Sep 13 00:15:06.176616 kubelet[1616]: I0913 00:15:06.176573 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 13 00:15:06.177615 kubelet[1616]: E0913 00:15:06.177577 1616 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.69:6443/api/v1/nodes\": dial tcp 10.0.0.69:6443: connect: connection refused" node="localhost" Sep 13 00:15:06.339994 kubelet[1616]: E0913 00:15:06.339870 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.69:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.69:6443: connect: connection refused" interval="800ms" Sep 13 00:15:06.409457 kubelet[1616]: E0913 00:15:06.409403 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:06.410039 env[1216]: time="2025-09-13T00:15:06.409988307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:79c07c93a7d61ced5b4d56e1bd6f387a,Namespace:kube-system,Attempt:0,}" Sep 13 00:15:06.417704 kubelet[1616]: E0913 00:15:06.417675 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:06.418692 env[1216]: time="2025-09-13T00:15:06.418243034Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:71d8bf7bd9b7c7432927bee9d50592b5,Namespace:kube-system,Attempt:0,}" Sep 13 00:15:06.437177 kubelet[1616]: E0913 00:15:06.437141 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:06.437693 env[1216]: time="2025-09-13T00:15:06.437550493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fe5e332fba00ba0b5b33a25fe2e8fd7b,Namespace:kube-system,Attempt:0,}" Sep 13 00:15:06.561699 kubelet[1616]: W0913 00:15:06.561572 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:06.561699 kubelet[1616]: E0913 00:15:06.561643 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:06.579029 kubelet[1616]: I0913 00:15:06.579002 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 13 00:15:06.579384 kubelet[1616]: E0913 00:15:06.579349 1616 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.69:6443/api/v1/nodes\": dial tcp 10.0.0.69:6443: connect: connection refused" node="localhost" Sep 13 00:15:06.753046 kubelet[1616]: W0913 00:15:06.752804 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.69:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:06.753046 kubelet[1616]: E0913 00:15:06.752879 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.69:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:06.883281 kubelet[1616]: W0913 00:15:06.878525 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.69:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:06.883281 kubelet[1616]: E0913 00:15:06.878594 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.69:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:06.973897 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4066078566.mount: Deactivated successfully. Sep 13 00:15:06.979824 env[1216]: time="2025-09-13T00:15:06.979763849Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.983061 env[1216]: time="2025-09-13T00:15:06.983025167Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.984411 env[1216]: time="2025-09-13T00:15:06.984367763Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.985902 env[1216]: time="2025-09-13T00:15:06.985851122Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.987016 env[1216]: time="2025-09-13T00:15:06.986982256Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.995191 env[1216]: time="2025-09-13T00:15:06.989677248Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.995191 env[1216]: time="2025-09-13T00:15:06.991497835Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.995191 env[1216]: time="2025-09-13T00:15:06.993801052Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:06.996907 env[1216]: time="2025-09-13T00:15:06.996854746Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:07.000591 env[1216]: time="2025-09-13T00:15:07.000537630Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:07.003433 env[1216]: time="2025-09-13T00:15:07.001234567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:07.003433 env[1216]: time="2025-09-13T00:15:07.001974192Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:07.023714 env[1216]: time="2025-09-13T00:15:07.022093191Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:07.023714 env[1216]: time="2025-09-13T00:15:07.022129503Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:07.023714 env[1216]: time="2025-09-13T00:15:07.022145779Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:07.023714 env[1216]: time="2025-09-13T00:15:07.022642581Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/30d30cacf3c32fdbb2b9488d6e2cf6f025aea718288e1e40ef2935e0e526d622 pid=1658 runtime=io.containerd.runc.v2 Sep 13 00:15:07.027641 env[1216]: time="2025-09-13T00:15:07.027563377Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:07.027641 env[1216]: time="2025-09-13T00:15:07.027602328Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:07.027813 env[1216]: time="2025-09-13T00:15:07.027779646Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:07.028035 env[1216]: time="2025-09-13T00:15:07.027998394Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/514e680bd33208c7fa2f3f24c33aa155a6b09f2e88556abf40d877d6524d1359 pid=1683 runtime=io.containerd.runc.v2 Sep 13 00:15:07.029055 env[1216]: time="2025-09-13T00:15:07.028996878Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:07.029055 env[1216]: time="2025-09-13T00:15:07.029030950Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:07.029055 env[1216]: time="2025-09-13T00:15:07.029040987Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:07.029206 env[1216]: time="2025-09-13T00:15:07.029159479Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b8834df7cb9c252754a4f6fd8ac22577ada96ee50641cb84a5b682ed9c15812b pid=1681 runtime=io.containerd.runc.v2 Sep 13 00:15:07.040238 systemd[1]: Started cri-containerd-30d30cacf3c32fdbb2b9488d6e2cf6f025aea718288e1e40ef2935e0e526d622.scope. Sep 13 00:15:07.050188 systemd[1]: Started cri-containerd-514e680bd33208c7fa2f3f24c33aa155a6b09f2e88556abf40d877d6524d1359.scope. Sep 13 00:15:07.051106 systemd[1]: Started cri-containerd-b8834df7cb9c252754a4f6fd8ac22577ada96ee50641cb84a5b682ed9c15812b.scope. Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit: BPF prog-id=55 op=LOAD Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1658 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330643330636163663363333266646262326239343838643665326366 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1658 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330643330636163663363333266646262326239343838643665326366 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.065000 audit: BPF prog-id=56 op=LOAD Sep 13 00:15:07.065000 audit[1689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1658 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330643330636163663363333266646262326239343838643665326366 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit: BPF prog-id=57 op=LOAD Sep 13 00:15:07.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1658 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330643330636163663363333266646262326239343838643665326366 Sep 13 00:15:07.067000 audit: BPF prog-id=57 op=UNLOAD Sep 13 00:15:07.067000 audit: BPF prog-id=56 op=UNLOAD Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit: BPF prog-id=58 op=LOAD Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1683 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531346536383062643333323038633766613266336632346333336161 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1683 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531346536383062643333323038633766613266336632346333336161 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit: BPF prog-id=59 op=LOAD Sep 13 00:15:07.068000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1683 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531346536383062643333323038633766613266336632346333336161 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.068000 audit: BPF prog-id=60 op=LOAD Sep 13 00:15:07.068000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1683 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531346536383062643333323038633766613266336632346333336161 Sep 13 00:15:07.069000 audit: BPF prog-id=60 op=UNLOAD Sep 13 00:15:07.069000 audit: BPF prog-id=59 op=UNLOAD Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { perfmon } for pid=1689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit[1689]: AVC avc: denied { bpf } for pid=1689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.067000 audit: BPF prog-id=61 op=LOAD Sep 13 00:15:07.067000 audit[1689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1658 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330643330636163663363333266646262326239343838643665326366 Sep 13 00:15:07.069000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.069000 audit: BPF prog-id=62 op=LOAD Sep 13 00:15:07.069000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1683 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531346536383062643333323038633766613266336632346333336161 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.070000 audit: BPF prog-id=63 op=LOAD Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1681 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383334646637636239633235323735346134663666643861633232 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1681 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383334646637636239633235323735346134663666643861633232 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit: BPF prog-id=64 op=LOAD Sep 13 00:15:07.071000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1681 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383334646637636239633235323735346134663666643861633232 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit: BPF prog-id=65 op=LOAD Sep 13 00:15:07.071000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1681 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383334646637636239633235323735346134663666643861633232 Sep 13 00:15:07.071000 audit: BPF prog-id=65 op=UNLOAD Sep 13 00:15:07.071000 audit: BPF prog-id=64 op=UNLOAD Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.071000 audit: BPF prog-id=66 op=LOAD Sep 13 00:15:07.071000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1681 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383334646637636239633235323735346134663666643861633232 Sep 13 00:15:07.081167 kubelet[1616]: W0913 00:15:07.081052 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Sep 13 00:15:07.081167 kubelet[1616]: E0913 00:15:07.081164 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.69:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:15:07.095716 env[1216]: time="2025-09-13T00:15:07.095668980Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:71d8bf7bd9b7c7432927bee9d50592b5,Namespace:kube-system,Attempt:0,} returns sandbox id \"30d30cacf3c32fdbb2b9488d6e2cf6f025aea718288e1e40ef2935e0e526d622\"" Sep 13 00:15:07.097289 kubelet[1616]: E0913 00:15:07.097263 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:07.099184 env[1216]: time="2025-09-13T00:15:07.099148397Z" level=info msg="CreateContainer within sandbox \"30d30cacf3c32fdbb2b9488d6e2cf6f025aea718288e1e40ef2935e0e526d622\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 13 00:15:07.099431 env[1216]: time="2025-09-13T00:15:07.099400537Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fe5e332fba00ba0b5b33a25fe2e8fd7b,Namespace:kube-system,Attempt:0,} returns sandbox id \"514e680bd33208c7fa2f3f24c33aa155a6b09f2e88556abf40d877d6524d1359\"" Sep 13 00:15:07.100022 kubelet[1616]: E0913 00:15:07.099986 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:07.101661 env[1216]: time="2025-09-13T00:15:07.101633689Z" level=info msg="CreateContainer within sandbox \"514e680bd33208c7fa2f3f24c33aa155a6b09f2e88556abf40d877d6524d1359\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 13 00:15:07.108686 env[1216]: time="2025-09-13T00:15:07.108651588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:79c07c93a7d61ced5b4d56e1bd6f387a,Namespace:kube-system,Attempt:0,} returns sandbox id \"b8834df7cb9c252754a4f6fd8ac22577ada96ee50641cb84a5b682ed9c15812b\"" Sep 13 00:15:07.109311 kubelet[1616]: E0913 00:15:07.109288 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:07.111035 env[1216]: time="2025-09-13T00:15:07.111004471Z" level=info msg="CreateContainer within sandbox \"b8834df7cb9c252754a4f6fd8ac22577ada96ee50641cb84a5b682ed9c15812b\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 13 00:15:07.111430 env[1216]: time="2025-09-13T00:15:07.111394219Z" level=info msg="CreateContainer within sandbox \"30d30cacf3c32fdbb2b9488d6e2cf6f025aea718288e1e40ef2935e0e526d622\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"53b25ef3ca77f67c1c5752f787417663d31e4f4f29d1861c1336ceec84f7c5b2\"" Sep 13 00:15:07.111940 env[1216]: time="2025-09-13T00:15:07.111915336Z" level=info msg="StartContainer for \"53b25ef3ca77f67c1c5752f787417663d31e4f4f29d1861c1336ceec84f7c5b2\"" Sep 13 00:15:07.114301 env[1216]: time="2025-09-13T00:15:07.114260861Z" level=info msg="CreateContainer within sandbox \"514e680bd33208c7fa2f3f24c33aa155a6b09f2e88556abf40d877d6524d1359\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"02c5aa6c27033bd158e59f5b9013c05d64ae98458f1b23456d8d28b73153cc7f\"" Sep 13 00:15:07.114726 env[1216]: time="2025-09-13T00:15:07.114693159Z" level=info msg="StartContainer for \"02c5aa6c27033bd158e59f5b9013c05d64ae98458f1b23456d8d28b73153cc7f\"" Sep 13 00:15:07.121764 env[1216]: time="2025-09-13T00:15:07.121721215Z" level=info msg="CreateContainer within sandbox \"b8834df7cb9c252754a4f6fd8ac22577ada96ee50641cb84a5b682ed9c15812b\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c084c27618f466189d71f0d11d5a7c63290113a2526e9e699dfaa2b91baffa41\"" Sep 13 00:15:07.122297 env[1216]: time="2025-09-13T00:15:07.122267686Z" level=info msg="StartContainer for \"c084c27618f466189d71f0d11d5a7c63290113a2526e9e699dfaa2b91baffa41\"" Sep 13 00:15:07.131676 systemd[1]: Started cri-containerd-02c5aa6c27033bd158e59f5b9013c05d64ae98458f1b23456d8d28b73153cc7f.scope. Sep 13 00:15:07.136634 systemd[1]: Started cri-containerd-53b25ef3ca77f67c1c5752f787417663d31e4f4f29d1861c1336ceec84f7c5b2.scope. Sep 13 00:15:07.142090 kubelet[1616]: E0913 00:15:07.141338 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.69:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.69:6443: connect: connection refused" interval="1.6s" Sep 13 00:15:07.151880 systemd[1]: Started cri-containerd-c084c27618f466189d71f0d11d5a7c63290113a2526e9e699dfaa2b91baffa41.scope. Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.158000 audit: BPF prog-id=67 op=LOAD Sep 13 00:15:07.159000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit: BPF prog-id=68 op=LOAD Sep 13 00:15:07.159000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1683 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032633561613663323730333362643135386535396635623930313363 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1683 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032633561613663323730333362643135386535396635623930313363 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit: BPF prog-id=69 op=LOAD Sep 13 00:15:07.160000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1683 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032633561613663323730333362643135386535396635623930313363 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit: BPF prog-id=70 op=LOAD Sep 13 00:15:07.160000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1683 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032633561613663323730333362643135386535396635623930313363 Sep 13 00:15:07.160000 audit: BPF prog-id=70 op=UNLOAD Sep 13 00:15:07.160000 audit: BPF prog-id=69 op=UNLOAD Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.160000 audit: BPF prog-id=71 op=LOAD Sep 13 00:15:07.160000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1683 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032633561613663323730333362643135386535396635623930313363 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1658 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533623235656633636137376636376331633537353266373837343137 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1658 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533623235656633636137376636376331633537353266373837343137 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit: BPF prog-id=72 op=LOAD Sep 13 00:15:07.161000 audit[1794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1658 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533623235656633636137376636376331633537353266373837343137 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit: BPF prog-id=73 op=LOAD Sep 13 00:15:07.161000 audit[1794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1658 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533623235656633636137376636376331633537353266373837343137 Sep 13 00:15:07.161000 audit: BPF prog-id=73 op=UNLOAD Sep 13 00:15:07.161000 audit: BPF prog-id=72 op=UNLOAD Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.161000 audit: BPF prog-id=74 op=LOAD Sep 13 00:15:07.161000 audit[1794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1658 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533623235656633636137376636376331633537353266373837343137 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit: BPF prog-id=75 op=LOAD Sep 13 00:15:07.165000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.165000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001d1b38 a2=10 a3=0 items=0 ppid=1681 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330383463323736313866343636313839643731663064313164356137 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001d15a0 a2=3c a3=0 items=0 ppid=1681 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330383463323736313866343636313839643731663064313164356137 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit: BPF prog-id=76 op=LOAD Sep 13 00:15:07.166000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001d18e0 a2=78 a3=0 items=0 ppid=1681 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330383463323736313866343636313839643731663064313164356137 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit: BPF prog-id=77 op=LOAD Sep 13 00:15:07.166000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001d1670 a2=78 a3=0 items=0 ppid=1681 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330383463323736313866343636313839643731663064313164356137 Sep 13 00:15:07.166000 audit: BPF prog-id=77 op=UNLOAD Sep 13 00:15:07.166000 audit: BPF prog-id=76 op=UNLOAD Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:07.166000 audit: BPF prog-id=78 op=LOAD Sep 13 00:15:07.166000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001d1b40 a2=78 a3=0 items=0 ppid=1681 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:07.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330383463323736313866343636313839643731663064313164356137 Sep 13 00:15:07.196846 env[1216]: time="2025-09-13T00:15:07.196793011Z" level=info msg="StartContainer for \"02c5aa6c27033bd158e59f5b9013c05d64ae98458f1b23456d8d28b73153cc7f\" returns successfully" Sep 13 00:15:07.199616 env[1216]: time="2025-09-13T00:15:07.199585710Z" level=info msg="StartContainer for \"c084c27618f466189d71f0d11d5a7c63290113a2526e9e699dfaa2b91baffa41\" returns successfully" Sep 13 00:15:07.205240 env[1216]: time="2025-09-13T00:15:07.205191543Z" level=info msg="StartContainer for \"53b25ef3ca77f67c1c5752f787417663d31e4f4f29d1861c1336ceec84f7c5b2\" returns successfully" Sep 13 00:15:07.380745 kubelet[1616]: I0913 00:15:07.380648 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 13 00:15:07.772535 kubelet[1616]: E0913 00:15:07.772443 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:07.774594 kubelet[1616]: E0913 00:15:07.774565 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:07.775468 kubelet[1616]: E0913 00:15:07.775445 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:08.647000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.649512 kernel: kauditd_printk_skb: 561 callbacks suppressed Sep 13 00:15:08.649572 kernel: audit: type=1400 audit(1757722508.647:545): avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.647000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400591e8c0 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.654803 kernel: audit: type=1300 audit(1757722508.647:545): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400591e8c0 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.654855 kernel: audit: type=1327 audit(1757722508.647:545): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.647000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.660074 kernel: audit: type=1400 audit(1757722508.647:546): avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.647000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400476ad20 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.671201 kernel: audit: type=1300 audit(1757722508.647:546): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400476ad20 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.675661 kernel: audit: type=1327 audit(1757722508.647:546): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.648000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.678355 kernel: audit: type=1400 audit(1757722508.648:547): avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.648000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400489c030 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.681602 kernel: audit: type=1300 audit(1757722508.648:547): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400489c030 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.684269 kernel: audit: type=1327 audit(1757722508.648:547): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.684307 kernel: audit: type=1400 audit(1757722508.655:548): avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.655000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.655000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=4005064940 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.655000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.655000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.655000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=4008951020 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.655000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.655000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:08.655000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=4008951050 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:15:08.655000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:15:08.770649 kubelet[1616]: E0913 00:15:08.770595 1616 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Sep 13 00:15:08.776942 kubelet[1616]: E0913 00:15:08.776909 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:08.881961 kubelet[1616]: I0913 00:15:08.881906 1616 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Sep 13 00:15:08.881961 kubelet[1616]: E0913 00:15:08.881941 1616 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Sep 13 00:15:08.898427 kubelet[1616]: E0913 00:15:08.898392 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:08.933995 kubelet[1616]: E0913 00:15:08.933948 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:08.999346 kubelet[1616]: E0913 00:15:08.999297 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:09.099831 kubelet[1616]: E0913 00:15:09.099791 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:09.200644 kubelet[1616]: E0913 00:15:09.200548 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:09.301157 kubelet[1616]: E0913 00:15:09.301114 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:09.401758 kubelet[1616]: E0913 00:15:09.401720 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:09.502260 kubelet[1616]: E0913 00:15:09.502162 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:09.676000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:09.676000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:09.676000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400049a020 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:09.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:09.676000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001a5b60 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:09.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:09.712781 kubelet[1616]: I0913 00:15:09.712758 1616 apiserver.go:52] "Watching apiserver" Sep 13 00:15:09.736827 kubelet[1616]: I0913 00:15:09.736799 1616 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 13 00:15:10.404534 kubelet[1616]: E0913 00:15:10.404488 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:10.778515 kubelet[1616]: E0913 00:15:10.778471 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:10.933899 systemd[1]: Reloading. Sep 13 00:15:10.997301 /usr/lib/systemd/system-generators/torcx-generator[1915]: time="2025-09-13T00:15:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:15:10.997330 /usr/lib/systemd/system-generators/torcx-generator[1915]: time="2025-09-13T00:15:10Z" level=info msg="torcx already run" Sep 13 00:15:11.064500 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:15:11.064523 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:15:11.081021 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.151000 audit: BPF prog-id=79 op=LOAD Sep 13 00:15:11.152000 audit: BPF prog-id=58 op=UNLOAD Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit: BPF prog-id=80 op=LOAD Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit: BPF prog-id=81 op=LOAD Sep 13 00:15:11.152000 audit: BPF prog-id=40 op=UNLOAD Sep 13 00:15:11.152000 audit: BPF prog-id=41 op=UNLOAD Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit: BPF prog-id=82 op=LOAD Sep 13 00:15:11.153000 audit: BPF prog-id=67 op=UNLOAD Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit: BPF prog-id=83 op=LOAD Sep 13 00:15:11.153000 audit: BPF prog-id=42 op=UNLOAD Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit: BPF prog-id=84 op=LOAD Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.153000 audit: BPF prog-id=85 op=LOAD Sep 13 00:15:11.153000 audit: BPF prog-id=43 op=UNLOAD Sep 13 00:15:11.153000 audit: BPF prog-id=44 op=UNLOAD Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.155000 audit: BPF prog-id=86 op=LOAD Sep 13 00:15:11.155000 audit: BPF prog-id=45 op=UNLOAD Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.156000 audit: BPF prog-id=87 op=LOAD Sep 13 00:15:11.156000 audit: BPF prog-id=68 op=UNLOAD Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.157000 audit: BPF prog-id=88 op=LOAD Sep 13 00:15:11.157000 audit: BPF prog-id=55 op=UNLOAD Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.158000 audit: BPF prog-id=89 op=LOAD Sep 13 00:15:11.158000 audit: BPF prog-id=46 op=UNLOAD Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit: BPF prog-id=90 op=LOAD Sep 13 00:15:11.159000 audit: BPF prog-id=47 op=UNLOAD Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit: BPF prog-id=91 op=LOAD Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit: BPF prog-id=92 op=LOAD Sep 13 00:15:11.160000 audit: BPF prog-id=48 op=UNLOAD Sep 13 00:15:11.160000 audit: BPF prog-id=49 op=UNLOAD Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit: BPF prog-id=93 op=LOAD Sep 13 00:15:11.160000 audit: BPF prog-id=50 op=UNLOAD Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.160000 audit: BPF prog-id=94 op=LOAD Sep 13 00:15:11.160000 audit: BPF prog-id=75 op=UNLOAD Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit: BPF prog-id=95 op=LOAD Sep 13 00:15:11.163000 audit: BPF prog-id=51 op=UNLOAD Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit: BPF prog-id=96 op=LOAD Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.163000 audit: BPF prog-id=97 op=LOAD Sep 13 00:15:11.163000 audit: BPF prog-id=52 op=UNLOAD Sep 13 00:15:11.163000 audit: BPF prog-id=53 op=UNLOAD Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.164000 audit: BPF prog-id=98 op=LOAD Sep 13 00:15:11.164000 audit: BPF prog-id=54 op=UNLOAD Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.165000 audit: BPF prog-id=99 op=LOAD Sep 13 00:15:11.165000 audit: BPF prog-id=63 op=UNLOAD Sep 13 00:15:11.187171 systemd[1]: Stopping kubelet.service... Sep 13 00:15:11.207432 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 00:15:11.207617 systemd[1]: Stopped kubelet.service. Sep 13 00:15:11.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:11.207673 systemd[1]: kubelet.service: Consumed 1.578s CPU time. Sep 13 00:15:11.209422 systemd[1]: Starting kubelet.service... Sep 13 00:15:11.301994 systemd[1]: Started kubelet.service. Sep 13 00:15:11.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:11.352125 kubelet[1957]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:15:11.352125 kubelet[1957]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 13 00:15:11.352125 kubelet[1957]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:15:11.352125 kubelet[1957]: I0913 00:15:11.349500 1957 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 00:15:11.358018 kubelet[1957]: I0913 00:15:11.357983 1957 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 13 00:15:11.358018 kubelet[1957]: I0913 00:15:11.358018 1957 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 00:15:11.358652 kubelet[1957]: I0913 00:15:11.358237 1957 server.go:934] "Client rotation is on, will bootstrap in background" Sep 13 00:15:11.359693 kubelet[1957]: I0913 00:15:11.359657 1957 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 13 00:15:11.362534 kubelet[1957]: I0913 00:15:11.362505 1957 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 00:15:11.365647 kubelet[1957]: E0913 00:15:11.365624 1957 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 00:15:11.365773 kubelet[1957]: I0913 00:15:11.365743 1957 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 00:15:11.367873 kubelet[1957]: I0913 00:15:11.367849 1957 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 00:15:11.368091 kubelet[1957]: I0913 00:15:11.368077 1957 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 13 00:15:11.368286 kubelet[1957]: I0913 00:15:11.368263 1957 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 00:15:11.368517 kubelet[1957]: I0913 00:15:11.368339 1957 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 00:15:11.368648 kubelet[1957]: I0913 00:15:11.368636 1957 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 00:15:11.368702 kubelet[1957]: I0913 00:15:11.368694 1957 container_manager_linux.go:300] "Creating device plugin manager" Sep 13 00:15:11.368787 kubelet[1957]: I0913 00:15:11.368777 1957 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:15:11.368923 kubelet[1957]: I0913 00:15:11.368911 1957 kubelet.go:408] "Attempting to sync node with API server" Sep 13 00:15:11.368987 kubelet[1957]: I0913 00:15:11.368976 1957 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 00:15:11.369082 kubelet[1957]: I0913 00:15:11.369055 1957 kubelet.go:314] "Adding apiserver pod source" Sep 13 00:15:11.369161 kubelet[1957]: I0913 00:15:11.369150 1957 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 00:15:11.369710 kubelet[1957]: I0913 00:15:11.369689 1957 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 00:15:11.370406 kubelet[1957]: I0913 00:15:11.370378 1957 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 00:15:11.370921 kubelet[1957]: I0913 00:15:11.370905 1957 server.go:1274] "Started kubelet" Sep 13 00:15:11.373220 kubelet[1957]: I0913 00:15:11.373196 1957 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 00:15:11.373357 kubelet[1957]: I0913 00:15:11.373342 1957 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 13 00:15:11.372000 audit[1957]: AVC avc: denied { mac_admin } for pid=1957 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.372000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:15:11.372000 audit[1957]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000baad50 a1=400067d500 a2=4000baad20 a3=25 items=0 ppid=1 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:11.372000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:15:11.372000 audit[1957]: AVC avc: denied { mac_admin } for pid=1957 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.372000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:15:11.372000 audit[1957]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ad8460 a1=400067d518 a2=4000baade0 a3=25 items=0 ppid=1 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:11.372000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:15:11.374812 kubelet[1957]: I0913 00:15:11.374796 1957 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 00:15:11.375758 kubelet[1957]: I0913 00:15:11.375710 1957 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 00:15:11.375945 kubelet[1957]: I0913 00:15:11.375924 1957 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 00:15:11.376811 kubelet[1957]: I0913 00:15:11.376779 1957 server.go:449] "Adding debug handlers to kubelet server" Sep 13 00:15:11.377459 kubelet[1957]: I0913 00:15:11.377438 1957 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 13 00:15:11.377738 kubelet[1957]: E0913 00:15:11.377714 1957 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 13 00:15:11.377974 kubelet[1957]: I0913 00:15:11.377914 1957 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 00:15:11.378230 kubelet[1957]: I0913 00:15:11.378129 1957 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 00:15:11.378230 kubelet[1957]: I0913 00:15:11.378178 1957 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 13 00:15:11.385237 kubelet[1957]: I0913 00:15:11.383782 1957 reconciler.go:26] "Reconciler: start to sync state" Sep 13 00:15:11.388665 kubelet[1957]: I0913 00:15:11.388633 1957 factory.go:221] Registration of the systemd container factory successfully Sep 13 00:15:11.388758 kubelet[1957]: I0913 00:15:11.388733 1957 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 00:15:11.390981 kubelet[1957]: E0913 00:15:11.390939 1957 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 00:15:11.394228 kubelet[1957]: I0913 00:15:11.394195 1957 factory.go:221] Registration of the containerd container factory successfully Sep 13 00:15:11.415695 kubelet[1957]: I0913 00:15:11.415646 1957 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 00:15:11.417043 kubelet[1957]: I0913 00:15:11.417008 1957 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 00:15:11.417043 kubelet[1957]: I0913 00:15:11.417038 1957 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 13 00:15:11.417144 kubelet[1957]: I0913 00:15:11.417053 1957 kubelet.go:2321] "Starting kubelet main sync loop" Sep 13 00:15:11.417144 kubelet[1957]: E0913 00:15:11.417106 1957 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 00:15:11.421269 kubelet[1957]: I0913 00:15:11.421248 1957 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 13 00:15:11.421269 kubelet[1957]: I0913 00:15:11.421264 1957 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 13 00:15:11.421374 kubelet[1957]: I0913 00:15:11.421281 1957 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:15:11.421437 kubelet[1957]: I0913 00:15:11.421417 1957 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 13 00:15:11.421473 kubelet[1957]: I0913 00:15:11.421433 1957 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 13 00:15:11.421473 kubelet[1957]: I0913 00:15:11.421450 1957 policy_none.go:49] "None policy: Start" Sep 13 00:15:11.422181 kubelet[1957]: I0913 00:15:11.422156 1957 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 13 00:15:11.422230 kubelet[1957]: I0913 00:15:11.422185 1957 state_mem.go:35] "Initializing new in-memory state store" Sep 13 00:15:11.422328 kubelet[1957]: I0913 00:15:11.422307 1957 state_mem.go:75] "Updated machine memory state" Sep 13 00:15:11.428481 kubelet[1957]: I0913 00:15:11.428463 1957 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 00:15:11.427000 audit[1957]: AVC avc: denied { mac_admin } for pid=1957 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:11.427000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:15:11.427000 audit[1957]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f94180 a1=4000fbabd0 a2=4000f94150 a3=25 items=0 ppid=1 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:11.427000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:15:11.428839 kubelet[1957]: I0913 00:15:11.428527 1957 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 00:15:11.428839 kubelet[1957]: I0913 00:15:11.428643 1957 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 00:15:11.428839 kubelet[1957]: I0913 00:15:11.428653 1957 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 00:15:11.428915 kubelet[1957]: I0913 00:15:11.428847 1957 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 00:15:11.524467 kubelet[1957]: E0913 00:15:11.524430 1957 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:11.533127 kubelet[1957]: I0913 00:15:11.533106 1957 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 13 00:15:11.539207 kubelet[1957]: I0913 00:15:11.539184 1957 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Sep 13 00:15:11.539358 kubelet[1957]: I0913 00:15:11.539345 1957 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Sep 13 00:15:11.584549 kubelet[1957]: I0913 00:15:11.584502 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:11.584549 kubelet[1957]: I0913 00:15:11.584539 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:11.584662 kubelet[1957]: I0913 00:15:11.584562 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/79c07c93a7d61ced5b4d56e1bd6f387a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"79c07c93a7d61ced5b4d56e1bd6f387a\") " pod="kube-system/kube-apiserver-localhost" Sep 13 00:15:11.584662 kubelet[1957]: I0913 00:15:11.584581 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/79c07c93a7d61ced5b4d56e1bd6f387a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"79c07c93a7d61ced5b4d56e1bd6f387a\") " pod="kube-system/kube-apiserver-localhost" Sep 13 00:15:11.584662 kubelet[1957]: I0913 00:15:11.584599 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:11.584662 kubelet[1957]: I0913 00:15:11.584615 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:11.584662 kubelet[1957]: I0913 00:15:11.584633 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/71d8bf7bd9b7c7432927bee9d50592b5-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"71d8bf7bd9b7c7432927bee9d50592b5\") " pod="kube-system/kube-controller-manager-localhost" Sep 13 00:15:11.584774 kubelet[1957]: I0913 00:15:11.584649 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fe5e332fba00ba0b5b33a25fe2e8fd7b-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fe5e332fba00ba0b5b33a25fe2e8fd7b\") " pod="kube-system/kube-scheduler-localhost" Sep 13 00:15:11.584774 kubelet[1957]: I0913 00:15:11.584663 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/79c07c93a7d61ced5b4d56e1bd6f387a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"79c07c93a7d61ced5b4d56e1bd6f387a\") " pod="kube-system/kube-apiserver-localhost" Sep 13 00:15:11.823210 kubelet[1957]: E0913 00:15:11.823145 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:11.824161 kubelet[1957]: E0913 00:15:11.824141 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:11.824847 kubelet[1957]: E0913 00:15:11.824828 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:12.370332 kubelet[1957]: I0913 00:15:12.370292 1957 apiserver.go:52] "Watching apiserver" Sep 13 00:15:12.378953 kubelet[1957]: I0913 00:15:12.378908 1957 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 13 00:15:12.425775 kubelet[1957]: E0913 00:15:12.425739 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:12.425775 kubelet[1957]: E0913 00:15:12.425778 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:12.426054 kubelet[1957]: E0913 00:15:12.426036 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:12.451159 kubelet[1957]: I0913 00:15:12.451091 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.450953944 podStartE2EDuration="2.450953944s" podCreationTimestamp="2025-09-13 00:15:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:15:12.450765887 +0000 UTC m=+1.145402651" watchObservedRunningTime="2025-09-13 00:15:12.450953944 +0000 UTC m=+1.145590788" Sep 13 00:15:12.476837 kubelet[1957]: I0913 00:15:12.476780 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.476754574 podStartE2EDuration="1.476754574s" podCreationTimestamp="2025-09-13 00:15:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:15:12.46657916 +0000 UTC m=+1.161215924" watchObservedRunningTime="2025-09-13 00:15:12.476754574 +0000 UTC m=+1.171391338" Sep 13 00:15:12.477039 kubelet[1957]: I0913 00:15:12.476873 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.47686824 podStartE2EDuration="1.47686824s" podCreationTimestamp="2025-09-13 00:15:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:15:12.476571517 +0000 UTC m=+1.171208281" watchObservedRunningTime="2025-09-13 00:15:12.47686824 +0000 UTC m=+1.171505004" Sep 13 00:15:13.426826 kubelet[1957]: E0913 00:15:13.426798 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:13.946000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 00:15:13.948099 kernel: kauditd_printk_skb: 272 callbacks suppressed Sep 13 00:15:13.948163 kernel: audit: type=1400 audit(1757722513.946:802): avc: denied { watch } for pid=1831 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 00:15:13.946000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400060e900 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:13.954699 kernel: audit: type=1300 audit(1757722513.946:802): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400060e900 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:13.954774 kernel: audit: type=1327 audit(1757722513.946:802): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:13.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:14.428704 kubelet[1957]: E0913 00:15:14.428677 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:17.396000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:17.396000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014f9000 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:17.404775 kernel: audit: type=1400 audit(1757722517.396:803): avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:17.404872 kernel: audit: type=1300 audit(1757722517.396:803): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014f9000 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:17.404899 kernel: audit: type=1327 audit(1757722517.396:803): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:17.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:17.396000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:17.410578 kernel: audit: type=1400 audit(1757722517.396:804): avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:17.410627 kernel: audit: type=1300 audit(1757722517.396:804): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014f9040 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:17.396000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014f9040 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:17.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:17.417964 kernel: audit: type=1327 audit(1757722517.396:804): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:17.418031 kernel: audit: type=1400 audit(1757722517.396:805): avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:17.396000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:17.396000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017331c0 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:17.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:17.396000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:15:17.396000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001733200 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:15:17.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:15:17.981273 kubelet[1957]: I0913 00:15:17.981247 1957 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 13 00:15:17.982208 env[1216]: time="2025-09-13T00:15:17.982169119Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 13 00:15:17.982607 kubelet[1957]: I0913 00:15:17.982587 1957 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 13 00:15:18.823899 systemd[1]: Created slice kubepods-besteffort-poda9298dbc_9bd6_43cd_93d3_a39205fe0f7d.slice. Sep 13 00:15:18.828567 kubelet[1957]: I0913 00:15:18.828531 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a9298dbc-9bd6-43cd-93d3-a39205fe0f7d-xtables-lock\") pod \"kube-proxy-lt5bp\" (UID: \"a9298dbc-9bd6-43cd-93d3-a39205fe0f7d\") " pod="kube-system/kube-proxy-lt5bp" Sep 13 00:15:18.828761 kubelet[1957]: I0913 00:15:18.828739 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jfvmx\" (UniqueName: \"kubernetes.io/projected/a9298dbc-9bd6-43cd-93d3-a39205fe0f7d-kube-api-access-jfvmx\") pod \"kube-proxy-lt5bp\" (UID: \"a9298dbc-9bd6-43cd-93d3-a39205fe0f7d\") " pod="kube-system/kube-proxy-lt5bp" Sep 13 00:15:18.828852 kubelet[1957]: I0913 00:15:18.828838 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/a9298dbc-9bd6-43cd-93d3-a39205fe0f7d-kube-proxy\") pod \"kube-proxy-lt5bp\" (UID: \"a9298dbc-9bd6-43cd-93d3-a39205fe0f7d\") " pod="kube-system/kube-proxy-lt5bp" Sep 13 00:15:18.828939 kubelet[1957]: I0913 00:15:18.828926 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a9298dbc-9bd6-43cd-93d3-a39205fe0f7d-lib-modules\") pod \"kube-proxy-lt5bp\" (UID: \"a9298dbc-9bd6-43cd-93d3-a39205fe0f7d\") " pod="kube-system/kube-proxy-lt5bp" Sep 13 00:15:18.941289 kubelet[1957]: I0913 00:15:18.941252 1957 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 13 00:15:19.000025 kubelet[1957]: E0913 00:15:18.999985 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:19.090895 systemd[1]: Created slice kubepods-besteffort-pod58f9570b_8fd0_43f0_99b3_5b1fc6df50ad.slice. Sep 13 00:15:19.130333 kubelet[1957]: I0913 00:15:19.130286 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fnbn2\" (UniqueName: \"kubernetes.io/projected/58f9570b-8fd0-43f0-99b3-5b1fc6df50ad-kube-api-access-fnbn2\") pod \"tigera-operator-58fc44c59b-dbmhp\" (UID: \"58f9570b-8fd0-43f0-99b3-5b1fc6df50ad\") " pod="tigera-operator/tigera-operator-58fc44c59b-dbmhp" Sep 13 00:15:19.130333 kubelet[1957]: I0913 00:15:19.130332 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/58f9570b-8fd0-43f0-99b3-5b1fc6df50ad-var-lib-calico\") pod \"tigera-operator-58fc44c59b-dbmhp\" (UID: \"58f9570b-8fd0-43f0-99b3-5b1fc6df50ad\") " pod="tigera-operator/tigera-operator-58fc44c59b-dbmhp" Sep 13 00:15:19.130523 kubelet[1957]: E0913 00:15:19.130495 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:19.131178 env[1216]: time="2025-09-13T00:15:19.131142086Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lt5bp,Uid:a9298dbc-9bd6-43cd-93d3-a39205fe0f7d,Namespace:kube-system,Attempt:0,}" Sep 13 00:15:19.145959 env[1216]: time="2025-09-13T00:15:19.145890518Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:19.146147 env[1216]: time="2025-09-13T00:15:19.146121513Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:19.146227 env[1216]: time="2025-09-13T00:15:19.146206591Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:19.146511 env[1216]: time="2025-09-13T00:15:19.146465986Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/976c5ee13e9592ab412a15ed67541daeb35c79cb5411e7fd406c106bf888bb67 pid=2020 runtime=io.containerd.runc.v2 Sep 13 00:15:19.159838 systemd[1]: Started cri-containerd-976c5ee13e9592ab412a15ed67541daeb35c79cb5411e7fd406c106bf888bb67.scope. Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.179050 kernel: kauditd_printk_skb: 5 callbacks suppressed Sep 13 00:15:19.179122 kernel: audit: type=1400 audit(1757722519.175:807): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.179145 kernel: audit: type=1400 audit(1757722519.175:808): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.183274 kernel: audit: type=1400 audit(1757722519.175:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.183333 kernel: audit: type=1400 audit(1757722519.175:810): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.187224 kernel: audit: type=1400 audit(1757722519.175:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.187276 kernel: audit: type=1400 audit(1757722519.175:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.189222 kernel: audit: type=1400 audit(1757722519.175:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.193133 kernel: audit: type=1400 audit(1757722519.175:814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.193173 kernel: audit: type=1400 audit(1757722519.175:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.197524 kernel: audit: type=1400 audit(1757722519.175:816): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.175000 audit: BPF prog-id=100 op=LOAD Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2020 pid=2031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937366335656531336539353932616234313261313565643637353431 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2020 pid=2031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937366335656531336539353932616234313261313565643637353431 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.176000 audit: BPF prog-id=101 op=LOAD Sep 13 00:15:19.176000 audit[2031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2020 pid=2031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937366335656531336539353932616234313261313565643637353431 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.178000 audit: BPF prog-id=102 op=LOAD Sep 13 00:15:19.178000 audit[2031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2020 pid=2031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937366335656531336539353932616234313261313565643637353431 Sep 13 00:15:19.180000 audit: BPF prog-id=102 op=UNLOAD Sep 13 00:15:19.180000 audit: BPF prog-id=101 op=UNLOAD Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { perfmon } for pid=2031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit[2031]: AVC avc: denied { bpf } for pid=2031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.180000 audit: BPF prog-id=103 op=LOAD Sep 13 00:15:19.180000 audit[2031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2020 pid=2031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937366335656531336539353932616234313261313565643637353431 Sep 13 00:15:19.207095 env[1216]: time="2025-09-13T00:15:19.207013203Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lt5bp,Uid:a9298dbc-9bd6-43cd-93d3-a39205fe0f7d,Namespace:kube-system,Attempt:0,} returns sandbox id \"976c5ee13e9592ab412a15ed67541daeb35c79cb5411e7fd406c106bf888bb67\"" Sep 13 00:15:19.207775 kubelet[1957]: E0913 00:15:19.207727 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:19.211132 env[1216]: time="2025-09-13T00:15:19.211091564Z" level=info msg="CreateContainer within sandbox \"976c5ee13e9592ab412a15ed67541daeb35c79cb5411e7fd406c106bf888bb67\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 13 00:15:19.226329 env[1216]: time="2025-09-13T00:15:19.226273987Z" level=info msg="CreateContainer within sandbox \"976c5ee13e9592ab412a15ed67541daeb35c79cb5411e7fd406c106bf888bb67\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"8723c3cadddf35ebaf0d95db99f2e01dc593777396a783fc125b45388d78e913\"" Sep 13 00:15:19.227231 env[1216]: time="2025-09-13T00:15:19.227194449Z" level=info msg="StartContainer for \"8723c3cadddf35ebaf0d95db99f2e01dc593777396a783fc125b45388d78e913\"" Sep 13 00:15:19.244193 systemd[1]: Started cri-containerd-8723c3cadddf35ebaf0d95db99f2e01dc593777396a783fc125b45388d78e913.scope. Sep 13 00:15:19.267000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.267000 audit[2062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2020 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323363336361646464663335656261663064393564623939663265 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit: BPF prog-id=104 op=LOAD Sep 13 00:15:19.268000 audit[2062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2020 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323363336361646464663335656261663064393564623939663265 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit: BPF prog-id=105 op=LOAD Sep 13 00:15:19.268000 audit[2062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2020 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323363336361646464663335656261663064393564623939663265 Sep 13 00:15:19.268000 audit: BPF prog-id=105 op=UNLOAD Sep 13 00:15:19.268000 audit: BPF prog-id=104 op=UNLOAD Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { perfmon } for pid=2062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit[2062]: AVC avc: denied { bpf } for pid=2062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.268000 audit: BPF prog-id=106 op=LOAD Sep 13 00:15:19.268000 audit[2062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2020 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323363336361646464663335656261663064393564623939663265 Sep 13 00:15:19.283493 env[1216]: time="2025-09-13T00:15:19.283423350Z" level=info msg="StartContainer for \"8723c3cadddf35ebaf0d95db99f2e01dc593777396a783fc125b45388d78e913\" returns successfully" Sep 13 00:15:19.394744 env[1216]: time="2025-09-13T00:15:19.394621578Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-dbmhp,Uid:58f9570b-8fd0-43f0-99b3-5b1fc6df50ad,Namespace:tigera-operator,Attempt:0,}" Sep 13 00:15:19.411013 env[1216]: time="2025-09-13T00:15:19.410929259Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:19.411224 env[1216]: time="2025-09-13T00:15:19.410976498Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:19.411224 env[1216]: time="2025-09-13T00:15:19.411058216Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:19.411403 env[1216]: time="2025-09-13T00:15:19.411303372Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1355d9b8a296b76ba4e4e23881771e83a3c9eee8b012b7e707f2edf7d3b3cf8e pid=2106 runtime=io.containerd.runc.v2 Sep 13 00:15:19.425595 systemd[1]: Started cri-containerd-1355d9b8a296b76ba4e4e23881771e83a3c9eee8b012b7e707f2edf7d3b3cf8e.scope. Sep 13 00:15:19.435734 kubelet[1957]: E0913 00:15:19.435703 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:19.436273 kubelet[1957]: E0913 00:15:19.436184 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:19.440000 audit[2157]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.440000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1779c20 a2=0 a3=1 items=0 ppid=2073 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.440000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 00:15:19.440000 audit[2158]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.440000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd4987db0 a2=0 a3=1 items=0 ppid=2073 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 00:15:19.443000 audit[2159]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.443000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2176140 a2=0 a3=1 items=0 ppid=2073 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 00:15:19.445000 audit[2160]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.445000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc263da10 a2=0 a3=1 items=0 ppid=2073 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.445000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 00:15:19.447000 audit[2162]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.447000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffffc84d30 a2=0 a3=1 items=0 ppid=2073 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.447000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit: BPF prog-id=107 op=LOAD Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2106 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133353564396238613239366237366261346534653233383831373731 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2106 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133353564396238613239366237366261346534653233383831373731 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.448000 audit: BPF prog-id=108 op=LOAD Sep 13 00:15:19.448000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2106 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133353564396238613239366237366261346534653233383831373731 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit: BPF prog-id=109 op=LOAD Sep 13 00:15:19.449000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2106 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133353564396238613239366237366261346534653233383831373731 Sep 13 00:15:19.449000 audit: BPF prog-id=109 op=UNLOAD Sep 13 00:15:19.449000 audit: BPF prog-id=108 op=UNLOAD Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:19.449000 audit: BPF prog-id=110 op=LOAD Sep 13 00:15:19.449000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2106 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133353564396238613239366237366261346534653233383831373731 Sep 13 00:15:19.454000 audit[2161]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.454000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd561c60 a2=0 a3=1 items=0 ppid=2073 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 00:15:19.473586 env[1216]: time="2025-09-13T00:15:19.473414878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-dbmhp,Uid:58f9570b-8fd0-43f0-99b3-5b1fc6df50ad,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"1355d9b8a296b76ba4e4e23881771e83a3c9eee8b012b7e707f2edf7d3b3cf8e\"" Sep 13 00:15:19.475099 env[1216]: time="2025-09-13T00:15:19.475050686Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 13 00:15:19.539000 audit[2169]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.539000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc6aeb430 a2=0 a3=1 items=0 ppid=2073 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 00:15:19.542000 audit[2171]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.542000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff4302030 a2=0 a3=1 items=0 ppid=2073 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.542000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 13 00:15:19.546000 audit[2174]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.546000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffddfcc7e0 a2=0 a3=1 items=0 ppid=2073 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 13 00:15:19.547000 audit[2175]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.547000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc7524310 a2=0 a3=1 items=0 ppid=2073 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.547000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 00:15:19.549000 audit[2177]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.549000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe07c0a70 a2=0 a3=1 items=0 ppid=2073 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 00:15:19.550000 audit[2178]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.550000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff3df1780 a2=0 a3=1 items=0 ppid=2073 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.550000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 00:15:19.553000 audit[2180]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.553000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff39d3c30 a2=0 a3=1 items=0 ppid=2073 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 00:15:19.556000 audit[2183]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.556000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe39a4c40 a2=0 a3=1 items=0 ppid=2073 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.556000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 13 00:15:19.557000 audit[2184]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.557000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff3d39c70 a2=0 a3=1 items=0 ppid=2073 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.557000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 00:15:19.559000 audit[2186]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.559000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcdfb2430 a2=0 a3=1 items=0 ppid=2073 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 00:15:19.561000 audit[2187]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.561000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5a0b8a0 a2=0 a3=1 items=0 ppid=2073 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.561000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 00:15:19.563000 audit[2189]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.563000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc12b74b0 a2=0 a3=1 items=0 ppid=2073 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.563000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:15:19.567000 audit[2192]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.567000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffca020340 a2=0 a3=1 items=0 ppid=2073 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:15:19.571000 audit[2195]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.571000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd3630b00 a2=0 a3=1 items=0 ppid=2073 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.571000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 00:15:19.572000 audit[2196]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.572000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffee875f0 a2=0 a3=1 items=0 ppid=2073 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 00:15:19.575000 audit[2198]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.575000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff938f0a0 a2=0 a3=1 items=0 ppid=2073 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.575000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:15:19.578000 audit[2201]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.578000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffed9f64e0 a2=0 a3=1 items=0 ppid=2073 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.578000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:15:19.579000 audit[2202]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.579000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2e008f0 a2=0 a3=1 items=0 ppid=2073 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.579000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 00:15:19.581000 audit[2204]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:15:19.581000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd71e8110 a2=0 a3=1 items=0 ppid=2073 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 00:15:19.602000 audit[2210]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:19.602000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd164f020 a2=0 a3=1 items=0 ppid=2073 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.602000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:19.616000 audit[2210]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:19.616000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffd164f020 a2=0 a3=1 items=0 ppid=2073 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.616000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:19.620000 audit[2215]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.620000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffda088be0 a2=0 a3=1 items=0 ppid=2073 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.620000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 00:15:19.622000 audit[2217]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.622000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd2723460 a2=0 a3=1 items=0 ppid=2073 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.622000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 13 00:15:19.626000 audit[2220]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.626000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdd3aee40 a2=0 a3=1 items=0 ppid=2073 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.626000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 13 00:15:19.627000 audit[2221]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.627000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5d2be80 a2=0 a3=1 items=0 ppid=2073 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.627000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 00:15:19.629000 audit[2223]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.629000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe068f660 a2=0 a3=1 items=0 ppid=2073 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.629000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 00:15:19.630000 audit[2224]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.630000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3d913e0 a2=0 a3=1 items=0 ppid=2073 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.630000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 00:15:19.632000 audit[2226]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.632000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe74e7330 a2=0 a3=1 items=0 ppid=2073 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.632000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 13 00:15:19.636000 audit[2229]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.636000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffbea1510 a2=0 a3=1 items=0 ppid=2073 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.636000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 00:15:19.637000 audit[2230]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.637000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8ac4f50 a2=0 a3=1 items=0 ppid=2073 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 00:15:19.639000 audit[2232]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.639000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe3002c70 a2=0 a3=1 items=0 ppid=2073 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.639000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 00:15:19.640000 audit[2233]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.640000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd67946a0 a2=0 a3=1 items=0 ppid=2073 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.640000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 00:15:19.642000 audit[2235]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.642000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff5100460 a2=0 a3=1 items=0 ppid=2073 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.642000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:15:19.646000 audit[2238]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.646000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe5d22c00 a2=0 a3=1 items=0 ppid=2073 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.646000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 00:15:19.652000 audit[2241]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.652000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffddc7ffa0 a2=0 a3=1 items=0 ppid=2073 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.652000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 13 00:15:19.653000 audit[2242]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.653000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff9ae3390 a2=0 a3=1 items=0 ppid=2073 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.653000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 00:15:19.656000 audit[2244]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.656000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc13efbf0 a2=0 a3=1 items=0 ppid=2073 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.656000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:15:19.659000 audit[2247]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.659000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe36ca420 a2=0 a3=1 items=0 ppid=2073 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.659000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:15:19.661000 audit[2248]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.661000 audit[2248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb5b7740 a2=0 a3=1 items=0 ppid=2073 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.661000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 00:15:19.663000 audit[2250]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.663000 audit[2250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffaedc2b0 a2=0 a3=1 items=0 ppid=2073 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 00:15:19.664000 audit[2251]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.664000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea7e68a0 a2=0 a3=1 items=0 ppid=2073 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.664000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 00:15:19.667000 audit[2253]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.667000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff8d6ee60 a2=0 a3=1 items=0 ppid=2073 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.667000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:15:19.670000 audit[2256]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:15:19.670000 audit[2256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd50da630 a2=0 a3=1 items=0 ppid=2073 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.670000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:15:19.673000 audit[2258]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 00:15:19.673000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffee2d3220 a2=0 a3=1 items=0 ppid=2073 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.673000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:19.673000 audit[2258]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 00:15:19.673000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffee2d3220 a2=0 a3=1 items=0 ppid=2073 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:19.673000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:20.452709 kubelet[1957]: E0913 00:15:20.445875 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:20.474009 kubelet[1957]: I0913 00:15:20.473955 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-lt5bp" podStartSLOduration=2.473937017 podStartE2EDuration="2.473937017s" podCreationTimestamp="2025-09-13 00:15:18 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:15:19.463819866 +0000 UTC m=+8.158456630" watchObservedRunningTime="2025-09-13 00:15:20.473937017 +0000 UTC m=+9.168573781" Sep 13 00:15:20.895617 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3487672568.mount: Deactivated successfully. Sep 13 00:15:21.439649 kubelet[1957]: E0913 00:15:21.439607 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:21.559255 env[1216]: time="2025-09-13T00:15:21.559186231Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:21.561119 env[1216]: time="2025-09-13T00:15:21.561083198Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:21.562894 env[1216]: time="2025-09-13T00:15:21.562862126Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:21.564194 env[1216]: time="2025-09-13T00:15:21.564153944Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:21.564987 env[1216]: time="2025-09-13T00:15:21.564957050Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 13 00:15:21.569963 env[1216]: time="2025-09-13T00:15:21.569920962Z" level=info msg="CreateContainer within sandbox \"1355d9b8a296b76ba4e4e23881771e83a3c9eee8b012b7e707f2edf7d3b3cf8e\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 13 00:15:21.581991 env[1216]: time="2025-09-13T00:15:21.581941312Z" level=info msg="CreateContainer within sandbox \"1355d9b8a296b76ba4e4e23881771e83a3c9eee8b012b7e707f2edf7d3b3cf8e\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"ad1a39fe9450babf945fe97e5f69ffce9d0478e04db1625751411dc92ccf0109\"" Sep 13 00:15:21.584685 env[1216]: time="2025-09-13T00:15:21.584639864Z" level=info msg="StartContainer for \"ad1a39fe9450babf945fe97e5f69ffce9d0478e04db1625751411dc92ccf0109\"" Sep 13 00:15:21.604965 systemd[1]: Started cri-containerd-ad1a39fe9450babf945fe97e5f69ffce9d0478e04db1625751411dc92ccf0109.scope. Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.625000 audit: BPF prog-id=111 op=LOAD Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2106 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:21.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164316133396665393435306261626639343566653937653566363966 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2106 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:21.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164316133396665393435306261626639343566653937653566363966 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit: BPF prog-id=112 op=LOAD Sep 13 00:15:21.626000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2106 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:21.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164316133396665393435306261626639343566653937653566363966 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit: BPF prog-id=113 op=LOAD Sep 13 00:15:21.626000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2106 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:21.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164316133396665393435306261626639343566653937653566363966 Sep 13 00:15:21.626000 audit: BPF prog-id=113 op=UNLOAD Sep 13 00:15:21.626000 audit: BPF prog-id=112 op=UNLOAD Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:21.626000 audit: BPF prog-id=114 op=LOAD Sep 13 00:15:21.626000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2106 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:21.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164316133396665393435306261626639343566653937653566363966 Sep 13 00:15:21.643710 env[1216]: time="2025-09-13T00:15:21.643659589Z" level=info msg="StartContainer for \"ad1a39fe9450babf945fe97e5f69ffce9d0478e04db1625751411dc92ccf0109\" returns successfully" Sep 13 00:15:24.311914 kubelet[1957]: E0913 00:15:24.311873 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:24.324253 kubelet[1957]: I0913 00:15:24.324197 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-58fc44c59b-dbmhp" podStartSLOduration=3.232368248 podStartE2EDuration="5.324181897s" podCreationTimestamp="2025-09-13 00:15:19 +0000 UTC" firstStartedPulling="2025-09-13 00:15:19.474387619 +0000 UTC m=+8.169024383" lastFinishedPulling="2025-09-13 00:15:21.566201268 +0000 UTC m=+10.260838032" observedRunningTime="2025-09-13 00:15:22.465523553 +0000 UTC m=+11.160160317" watchObservedRunningTime="2025-09-13 00:15:24.324181897 +0000 UTC m=+13.018818661" Sep 13 00:15:24.446341 kubelet[1957]: E0913 00:15:24.446297 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:25.009478 update_engine[1207]: I0913 00:15:25.008106 1207 update_attempter.cc:509] Updating boot flags... Sep 13 00:15:27.025000 audit[1353]: USER_END pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:15:27.026151 sudo[1353]: pam_unix(sudo:session): session closed for user root Sep 13 00:15:27.029646 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 13 00:15:27.029746 kernel: audit: type=1106 audit(1757722527.025:918): pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:15:27.029772 kernel: audit: type=1104 audit(1757722527.025:919): pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:15:27.025000 audit[1353]: CRED_DISP pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:15:27.030168 sshd[1349]: pam_unix(sshd:session): session closed for user core Sep 13 00:15:27.029000 audit[1349]: USER_END pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:27.032544 systemd-logind[1203]: Session 7 logged out. Waiting for processes to exit. Sep 13 00:15:27.032774 systemd[1]: sshd@6-10.0.0.69:22-10.0.0.1:32962.service: Deactivated successfully. Sep 13 00:15:27.033440 systemd[1]: session-7.scope: Deactivated successfully. Sep 13 00:15:27.033589 systemd[1]: session-7.scope: Consumed 7.133s CPU time. Sep 13 00:15:27.034133 systemd-logind[1203]: Removed session 7. Sep 13 00:15:27.034988 kernel: audit: type=1106 audit(1757722527.029:920): pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:27.030000 audit[1349]: CRED_DISP pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:27.037206 kernel: audit: type=1104 audit(1757722527.030:921): pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:27.037260 kernel: audit: type=1131 audit(1757722527.031:922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.69:22-10.0.0.1:32962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:27.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.69:22-10.0.0.1:32962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:27.803000 audit[2366]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:27.803000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff0fcf5a0 a2=0 a3=1 items=0 ppid=2073 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:27.810173 kernel: audit: type=1325 audit(1757722527.803:923): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:27.810253 kernel: audit: type=1300 audit(1757722527.803:923): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff0fcf5a0 a2=0 a3=1 items=0 ppid=2073 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:27.810277 kernel: audit: type=1327 audit(1757722527.803:923): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:27.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:27.821000 audit[2366]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:27.824099 kernel: audit: type=1325 audit(1757722527.821:924): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:27.821000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0fcf5a0 a2=0 a3=1 items=0 ppid=2073 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:27.821000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:27.828102 kernel: audit: type=1300 audit(1757722527.821:924): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0fcf5a0 a2=0 a3=1 items=0 ppid=2073 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:27.835000 audit[2368]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:27.835000 audit[2368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc7885fa0 a2=0 a3=1 items=0 ppid=2073 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:27.835000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:27.843000 audit[2368]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:27.843000 audit[2368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc7885fa0 a2=0 a3=1 items=0 ppid=2073 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:27.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.029000 audit[2370]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.031131 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:15:32.031184 kernel: audit: type=1325 audit(1757722532.029:927): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.029000 audit[2370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff03c8830 a2=0 a3=1 items=0 ppid=2073 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.035833 kernel: audit: type=1300 audit(1757722532.029:927): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff03c8830 a2=0 a3=1 items=0 ppid=2073 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.035896 kernel: audit: type=1327 audit(1757722532.029:927): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.029000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.038000 audit[2370]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.038000 audit[2370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff03c8830 a2=0 a3=1 items=0 ppid=2073 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.047591 kernel: audit: type=1325 audit(1757722532.038:928): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.047664 kernel: audit: type=1300 audit(1757722532.038:928): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff03c8830 a2=0 a3=1 items=0 ppid=2073 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.047687 kernel: audit: type=1327 audit(1757722532.038:928): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.038000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.076339 systemd[1]: Created slice kubepods-besteffort-podb39b23b3_22c3_46af_a502_45c3c76b47fe.slice. Sep 13 00:15:32.086000 audit[2372]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.090235 kernel: audit: type=1325 audit(1757722532.086:929): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.086000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdc5d2420 a2=0 a3=1 items=0 ppid=2073 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.096659 kernel: audit: type=1300 audit(1757722532.086:929): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdc5d2420 a2=0 a3=1 items=0 ppid=2073 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.096746 kernel: audit: type=1327 audit(1757722532.086:929): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.096000 audit[2372]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.100203 kernel: audit: type=1325 audit(1757722532.096:930): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:32.096000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdc5d2420 a2=0 a3=1 items=0 ppid=2073 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:32.124601 kubelet[1957]: I0913 00:15:32.124563 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/b39b23b3-22c3-46af-a502-45c3c76b47fe-typha-certs\") pod \"calico-typha-85bcbc8b7-zfbpl\" (UID: \"b39b23b3-22c3-46af-a502-45c3c76b47fe\") " pod="calico-system/calico-typha-85bcbc8b7-zfbpl" Sep 13 00:15:32.125084 kubelet[1957]: I0913 00:15:32.125039 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b39b23b3-22c3-46af-a502-45c3c76b47fe-tigera-ca-bundle\") pod \"calico-typha-85bcbc8b7-zfbpl\" (UID: \"b39b23b3-22c3-46af-a502-45c3c76b47fe\") " pod="calico-system/calico-typha-85bcbc8b7-zfbpl" Sep 13 00:15:32.125202 kubelet[1957]: I0913 00:15:32.125187 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9rqw2\" (UniqueName: \"kubernetes.io/projected/b39b23b3-22c3-46af-a502-45c3c76b47fe-kube-api-access-9rqw2\") pod \"calico-typha-85bcbc8b7-zfbpl\" (UID: \"b39b23b3-22c3-46af-a502-45c3c76b47fe\") " pod="calico-system/calico-typha-85bcbc8b7-zfbpl" Sep 13 00:15:32.273774 systemd[1]: Created slice kubepods-besteffort-podca3054e6_fd3a_4fd5_b990_16f9792d14bc.slice. Sep 13 00:15:32.327463 kubelet[1957]: I0913 00:15:32.327358 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-tigera-ca-bundle\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327463 kubelet[1957]: I0913 00:15:32.327406 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-cni-log-dir\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327463 kubelet[1957]: I0913 00:15:32.327424 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-xtables-lock\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327463 kubelet[1957]: I0913 00:15:32.327440 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-cni-bin-dir\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327463 kubelet[1957]: I0913 00:15:32.327458 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-cni-net-dir\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327697 kubelet[1957]: I0913 00:15:32.327473 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-flexvol-driver-host\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327697 kubelet[1957]: I0913 00:15:32.327496 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-node-certs\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327697 kubelet[1957]: I0913 00:15:32.327513 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-lib-modules\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327697 kubelet[1957]: I0913 00:15:32.327535 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rpgpg\" (UniqueName: \"kubernetes.io/projected/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-kube-api-access-rpgpg\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.327697 kubelet[1957]: I0913 00:15:32.327551 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-policysync\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.328251 kubelet[1957]: I0913 00:15:32.327572 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-var-lib-calico\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.328251 kubelet[1957]: I0913 00:15:32.327591 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/ca3054e6-fd3a-4fd5-b990-16f9792d14bc-var-run-calico\") pod \"calico-node-rmmgp\" (UID: \"ca3054e6-fd3a-4fd5-b990-16f9792d14bc\") " pod="calico-system/calico-node-rmmgp" Sep 13 00:15:32.379175 kubelet[1957]: E0913 00:15:32.379142 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:32.380024 env[1216]: time="2025-09-13T00:15:32.379601920Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-85bcbc8b7-zfbpl,Uid:b39b23b3-22c3-46af-a502-45c3c76b47fe,Namespace:calico-system,Attempt:0,}" Sep 13 00:15:32.393761 env[1216]: time="2025-09-13T00:15:32.393692457Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:32.393880 env[1216]: time="2025-09-13T00:15:32.393738977Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:32.393880 env[1216]: time="2025-09-13T00:15:32.393757816Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:32.393954 env[1216]: time="2025-09-13T00:15:32.393894655Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5c462f245b1c3319866f78dcd9bce519271f639c6bb93f7a41138200d8939529 pid=2382 runtime=io.containerd.runc.v2 Sep 13 00:15:32.416012 systemd[1]: Started cri-containerd-5c462f245b1c3319866f78dcd9bce519271f639c6bb93f7a41138200d8939529.scope. Sep 13 00:15:32.430379 kubelet[1957]: E0913 00:15:32.430308 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.430379 kubelet[1957]: W0913 00:15:32.430331 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.430379 kubelet[1957]: E0913 00:15:32.430349 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.436332 kubelet[1957]: E0913 00:15:32.436301 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.436332 kubelet[1957]: W0913 00:15:32.436321 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.436604 kubelet[1957]: E0913 00:15:32.436338 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.436000 audit: BPF prog-id=115 op=LOAD Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2382 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343632663234356231633333313938363666373864636439626365 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2382 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343632663234356231633333313938363666373864636439626365 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit: BPF prog-id=116 op=LOAD Sep 13 00:15:32.437000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2382 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343632663234356231633333313938363666373864636439626365 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit: BPF prog-id=117 op=LOAD Sep 13 00:15:32.437000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2382 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343632663234356231633333313938363666373864636439626365 Sep 13 00:15:32.437000 audit: BPF prog-id=117 op=UNLOAD Sep 13 00:15:32.437000 audit: BPF prog-id=116 op=UNLOAD Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.437000 audit: BPF prog-id=118 op=LOAD Sep 13 00:15:32.437000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2382 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343632663234356231633333313938363666373864636439626365 Sep 13 00:15:32.441020 kubelet[1957]: E0913 00:15:32.441001 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.441020 kubelet[1957]: W0913 00:15:32.441020 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.441140 kubelet[1957]: E0913 00:15:32.441041 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.457448 env[1216]: time="2025-09-13T00:15:32.457408289Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-85bcbc8b7-zfbpl,Uid:b39b23b3-22c3-46af-a502-45c3c76b47fe,Namespace:calico-system,Attempt:0,} returns sandbox id \"5c462f245b1c3319866f78dcd9bce519271f639c6bb93f7a41138200d8939529\"" Sep 13 00:15:32.458100 kubelet[1957]: E0913 00:15:32.458079 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:32.459428 env[1216]: time="2025-09-13T00:15:32.459395989Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 13 00:15:32.559475 kubelet[1957]: E0913 00:15:32.559405 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g5255" podUID="1931babe-4e10-42d3-96e5-479d8859d7ad" Sep 13 00:15:32.577784 env[1216]: time="2025-09-13T00:15:32.577672266Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rmmgp,Uid:ca3054e6-fd3a-4fd5-b990-16f9792d14bc,Namespace:calico-system,Attempt:0,}" Sep 13 00:15:32.597789 env[1216]: time="2025-09-13T00:15:32.597306547Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:32.597789 env[1216]: time="2025-09-13T00:15:32.597358586Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:32.597789 env[1216]: time="2025-09-13T00:15:32.597369386Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:32.597995 env[1216]: time="2025-09-13T00:15:32.597909300Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076 pid=2427 runtime=io.containerd.runc.v2 Sep 13 00:15:32.612422 systemd[1]: Started cri-containerd-8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076.scope. Sep 13 00:15:32.614252 kubelet[1957]: E0913 00:15:32.614103 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.614252 kubelet[1957]: W0913 00:15:32.614125 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.614252 kubelet[1957]: E0913 00:15:32.614147 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.614682 kubelet[1957]: E0913 00:15:32.614565 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.614682 kubelet[1957]: W0913 00:15:32.614578 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.614682 kubelet[1957]: E0913 00:15:32.614590 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.614970 kubelet[1957]: E0913 00:15:32.614860 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.614970 kubelet[1957]: W0913 00:15:32.614871 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.614970 kubelet[1957]: E0913 00:15:32.614884 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.615312 kubelet[1957]: E0913 00:15:32.615181 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.615312 kubelet[1957]: W0913 00:15:32.615193 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.615312 kubelet[1957]: E0913 00:15:32.615203 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.615811 kubelet[1957]: E0913 00:15:32.615654 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.615811 kubelet[1957]: W0913 00:15:32.615668 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.615811 kubelet[1957]: E0913 00:15:32.615705 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.616116 kubelet[1957]: E0913 00:15:32.615996 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.616116 kubelet[1957]: W0913 00:15:32.616007 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.616116 kubelet[1957]: E0913 00:15:32.616017 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.616512 kubelet[1957]: E0913 00:15:32.616364 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.616512 kubelet[1957]: W0913 00:15:32.616375 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.616512 kubelet[1957]: E0913 00:15:32.616385 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.616997 kubelet[1957]: E0913 00:15:32.616870 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.616997 kubelet[1957]: W0913 00:15:32.616882 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.616997 kubelet[1957]: E0913 00:15:32.616892 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.617299 kubelet[1957]: E0913 00:15:32.617190 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.617299 kubelet[1957]: W0913 00:15:32.617205 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.617299 kubelet[1957]: E0913 00:15:32.617214 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.617554 kubelet[1957]: E0913 00:15:32.617459 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.617554 kubelet[1957]: W0913 00:15:32.617472 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.617554 kubelet[1957]: E0913 00:15:32.617481 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.617816 kubelet[1957]: E0913 00:15:32.617715 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.617816 kubelet[1957]: W0913 00:15:32.617728 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.617816 kubelet[1957]: E0913 00:15:32.617737 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.618104 kubelet[1957]: E0913 00:15:32.617982 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.618104 kubelet[1957]: W0913 00:15:32.617994 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.618104 kubelet[1957]: E0913 00:15:32.618003 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.618338 kubelet[1957]: E0913 00:15:32.618284 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.618338 kubelet[1957]: W0913 00:15:32.618309 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.618527 kubelet[1957]: E0913 00:15:32.618425 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.618807 kubelet[1957]: E0913 00:15:32.618694 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.618807 kubelet[1957]: W0913 00:15:32.618706 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.618807 kubelet[1957]: E0913 00:15:32.618715 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.619073 kubelet[1957]: E0913 00:15:32.618968 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.619073 kubelet[1957]: W0913 00:15:32.618980 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.619073 kubelet[1957]: E0913 00:15:32.618989 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.619392 kubelet[1957]: E0913 00:15:32.619263 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.619392 kubelet[1957]: W0913 00:15:32.619275 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.619392 kubelet[1957]: E0913 00:15:32.619285 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.619649 kubelet[1957]: E0913 00:15:32.619557 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.619649 kubelet[1957]: W0913 00:15:32.619568 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.619649 kubelet[1957]: E0913 00:15:32.619578 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.619909 kubelet[1957]: E0913 00:15:32.619811 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.619909 kubelet[1957]: W0913 00:15:32.619822 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.619909 kubelet[1957]: E0913 00:15:32.619835 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.620221 kubelet[1957]: E0913 00:15:32.620120 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.620221 kubelet[1957]: W0913 00:15:32.620132 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.620221 kubelet[1957]: E0913 00:15:32.620141 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.620514 kubelet[1957]: E0913 00:15:32.620430 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.620514 kubelet[1957]: W0913 00:15:32.620442 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.620514 kubelet[1957]: E0913 00:15:32.620452 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.629670 kubelet[1957]: E0913 00:15:32.629648 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.629670 kubelet[1957]: W0913 00:15:32.629665 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.630057 kubelet[1957]: E0913 00:15:32.629680 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.630057 kubelet[1957]: I0913 00:15:32.629708 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pszsc\" (UniqueName: \"kubernetes.io/projected/1931babe-4e10-42d3-96e5-479d8859d7ad-kube-api-access-pszsc\") pod \"csi-node-driver-g5255\" (UID: \"1931babe-4e10-42d3-96e5-479d8859d7ad\") " pod="calico-system/csi-node-driver-g5255" Sep 13 00:15:32.630057 kubelet[1957]: E0913 00:15:32.629912 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.630057 kubelet[1957]: W0913 00:15:32.629922 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.630057 kubelet[1957]: E0913 00:15:32.629930 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.630057 kubelet[1957]: I0913 00:15:32.629943 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/1931babe-4e10-42d3-96e5-479d8859d7ad-socket-dir\") pod \"csi-node-driver-g5255\" (UID: \"1931babe-4e10-42d3-96e5-479d8859d7ad\") " pod="calico-system/csi-node-driver-g5255" Sep 13 00:15:32.630057 kubelet[1957]: E0913 00:15:32.630104 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.630517 kubelet[1957]: W0913 00:15:32.630115 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.630517 kubelet[1957]: E0913 00:15:32.630124 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.630517 kubelet[1957]: I0913 00:15:32.630137 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/1931babe-4e10-42d3-96e5-479d8859d7ad-varrun\") pod \"csi-node-driver-g5255\" (UID: \"1931babe-4e10-42d3-96e5-479d8859d7ad\") " pod="calico-system/csi-node-driver-g5255" Sep 13 00:15:32.630517 kubelet[1957]: E0913 00:15:32.630296 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.630517 kubelet[1957]: W0913 00:15:32.630307 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.630517 kubelet[1957]: E0913 00:15:32.630317 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.630517 kubelet[1957]: I0913 00:15:32.630330 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/1931babe-4e10-42d3-96e5-479d8859d7ad-registration-dir\") pod \"csi-node-driver-g5255\" (UID: \"1931babe-4e10-42d3-96e5-479d8859d7ad\") " pod="calico-system/csi-node-driver-g5255" Sep 13 00:15:32.631106 kubelet[1957]: E0913 00:15:32.630778 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.631106 kubelet[1957]: W0913 00:15:32.630795 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.631106 kubelet[1957]: E0913 00:15:32.630823 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.631106 kubelet[1957]: E0913 00:15:32.630984 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.631106 kubelet[1957]: W0913 00:15:32.630992 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.631106 kubelet[1957]: E0913 00:15:32.631006 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.631563 kubelet[1957]: E0913 00:15:32.631459 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.631563 kubelet[1957]: W0913 00:15:32.631472 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.631563 kubelet[1957]: E0913 00:15:32.631488 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.631843 kubelet[1957]: E0913 00:15:32.631747 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.631843 kubelet[1957]: W0913 00:15:32.631758 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.631843 kubelet[1957]: E0913 00:15:32.631782 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.632101 kubelet[1957]: E0913 00:15:32.632000 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.632101 kubelet[1957]: W0913 00:15:32.632011 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.632101 kubelet[1957]: E0913 00:15:32.632031 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.632463 kubelet[1957]: E0913 00:15:32.632360 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.632463 kubelet[1957]: W0913 00:15:32.632372 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.632463 kubelet[1957]: E0913 00:15:32.632395 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.632463 kubelet[1957]: I0913 00:15:32.632413 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/1931babe-4e10-42d3-96e5-479d8859d7ad-kubelet-dir\") pod \"csi-node-driver-g5255\" (UID: \"1931babe-4e10-42d3-96e5-479d8859d7ad\") " pod="calico-system/csi-node-driver-g5255" Sep 13 00:15:32.632767 kubelet[1957]: E0913 00:15:32.632674 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.632767 kubelet[1957]: W0913 00:15:32.632685 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.632767 kubelet[1957]: E0913 00:15:32.632706 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.633054 kubelet[1957]: E0913 00:15:32.632947 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.633054 kubelet[1957]: W0913 00:15:32.632958 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.633054 kubelet[1957]: E0913 00:15:32.632967 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.633478 kubelet[1957]: E0913 00:15:32.633261 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.633478 kubelet[1957]: W0913 00:15:32.633272 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.633478 kubelet[1957]: E0913 00:15:32.633300 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.633716 kubelet[1957]: E0913 00:15:32.633663 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.633716 kubelet[1957]: W0913 00:15:32.633675 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.633716 kubelet[1957]: E0913 00:15:32.633686 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.633901 kubelet[1957]: E0913 00:15:32.633888 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.633901 kubelet[1957]: W0913 00:15:32.633900 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.633978 kubelet[1957]: E0913 00:15:32.633910 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.639000 audit: BPF prog-id=119 op=LOAD Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2427 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656139396138626631353733623539626638353335623935366439 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2427 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656139396138626631353733623539626638353335623935366439 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit: BPF prog-id=120 op=LOAD Sep 13 00:15:32.640000 audit[2437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2427 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656139396138626631353733623539626638353335623935366439 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit: BPF prog-id=121 op=LOAD Sep 13 00:15:32.640000 audit[2437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2427 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656139396138626631353733623539626638353335623935366439 Sep 13 00:15:32.640000 audit: BPF prog-id=121 op=UNLOAD Sep 13 00:15:32.640000 audit: BPF prog-id=120 op=UNLOAD Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:32.640000 audit: BPF prog-id=122 op=LOAD Sep 13 00:15:32.640000 audit[2437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2427 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656139396138626631353733623539626638353335623935366439 Sep 13 00:15:32.654126 env[1216]: time="2025-09-13T00:15:32.654086249Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rmmgp,Uid:ca3054e6-fd3a-4fd5-b990-16f9792d14bc,Namespace:calico-system,Attempt:0,} returns sandbox id \"8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076\"" Sep 13 00:15:32.734627 kubelet[1957]: E0913 00:15:32.734583 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.734627 kubelet[1957]: W0913 00:15:32.734608 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.734627 kubelet[1957]: E0913 00:15:32.734627 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.734830 kubelet[1957]: E0913 00:15:32.734821 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.734830 kubelet[1957]: W0913 00:15:32.734829 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.734877 kubelet[1957]: E0913 00:15:32.734839 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.735034 kubelet[1957]: E0913 00:15:32.735023 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.735034 kubelet[1957]: W0913 00:15:32.735034 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.735124 kubelet[1957]: E0913 00:15:32.735043 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.735406 kubelet[1957]: E0913 00:15:32.735324 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.735406 kubelet[1957]: W0913 00:15:32.735333 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.735406 kubelet[1957]: E0913 00:15:32.735351 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.735668 kubelet[1957]: E0913 00:15:32.735651 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.735668 kubelet[1957]: W0913 00:15:32.735662 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.735762 kubelet[1957]: E0913 00:15:32.735676 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.736224 kubelet[1957]: E0913 00:15:32.736205 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.736224 kubelet[1957]: W0913 00:15:32.736223 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.736346 kubelet[1957]: E0913 00:15:32.736326 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.736483 kubelet[1957]: E0913 00:15:32.736471 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.736534 kubelet[1957]: W0913 00:15:32.736485 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.736625 kubelet[1957]: E0913 00:15:32.736590 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.736707 kubelet[1957]: E0913 00:15:32.736693 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.736707 kubelet[1957]: W0913 00:15:32.736705 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.736828 kubelet[1957]: E0913 00:15:32.736801 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.736879 kubelet[1957]: E0913 00:15:32.736864 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.736879 kubelet[1957]: W0913 00:15:32.736872 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.737045 kubelet[1957]: E0913 00:15:32.736954 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.737883 kubelet[1957]: E0913 00:15:32.737864 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.737883 kubelet[1957]: W0913 00:15:32.737878 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.737984 kubelet[1957]: E0913 00:15:32.737977 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.738412 kubelet[1957]: E0913 00:15:32.738398 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.738412 kubelet[1957]: W0913 00:15:32.738411 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.738619 kubelet[1957]: E0913 00:15:32.738517 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.738759 kubelet[1957]: E0913 00:15:32.738747 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.738759 kubelet[1957]: W0913 00:15:32.738758 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.738881 kubelet[1957]: E0913 00:15:32.738855 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.738987 kubelet[1957]: E0913 00:15:32.738977 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.738987 kubelet[1957]: W0913 00:15:32.738985 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.739146 kubelet[1957]: E0913 00:15:32.739100 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.739762 kubelet[1957]: E0913 00:15:32.739746 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.739762 kubelet[1957]: W0913 00:15:32.739758 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.739891 kubelet[1957]: E0913 00:15:32.739862 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.740000 kubelet[1957]: E0913 00:15:32.739988 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.740000 kubelet[1957]: W0913 00:15:32.739999 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.740140 kubelet[1957]: E0913 00:15:32.740115 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.740192 kubelet[1957]: E0913 00:15:32.740171 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.740192 kubelet[1957]: W0913 00:15:32.740179 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.740305 kubelet[1957]: E0913 00:15:32.740262 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.740632 kubelet[1957]: E0913 00:15:32.740618 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.740632 kubelet[1957]: W0913 00:15:32.740630 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.740778 kubelet[1957]: E0913 00:15:32.740728 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.740864 kubelet[1957]: E0913 00:15:32.740854 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.740864 kubelet[1957]: W0913 00:15:32.740863 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.740982 kubelet[1957]: E0913 00:15:32.740946 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.741143 kubelet[1957]: E0913 00:15:32.741128 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.741143 kubelet[1957]: W0913 00:15:32.741142 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.741230 kubelet[1957]: E0913 00:15:32.741157 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.741376 kubelet[1957]: E0913 00:15:32.741364 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.741376 kubelet[1957]: W0913 00:15:32.741375 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.741823 kubelet[1957]: E0913 00:15:32.741462 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.741823 kubelet[1957]: E0913 00:15:32.741505 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.741823 kubelet[1957]: W0913 00:15:32.741513 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.741823 kubelet[1957]: E0913 00:15:32.741654 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.741823 kubelet[1957]: W0913 00:15:32.741661 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.741823 kubelet[1957]: E0913 00:15:32.741672 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.741823 kubelet[1957]: E0913 00:15:32.741783 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.741823 kubelet[1957]: E0913 00:15:32.741791 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.741823 kubelet[1957]: W0913 00:15:32.741799 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.741823 kubelet[1957]: E0913 00:15:32.741809 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.742123 kubelet[1957]: E0913 00:15:32.741960 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.742123 kubelet[1957]: W0913 00:15:32.741967 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.742123 kubelet[1957]: E0913 00:15:32.741975 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.742123 kubelet[1957]: E0913 00:15:32.742112 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.742123 kubelet[1957]: W0913 00:15:32.742119 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.742239 kubelet[1957]: E0913 00:15:32.742127 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:32.754335 kubelet[1957]: E0913 00:15:32.754311 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:32.754469 kubelet[1957]: W0913 00:15:32.754456 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:32.754533 kubelet[1957]: E0913 00:15:32.754522 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:33.113000 audit[2522]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:33.113000 audit[2522]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffff775bc70 a2=0 a3=1 items=0 ppid=2073 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:33.113000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:33.119000 audit[2522]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:33.119000 audit[2522]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff775bc70 a2=0 a3=1 items=0 ppid=2073 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:33.119000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:33.234933 systemd[1]: run-containerd-runc-k8s.io-5c462f245b1c3319866f78dcd9bce519271f639c6bb93f7a41138200d8939529-runc.Av35Sh.mount: Deactivated successfully. Sep 13 00:15:33.517674 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3529983178.mount: Deactivated successfully. Sep 13 00:15:34.418728 kubelet[1957]: E0913 00:15:34.418677 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g5255" podUID="1931babe-4e10-42d3-96e5-479d8859d7ad" Sep 13 00:15:34.601349 env[1216]: time="2025-09-13T00:15:34.601297373Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:34.603181 env[1216]: time="2025-09-13T00:15:34.603138875Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:34.605367 env[1216]: time="2025-09-13T00:15:34.605323535Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:34.607123 env[1216]: time="2025-09-13T00:15:34.607090999Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:34.607762 env[1216]: time="2025-09-13T00:15:34.607714233Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 13 00:15:34.612456 env[1216]: time="2025-09-13T00:15:34.612418789Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 13 00:15:34.638969 env[1216]: time="2025-09-13T00:15:34.638917183Z" level=info msg="CreateContainer within sandbox \"5c462f245b1c3319866f78dcd9bce519271f639c6bb93f7a41138200d8939529\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 13 00:15:34.674104 env[1216]: time="2025-09-13T00:15:34.673986776Z" level=info msg="CreateContainer within sandbox \"5c462f245b1c3319866f78dcd9bce519271f639c6bb93f7a41138200d8939529\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"c4c065729fe50d4ad578fc7cc43cec29d677b958ea3b1d4fbb3664b65ecc76d8\"" Sep 13 00:15:34.675303 env[1216]: time="2025-09-13T00:15:34.675270524Z" level=info msg="StartContainer for \"c4c065729fe50d4ad578fc7cc43cec29d677b958ea3b1d4fbb3664b65ecc76d8\"" Sep 13 00:15:34.697535 systemd[1]: Started cri-containerd-c4c065729fe50d4ad578fc7cc43cec29d677b958ea3b1d4fbb3664b65ecc76d8.scope. Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit: BPF prog-id=123 op=LOAD Sep 13 00:15:34.713000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.713000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2382 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:34.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334633036353732396665353064346164353738666337636334336365 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2382 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:34.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334633036353732396665353064346164353738666337636334336365 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.714000 audit: BPF prog-id=124 op=LOAD Sep 13 00:15:34.714000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2382 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:34.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334633036353732396665353064346164353738666337636334336365 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit: BPF prog-id=125 op=LOAD Sep 13 00:15:34.715000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2382 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:34.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334633036353732396665353064346164353738666337636334336365 Sep 13 00:15:34.715000 audit: BPF prog-id=125 op=UNLOAD Sep 13 00:15:34.715000 audit: BPF prog-id=124 op=UNLOAD Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:34.715000 audit: BPF prog-id=126 op=LOAD Sep 13 00:15:34.715000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2382 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:34.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334633036353732396665353064346164353738666337636334336365 Sep 13 00:15:34.748940 env[1216]: time="2025-09-13T00:15:34.748890959Z" level=info msg="StartContainer for \"c4c065729fe50d4ad578fc7cc43cec29d677b958ea3b1d4fbb3664b65ecc76d8\" returns successfully" Sep 13 00:15:35.465992 kubelet[1957]: E0913 00:15:35.465950 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:35.544197 kubelet[1957]: E0913 00:15:35.544156 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.544197 kubelet[1957]: W0913 00:15:35.544181 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.544197 kubelet[1957]: E0913 00:15:35.544201 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.544457 kubelet[1957]: E0913 00:15:35.544429 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.544457 kubelet[1957]: W0913 00:15:35.544437 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.544457 kubelet[1957]: E0913 00:15:35.544446 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.544648 kubelet[1957]: E0913 00:15:35.544627 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.544648 kubelet[1957]: W0913 00:15:35.544639 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.544648 kubelet[1957]: E0913 00:15:35.544648 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.544820 kubelet[1957]: E0913 00:15:35.544801 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.544820 kubelet[1957]: W0913 00:15:35.544812 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.544820 kubelet[1957]: E0913 00:15:35.544819 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.545002 kubelet[1957]: E0913 00:15:35.544982 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.545002 kubelet[1957]: W0913 00:15:35.544993 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.545002 kubelet[1957]: E0913 00:15:35.545001 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.545173 kubelet[1957]: E0913 00:15:35.545145 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.545173 kubelet[1957]: W0913 00:15:35.545157 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.545173 kubelet[1957]: E0913 00:15:35.545166 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.545339 kubelet[1957]: E0913 00:15:35.545321 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.545339 kubelet[1957]: W0913 00:15:35.545328 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.545339 kubelet[1957]: E0913 00:15:35.545336 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.545506 kubelet[1957]: E0913 00:15:35.545472 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.545506 kubelet[1957]: W0913 00:15:35.545479 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.545506 kubelet[1957]: E0913 00:15:35.545488 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.545856 kubelet[1957]: E0913 00:15:35.545627 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.545856 kubelet[1957]: W0913 00:15:35.545634 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.545856 kubelet[1957]: E0913 00:15:35.545641 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.545856 kubelet[1957]: E0913 00:15:35.545809 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.545856 kubelet[1957]: W0913 00:15:35.545816 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.545856 kubelet[1957]: E0913 00:15:35.545823 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.546003 kubelet[1957]: E0913 00:15:35.545948 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.546003 kubelet[1957]: W0913 00:15:35.545955 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.546003 kubelet[1957]: E0913 00:15:35.545961 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.546137 kubelet[1957]: E0913 00:15:35.546089 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.546137 kubelet[1957]: W0913 00:15:35.546102 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.546137 kubelet[1957]: E0913 00:15:35.546110 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.546563 kubelet[1957]: E0913 00:15:35.546304 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.546563 kubelet[1957]: W0913 00:15:35.546313 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.546563 kubelet[1957]: E0913 00:15:35.546321 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.546563 kubelet[1957]: E0913 00:15:35.546491 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.546563 kubelet[1957]: W0913 00:15:35.546498 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.546563 kubelet[1957]: E0913 00:15:35.546505 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.546712 kubelet[1957]: E0913 00:15:35.546648 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.546712 kubelet[1957]: W0913 00:15:35.546655 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.546712 kubelet[1957]: E0913 00:15:35.546662 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.554054 kubelet[1957]: E0913 00:15:35.553987 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.554054 kubelet[1957]: W0913 00:15:35.554035 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.554383 kubelet[1957]: E0913 00:15:35.554256 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.554752 kubelet[1957]: E0913 00:15:35.554590 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.554752 kubelet[1957]: W0913 00:15:35.554606 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.554752 kubelet[1957]: E0913 00:15:35.554624 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.555023 kubelet[1957]: E0913 00:15:35.554939 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.555023 kubelet[1957]: W0913 00:15:35.555008 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.555343 kubelet[1957]: E0913 00:15:35.555179 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.555591 kubelet[1957]: E0913 00:15:35.555460 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.555591 kubelet[1957]: W0913 00:15:35.555476 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.555591 kubelet[1957]: E0913 00:15:35.555492 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.555825 kubelet[1957]: E0913 00:15:35.555762 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.555825 kubelet[1957]: W0913 00:15:35.555812 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.556004 kubelet[1957]: E0913 00:15:35.555936 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.556254 kubelet[1957]: E0913 00:15:35.556089 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.556254 kubelet[1957]: W0913 00:15:35.556098 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.556254 kubelet[1957]: E0913 00:15:35.556120 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.556518 kubelet[1957]: E0913 00:15:35.556425 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.556518 kubelet[1957]: W0913 00:15:35.556501 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.556715 kubelet[1957]: E0913 00:15:35.556637 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.556962 kubelet[1957]: E0913 00:15:35.556782 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.556962 kubelet[1957]: W0913 00:15:35.556792 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.556962 kubelet[1957]: E0913 00:15:35.556807 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.557236 kubelet[1957]: E0913 00:15:35.557151 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.557236 kubelet[1957]: W0913 00:15:35.557222 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.557596 kubelet[1957]: E0913 00:15:35.557360 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.557658 kubelet[1957]: E0913 00:15:35.557606 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.557658 kubelet[1957]: W0913 00:15:35.557617 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.557658 kubelet[1957]: E0913 00:15:35.557637 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.557788 kubelet[1957]: E0913 00:15:35.557766 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.557788 kubelet[1957]: W0913 00:15:35.557777 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.557788 kubelet[1957]: E0913 00:15:35.557785 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.558031 kubelet[1957]: E0913 00:15:35.558001 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.558031 kubelet[1957]: W0913 00:15:35.558015 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.558147 kubelet[1957]: E0913 00:15:35.558112 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.558338 kubelet[1957]: E0913 00:15:35.558318 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.558338 kubelet[1957]: W0913 00:15:35.558328 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.558446 kubelet[1957]: E0913 00:15:35.558407 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.558577 kubelet[1957]: E0913 00:15:35.558562 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.558577 kubelet[1957]: W0913 00:15:35.558570 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.558676 kubelet[1957]: E0913 00:15:35.558581 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.558761 kubelet[1957]: E0913 00:15:35.558737 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.558761 kubelet[1957]: W0913 00:15:35.558748 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.558761 kubelet[1957]: E0913 00:15:35.558760 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.558917 kubelet[1957]: E0913 00:15:35.558897 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.558917 kubelet[1957]: W0913 00:15:35.558908 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.558917 kubelet[1957]: E0913 00:15:35.558915 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.559134 kubelet[1957]: E0913 00:15:35.559057 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.559134 kubelet[1957]: W0913 00:15:35.559094 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.559134 kubelet[1957]: E0913 00:15:35.559103 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.559727 kubelet[1957]: E0913 00:15:35.559696 1957 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:15:35.559727 kubelet[1957]: W0913 00:15:35.559717 1957 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:15:35.559798 kubelet[1957]: E0913 00:15:35.559730 1957 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:15:35.799905 env[1216]: time="2025-09-13T00:15:35.799790293Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:35.803736 env[1216]: time="2025-09-13T00:15:35.803690538Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:35.805191 env[1216]: time="2025-09-13T00:15:35.805163205Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:35.807714 env[1216]: time="2025-09-13T00:15:35.807684503Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:35.808182 env[1216]: time="2025-09-13T00:15:35.808150659Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 13 00:15:35.811081 env[1216]: time="2025-09-13T00:15:35.811021953Z" level=info msg="CreateContainer within sandbox \"8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 13 00:15:35.823390 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3637105954.mount: Deactivated successfully. Sep 13 00:15:35.830353 env[1216]: time="2025-09-13T00:15:35.830303941Z" level=info msg="CreateContainer within sandbox \"8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1\"" Sep 13 00:15:35.830883 env[1216]: time="2025-09-13T00:15:35.830855136Z" level=info msg="StartContainer for \"c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1\"" Sep 13 00:15:35.857520 systemd[1]: Started cri-containerd-c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1.scope. Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2427 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:35.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313861656333653561353339303138663132663461356232373564 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit: BPF prog-id=127 op=LOAD Sep 13 00:15:35.880000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2427 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:35.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313861656333653561353339303138663132663461356232373564 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit: BPF prog-id=128 op=LOAD Sep 13 00:15:35.880000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2427 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:35.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313861656333653561353339303138663132663461356232373564 Sep 13 00:15:35.880000 audit: BPF prog-id=128 op=UNLOAD Sep 13 00:15:35.880000 audit: BPF prog-id=127 op=UNLOAD Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:35.880000 audit: BPF prog-id=129 op=LOAD Sep 13 00:15:35.880000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2427 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:35.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313861656333653561353339303138663132663461356232373564 Sep 13 00:15:35.902704 env[1216]: time="2025-09-13T00:15:35.902650736Z" level=info msg="StartContainer for \"c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1\" returns successfully" Sep 13 00:15:35.905697 systemd[1]: cri-containerd-c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1.scope: Deactivated successfully. Sep 13 00:15:35.909000 audit: BPF prog-id=129 op=UNLOAD Sep 13 00:15:35.941526 env[1216]: time="2025-09-13T00:15:35.941479870Z" level=info msg="shim disconnected" id=c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1 Sep 13 00:15:35.941526 env[1216]: time="2025-09-13T00:15:35.941522390Z" level=warning msg="cleaning up after shim disconnected" id=c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1 namespace=k8s.io Sep 13 00:15:35.941526 env[1216]: time="2025-09-13T00:15:35.941531870Z" level=info msg="cleaning up dead shim" Sep 13 00:15:35.949460 env[1216]: time="2025-09-13T00:15:35.949419560Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:15:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2645 runtime=io.containerd.runc.v2\n" Sep 13 00:15:36.419684 kubelet[1957]: E0913 00:15:36.419624 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g5255" podUID="1931babe-4e10-42d3-96e5-479d8859d7ad" Sep 13 00:15:36.468520 kubelet[1957]: I0913 00:15:36.468478 1957 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:15:36.469938 kubelet[1957]: E0913 00:15:36.468958 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:36.470706 env[1216]: time="2025-09-13T00:15:36.470644206Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 13 00:15:36.488205 kubelet[1957]: I0913 00:15:36.487999 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-85bcbc8b7-zfbpl" podStartSLOduration=2.335349495 podStartE2EDuration="4.487985258s" podCreationTimestamp="2025-09-13 00:15:32 +0000 UTC" firstStartedPulling="2025-09-13 00:15:32.458479558 +0000 UTC m=+21.153116322" lastFinishedPulling="2025-09-13 00:15:34.611115321 +0000 UTC m=+23.305752085" observedRunningTime="2025-09-13 00:15:35.48372695 +0000 UTC m=+24.178363714" watchObservedRunningTime="2025-09-13 00:15:36.487985258 +0000 UTC m=+25.182622022" Sep 13 00:15:36.629848 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c318aec3e5a539018f12f4a5b275d14b946f99f45a7dc28b5027a32d04c81ab1-rootfs.mount: Deactivated successfully. Sep 13 00:15:38.417667 kubelet[1957]: E0913 00:15:38.417606 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g5255" podUID="1931babe-4e10-42d3-96e5-479d8859d7ad" Sep 13 00:15:39.230050 env[1216]: time="2025-09-13T00:15:39.229830538Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:39.232327 env[1216]: time="2025-09-13T00:15:39.232224640Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:39.234383 env[1216]: time="2025-09-13T00:15:39.234351384Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:39.236921 env[1216]: time="2025-09-13T00:15:39.236886765Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:39.237523 env[1216]: time="2025-09-13T00:15:39.237496800Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 13 00:15:39.243788 env[1216]: time="2025-09-13T00:15:39.243698233Z" level=info msg="CreateContainer within sandbox \"8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 13 00:15:39.256121 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3011810440.mount: Deactivated successfully. Sep 13 00:15:39.258862 env[1216]: time="2025-09-13T00:15:39.258815679Z" level=info msg="CreateContainer within sandbox \"8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca\"" Sep 13 00:15:39.261912 env[1216]: time="2025-09-13T00:15:39.261825496Z" level=info msg="StartContainer for \"706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca\"" Sep 13 00:15:39.294391 systemd[1]: Started cri-containerd-706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca.scope. Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316956 kernel: kauditd_printk_skb: 223 callbacks suppressed Sep 13 00:15:39.317041 kernel: audit: type=1400 audit(1757722539.313:994): avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.317082 kernel: audit: type=1300 audit(1757722539.313:994): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2427 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:39.313000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2427 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:39.319982 kernel: audit: type=1327 audit(1757722539.313:994): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366462313937376161363730346135393030393864666164653663 Sep 13 00:15:39.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366462313937376161363730346135393030393864666164653663 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.324530 kernel: audit: type=1400 audit(1757722539.313:995): avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.324595 kernel: audit: type=1400 audit(1757722539.313:995): avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.328621 kernel: audit: type=1400 audit(1757722539.313:995): avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.331092 kernel: audit: type=1400 audit(1757722539.313:995): avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.333154 kernel: audit: type=1400 audit(1757722539.313:995): avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.333246 kernel: audit: type=1400 audit(1757722539.313:995): avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.336975 kernel: audit: type=1400 audit(1757722539.313:995): avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit: BPF prog-id=130 op=LOAD Sep 13 00:15:39.313000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2427 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:39.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366462313937376161363730346135393030393864666164653663 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.313000 audit: BPF prog-id=131 op=LOAD Sep 13 00:15:39.313000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2427 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:39.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366462313937376161363730346135393030393864666164653663 Sep 13 00:15:39.316000 audit: BPF prog-id=131 op=UNLOAD Sep 13 00:15:39.316000 audit: BPF prog-id=130 op=UNLOAD Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:39.316000 audit: BPF prog-id=132 op=LOAD Sep 13 00:15:39.316000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2427 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:39.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366462313937376161363730346135393030393864666164653663 Sep 13 00:15:39.348877 env[1216]: time="2025-09-13T00:15:39.348835157Z" level=info msg="StartContainer for \"706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca\" returns successfully" Sep 13 00:15:39.878807 env[1216]: time="2025-09-13T00:15:39.878750262Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 00:15:39.880723 systemd[1]: cri-containerd-706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca.scope: Deactivated successfully. Sep 13 00:15:39.888000 audit: BPF prog-id=132 op=UNLOAD Sep 13 00:15:39.897339 kubelet[1957]: I0913 00:15:39.897313 1957 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Sep 13 00:15:39.936027 systemd[1]: Created slice kubepods-burstable-pod4dcf1e55_f1ff_4cf6_beaf_6e564e67a55a.slice. Sep 13 00:15:39.941704 systemd[1]: Created slice kubepods-burstable-pod3f14fbff_2859_45e7_a008_64321fd60526.slice. Sep 13 00:15:39.949557 systemd[1]: Created slice kubepods-besteffort-pod5c6f181e_9298_4d6e_9a7b_b66e7e550b17.slice. Sep 13 00:15:39.955691 systemd[1]: Created slice kubepods-besteffort-podca7eba97_c05f_4e81_9ea9_2e4465d49b2a.slice. Sep 13 00:15:39.959975 systemd[1]: Created slice kubepods-besteffort-pod38bfbe79_582b_4c6f_8b11_026d8b67f69b.slice. Sep 13 00:15:39.963777 systemd[1]: Created slice kubepods-besteffort-pod961bb16b_b8c1_4c25_8cba_0e381e56b93a.slice. Sep 13 00:15:39.969683 systemd[1]: Created slice kubepods-besteffort-poda08d3783_674a_4ee3_9a17_76ed3e2c4bb6.slice. Sep 13 00:15:39.989854 kubelet[1957]: I0913 00:15:39.989821 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/a08d3783-674a-4ee3-9a17-76ed3e2c4bb6-goldmane-key-pair\") pod \"goldmane-7988f88666-pv25h\" (UID: \"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6\") " pod="calico-system/goldmane-7988f88666-pv25h" Sep 13 00:15:39.989999 kubelet[1957]: I0913 00:15:39.989860 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fmff6\" (UniqueName: \"kubernetes.io/projected/ca7eba97-c05f-4e81-9ea9-2e4465d49b2a-kube-api-access-fmff6\") pod \"calico-kube-controllers-7d86d86d7d-hs529\" (UID: \"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a\") " pod="calico-system/calico-kube-controllers-7d86d86d7d-hs529" Sep 13 00:15:39.989999 kubelet[1957]: I0913 00:15:39.989882 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s8l27\" (UniqueName: \"kubernetes.io/projected/3f14fbff-2859-45e7-a008-64321fd60526-kube-api-access-s8l27\") pod \"coredns-7c65d6cfc9-wqmfs\" (UID: \"3f14fbff-2859-45e7-a008-64321fd60526\") " pod="kube-system/coredns-7c65d6cfc9-wqmfs" Sep 13 00:15:39.989999 kubelet[1957]: I0913 00:15:39.989904 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5c6f181e-9298-4d6e-9a7b-b66e7e550b17-calico-apiserver-certs\") pod \"calico-apiserver-8497d5cc75-mfc8r\" (UID: \"5c6f181e-9298-4d6e-9a7b-b66e7e550b17\") " pod="calico-apiserver/calico-apiserver-8497d5cc75-mfc8r" Sep 13 00:15:39.989999 kubelet[1957]: I0913 00:15:39.989921 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ca7eba97-c05f-4e81-9ea9-2e4465d49b2a-tigera-ca-bundle\") pod \"calico-kube-controllers-7d86d86d7d-hs529\" (UID: \"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a\") " pod="calico-system/calico-kube-controllers-7d86d86d7d-hs529" Sep 13 00:15:39.989999 kubelet[1957]: I0913 00:15:39.989936 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a-config-volume\") pod \"coredns-7c65d6cfc9-pvt9z\" (UID: \"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a\") " pod="kube-system/coredns-7c65d6cfc9-pvt9z" Sep 13 00:15:39.990150 kubelet[1957]: I0913 00:15:39.989953 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-ca-bundle\") pod \"whisker-554f9c74c-f6qn4\" (UID: \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\") " pod="calico-system/whisker-554f9c74c-f6qn4" Sep 13 00:15:39.990150 kubelet[1957]: I0913 00:15:39.989970 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hkmfj\" (UniqueName: \"kubernetes.io/projected/38bfbe79-582b-4c6f-8b11-026d8b67f69b-kube-api-access-hkmfj\") pod \"whisker-554f9c74c-f6qn4\" (UID: \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\") " pod="calico-system/whisker-554f9c74c-f6qn4" Sep 13 00:15:39.990150 kubelet[1957]: I0913 00:15:39.989985 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3f14fbff-2859-45e7-a008-64321fd60526-config-volume\") pod \"coredns-7c65d6cfc9-wqmfs\" (UID: \"3f14fbff-2859-45e7-a008-64321fd60526\") " pod="kube-system/coredns-7c65d6cfc9-wqmfs" Sep 13 00:15:39.990150 kubelet[1957]: I0913 00:15:39.990000 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6hqrd\" (UniqueName: \"kubernetes.io/projected/4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a-kube-api-access-6hqrd\") pod \"coredns-7c65d6cfc9-pvt9z\" (UID: \"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a\") " pod="kube-system/coredns-7c65d6cfc9-pvt9z" Sep 13 00:15:39.990150 kubelet[1957]: I0913 00:15:39.990016 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a08d3783-674a-4ee3-9a17-76ed3e2c4bb6-goldmane-ca-bundle\") pod \"goldmane-7988f88666-pv25h\" (UID: \"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6\") " pod="calico-system/goldmane-7988f88666-pv25h" Sep 13 00:15:39.990429 kubelet[1957]: I0913 00:15:39.990039 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-79hdv\" (UniqueName: \"kubernetes.io/projected/5c6f181e-9298-4d6e-9a7b-b66e7e550b17-kube-api-access-79hdv\") pod \"calico-apiserver-8497d5cc75-mfc8r\" (UID: \"5c6f181e-9298-4d6e-9a7b-b66e7e550b17\") " pod="calico-apiserver/calico-apiserver-8497d5cc75-mfc8r" Sep 13 00:15:39.990429 kubelet[1957]: I0913 00:15:39.990056 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-backend-key-pair\") pod \"whisker-554f9c74c-f6qn4\" (UID: \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\") " pod="calico-system/whisker-554f9c74c-f6qn4" Sep 13 00:15:39.990429 kubelet[1957]: I0913 00:15:39.990098 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/a08d3783-674a-4ee3-9a17-76ed3e2c4bb6-config\") pod \"goldmane-7988f88666-pv25h\" (UID: \"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6\") " pod="calico-system/goldmane-7988f88666-pv25h" Sep 13 00:15:39.990429 kubelet[1957]: I0913 00:15:39.990131 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8cx5s\" (UniqueName: \"kubernetes.io/projected/a08d3783-674a-4ee3-9a17-76ed3e2c4bb6-kube-api-access-8cx5s\") pod \"goldmane-7988f88666-pv25h\" (UID: \"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6\") " pod="calico-system/goldmane-7988f88666-pv25h" Sep 13 00:15:39.990429 kubelet[1957]: I0913 00:15:39.990148 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/961bb16b-b8c1-4c25-8cba-0e381e56b93a-calico-apiserver-certs\") pod \"calico-apiserver-8497d5cc75-tg4qf\" (UID: \"961bb16b-b8c1-4c25-8cba-0e381e56b93a\") " pod="calico-apiserver/calico-apiserver-8497d5cc75-tg4qf" Sep 13 00:15:39.990547 kubelet[1957]: I0913 00:15:39.990164 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zzs6v\" (UniqueName: \"kubernetes.io/projected/961bb16b-b8c1-4c25-8cba-0e381e56b93a-kube-api-access-zzs6v\") pod \"calico-apiserver-8497d5cc75-tg4qf\" (UID: \"961bb16b-b8c1-4c25-8cba-0e381e56b93a\") " pod="calico-apiserver/calico-apiserver-8497d5cc75-tg4qf" Sep 13 00:15:39.996363 env[1216]: time="2025-09-13T00:15:39.996317971Z" level=info msg="shim disconnected" id=706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca Sep 13 00:15:39.996478 env[1216]: time="2025-09-13T00:15:39.996363210Z" level=warning msg="cleaning up after shim disconnected" id=706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca namespace=k8s.io Sep 13 00:15:39.996478 env[1216]: time="2025-09-13T00:15:39.996373610Z" level=info msg="cleaning up dead shim" Sep 13 00:15:40.006215 env[1216]: time="2025-09-13T00:15:40.006170178Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:15:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2715 runtime=io.containerd.runc.v2\n" Sep 13 00:15:40.239771 kubelet[1957]: E0913 00:15:40.239725 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:40.240842 env[1216]: time="2025-09-13T00:15:40.240793547Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-pvt9z,Uid:4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a,Namespace:kube-system,Attempt:0,}" Sep 13 00:15:40.244991 kubelet[1957]: E0913 00:15:40.244962 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:40.245690 env[1216]: time="2025-09-13T00:15:40.245638431Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-wqmfs,Uid:3f14fbff-2859-45e7-a008-64321fd60526,Namespace:kube-system,Attempt:0,}" Sep 13 00:15:40.253749 env[1216]: time="2025-09-13T00:15:40.253713052Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-mfc8r,Uid:5c6f181e-9298-4d6e-9a7b-b66e7e550b17,Namespace:calico-apiserver,Attempt:0,}" Sep 13 00:15:40.258698 env[1216]: time="2025-09-13T00:15:40.258662696Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7d86d86d7d-hs529,Uid:ca7eba97-c05f-4e81-9ea9-2e4465d49b2a,Namespace:calico-system,Attempt:0,}" Sep 13 00:15:40.261915 systemd[1]: run-containerd-runc-k8s.io-706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca-runc.9pAR9o.mount: Deactivated successfully. Sep 13 00:15:40.262009 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-706db1977aa6704a590098dfade6c288587f7206c0846480c03a83c6dd0cd4ca-rootfs.mount: Deactivated successfully. Sep 13 00:15:40.269675 env[1216]: time="2025-09-13T00:15:40.269479457Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-554f9c74c-f6qn4,Uid:38bfbe79-582b-4c6f-8b11-026d8b67f69b,Namespace:calico-system,Attempt:0,}" Sep 13 00:15:40.270261 env[1216]: time="2025-09-13T00:15:40.269935694Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-tg4qf,Uid:961bb16b-b8c1-4c25-8cba-0e381e56b93a,Namespace:calico-apiserver,Attempt:0,}" Sep 13 00:15:40.272187 env[1216]: time="2025-09-13T00:15:40.271959159Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-pv25h,Uid:a08d3783-674a-4ee3-9a17-76ed3e2c4bb6,Namespace:calico-system,Attempt:0,}" Sep 13 00:15:40.412146 env[1216]: time="2025-09-13T00:15:40.412059537Z" level=error msg="Failed to destroy network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.412740 env[1216]: time="2025-09-13T00:15:40.412697333Z" level=error msg="encountered an error cleaning up failed sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.412897 env[1216]: time="2025-09-13T00:15:40.412860212Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7d86d86d7d-hs529,Uid:ca7eba97-c05f-4e81-9ea9-2e4465d49b2a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.413324 kubelet[1957]: E0913 00:15:40.413268 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.413963 kubelet[1957]: E0913 00:15:40.413930 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7d86d86d7d-hs529" Sep 13 00:15:40.414082 kubelet[1957]: E0913 00:15:40.413966 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7d86d86d7d-hs529" Sep 13 00:15:40.415563 kubelet[1957]: E0913 00:15:40.414014 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7d86d86d7d-hs529_calico-system(ca7eba97-c05f-4e81-9ea9-2e4465d49b2a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7d86d86d7d-hs529_calico-system(ca7eba97-c05f-4e81-9ea9-2e4465d49b2a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7d86d86d7d-hs529" podUID="ca7eba97-c05f-4e81-9ea9-2e4465d49b2a" Sep 13 00:15:40.421005 env[1216]: time="2025-09-13T00:15:40.420962473Z" level=error msg="Failed to destroy network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.421344 env[1216]: time="2025-09-13T00:15:40.421301630Z" level=error msg="encountered an error cleaning up failed sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.421392 env[1216]: time="2025-09-13T00:15:40.421361910Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-wqmfs,Uid:3f14fbff-2859-45e7-a008-64321fd60526,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.421939 systemd[1]: Created slice kubepods-besteffort-pod1931babe_4e10_42d3_96e5_479d8859d7ad.slice. Sep 13 00:15:40.422693 kubelet[1957]: E0913 00:15:40.422160 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.422693 kubelet[1957]: E0913 00:15:40.422219 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-wqmfs" Sep 13 00:15:40.422693 kubelet[1957]: E0913 00:15:40.422236 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-wqmfs" Sep 13 00:15:40.422822 kubelet[1957]: E0913 00:15:40.422269 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-wqmfs_kube-system(3f14fbff-2859-45e7-a008-64321fd60526)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-wqmfs_kube-system(3f14fbff-2859-45e7-a008-64321fd60526)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-wqmfs" podUID="3f14fbff-2859-45e7-a008-64321fd60526" Sep 13 00:15:40.425728 env[1216]: time="2025-09-13T00:15:40.425147282Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g5255,Uid:1931babe-4e10-42d3-96e5-479d8859d7ad,Namespace:calico-system,Attempt:0,}" Sep 13 00:15:40.427301 env[1216]: time="2025-09-13T00:15:40.427258987Z" level=error msg="Failed to destroy network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.427852 env[1216]: time="2025-09-13T00:15:40.427818863Z" level=error msg="encountered an error cleaning up failed sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.428061 env[1216]: time="2025-09-13T00:15:40.428024341Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-pvt9z,Uid:4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.428700 kubelet[1957]: E0913 00:15:40.428358 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.428700 kubelet[1957]: E0913 00:15:40.428425 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-pvt9z" Sep 13 00:15:40.428700 kubelet[1957]: E0913 00:15:40.428442 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-pvt9z" Sep 13 00:15:40.429051 kubelet[1957]: E0913 00:15:40.428480 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-pvt9z_kube-system(4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-pvt9z_kube-system(4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-pvt9z" podUID="4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a" Sep 13 00:15:40.438459 env[1216]: time="2025-09-13T00:15:40.438409665Z" level=error msg="Failed to destroy network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.438917 env[1216]: time="2025-09-13T00:15:40.438873142Z" level=error msg="encountered an error cleaning up failed sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.439113 env[1216]: time="2025-09-13T00:15:40.439077660Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-pv25h,Uid:a08d3783-674a-4ee3-9a17-76ed3e2c4bb6,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.439503 kubelet[1957]: E0913 00:15:40.439461 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.439602 kubelet[1957]: E0913 00:15:40.439519 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-pv25h" Sep 13 00:15:40.439602 kubelet[1957]: E0913 00:15:40.439539 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-pv25h" Sep 13 00:15:40.439602 kubelet[1957]: E0913 00:15:40.439581 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-7988f88666-pv25h_calico-system(a08d3783-674a-4ee3-9a17-76ed3e2c4bb6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-7988f88666-pv25h_calico-system(a08d3783-674a-4ee3-9a17-76ed3e2c4bb6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-pv25h" podUID="a08d3783-674a-4ee3-9a17-76ed3e2c4bb6" Sep 13 00:15:40.444281 env[1216]: time="2025-09-13T00:15:40.444242863Z" level=error msg="Failed to destroy network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.444676 env[1216]: time="2025-09-13T00:15:40.444644300Z" level=error msg="encountered an error cleaning up failed sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.444788 env[1216]: time="2025-09-13T00:15:40.444761219Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-mfc8r,Uid:5c6f181e-9298-4d6e-9a7b-b66e7e550b17,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.445082 kubelet[1957]: E0913 00:15:40.445018 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.445155 kubelet[1957]: E0913 00:15:40.445082 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-8497d5cc75-mfc8r" Sep 13 00:15:40.445155 kubelet[1957]: E0913 00:15:40.445101 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-8497d5cc75-mfc8r" Sep 13 00:15:40.445155 kubelet[1957]: E0913 00:15:40.445132 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-8497d5cc75-mfc8r_calico-apiserver(5c6f181e-9298-4d6e-9a7b-b66e7e550b17)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-8497d5cc75-mfc8r_calico-apiserver(5c6f181e-9298-4d6e-9a7b-b66e7e550b17)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-8497d5cc75-mfc8r" podUID="5c6f181e-9298-4d6e-9a7b-b66e7e550b17" Sep 13 00:15:40.454456 env[1216]: time="2025-09-13T00:15:40.454414549Z" level=error msg="Failed to destroy network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.454859 env[1216]: time="2025-09-13T00:15:40.454827906Z" level=error msg="encountered an error cleaning up failed sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.454978 env[1216]: time="2025-09-13T00:15:40.454952145Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-tg4qf,Uid:961bb16b-b8c1-4c25-8cba-0e381e56b93a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.455288 kubelet[1957]: E0913 00:15:40.455249 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.455358 kubelet[1957]: E0913 00:15:40.455299 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-8497d5cc75-tg4qf" Sep 13 00:15:40.455358 kubelet[1957]: E0913 00:15:40.455317 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-8497d5cc75-tg4qf" Sep 13 00:15:40.455425 kubelet[1957]: E0913 00:15:40.455356 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-8497d5cc75-tg4qf_calico-apiserver(961bb16b-b8c1-4c25-8cba-0e381e56b93a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-8497d5cc75-tg4qf_calico-apiserver(961bb16b-b8c1-4c25-8cba-0e381e56b93a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-8497d5cc75-tg4qf" podUID="961bb16b-b8c1-4c25-8cba-0e381e56b93a" Sep 13 00:15:40.465805 env[1216]: time="2025-09-13T00:15:40.465767266Z" level=error msg="Failed to destroy network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.466217 env[1216]: time="2025-09-13T00:15:40.466181743Z" level=error msg="encountered an error cleaning up failed sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.466347 env[1216]: time="2025-09-13T00:15:40.466318222Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-554f9c74c-f6qn4,Uid:38bfbe79-582b-4c6f-8b11-026d8b67f69b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.466617 kubelet[1957]: E0913 00:15:40.466580 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.466714 kubelet[1957]: E0913 00:15:40.466633 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-554f9c74c-f6qn4" Sep 13 00:15:40.466714 kubelet[1957]: E0913 00:15:40.466652 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-554f9c74c-f6qn4" Sep 13 00:15:40.466714 kubelet[1957]: E0913 00:15:40.466690 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-554f9c74c-f6qn4_calico-system(38bfbe79-582b-4c6f-8b11-026d8b67f69b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-554f9c74c-f6qn4_calico-system(38bfbe79-582b-4c6f-8b11-026d8b67f69b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-554f9c74c-f6qn4" podUID="38bfbe79-582b-4c6f-8b11-026d8b67f69b" Sep 13 00:15:40.476707 kubelet[1957]: I0913 00:15:40.476663 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:15:40.477417 env[1216]: time="2025-09-13T00:15:40.477381341Z" level=info msg="StopPodSandbox for \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\"" Sep 13 00:15:40.479247 kubelet[1957]: I0913 00:15:40.479198 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:15:40.480225 env[1216]: time="2025-09-13T00:15:40.480188681Z" level=info msg="StopPodSandbox for \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\"" Sep 13 00:15:40.483538 env[1216]: time="2025-09-13T00:15:40.483439017Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 13 00:15:40.484941 kubelet[1957]: I0913 00:15:40.484853 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:15:40.487193 env[1216]: time="2025-09-13T00:15:40.487142230Z" level=info msg="StopPodSandbox for \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\"" Sep 13 00:15:40.489341 kubelet[1957]: I0913 00:15:40.489274 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:15:40.490990 env[1216]: time="2025-09-13T00:15:40.490904922Z" level=info msg="StopPodSandbox for \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\"" Sep 13 00:15:40.492183 kubelet[1957]: I0913 00:15:40.491722 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:15:40.493804 env[1216]: time="2025-09-13T00:15:40.493582983Z" level=info msg="StopPodSandbox for \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\"" Sep 13 00:15:40.495675 kubelet[1957]: I0913 00:15:40.495650 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:15:40.499478 env[1216]: time="2025-09-13T00:15:40.498597386Z" level=info msg="StopPodSandbox for \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\"" Sep 13 00:15:40.499691 kubelet[1957]: I0913 00:15:40.499650 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:15:40.500383 env[1216]: time="2025-09-13T00:15:40.500328294Z" level=info msg="StopPodSandbox for \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\"" Sep 13 00:15:40.505321 env[1216]: time="2025-09-13T00:15:40.505279698Z" level=error msg="Failed to destroy network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.505740 env[1216]: time="2025-09-13T00:15:40.505708654Z" level=error msg="encountered an error cleaning up failed sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.505862 env[1216]: time="2025-09-13T00:15:40.505834814Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g5255,Uid:1931babe-4e10-42d3-96e5-479d8859d7ad,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.506153 kubelet[1957]: E0913 00:15:40.506118 1957 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.506237 kubelet[1957]: E0913 00:15:40.506193 1957 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-g5255" Sep 13 00:15:40.506237 kubelet[1957]: E0913 00:15:40.506215 1957 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-g5255" Sep 13 00:15:40.506336 kubelet[1957]: E0913 00:15:40.506294 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-g5255_calico-system(1931babe-4e10-42d3-96e5-479d8859d7ad)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-g5255_calico-system(1931babe-4e10-42d3-96e5-479d8859d7ad)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-g5255" podUID="1931babe-4e10-42d3-96e5-479d8859d7ad" Sep 13 00:15:40.521778 env[1216]: time="2025-09-13T00:15:40.521722378Z" level=error msg="StopPodSandbox for \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\" failed" error="failed to destroy network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.522020 kubelet[1957]: E0913 00:15:40.521974 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:15:40.522107 kubelet[1957]: E0913 00:15:40.522043 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6"} Sep 13 00:15:40.522157 kubelet[1957]: E0913 00:15:40.522120 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:40.522229 kubelet[1957]: E0913 00:15:40.522142 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-pv25h" podUID="a08d3783-674a-4ee3-9a17-76ed3e2c4bb6" Sep 13 00:15:40.526541 env[1216]: time="2025-09-13T00:15:40.526490423Z" level=error msg="StopPodSandbox for \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\" failed" error="failed to destroy network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.527345 kubelet[1957]: E0913 00:15:40.526713 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:15:40.527345 kubelet[1957]: E0913 00:15:40.526783 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691"} Sep 13 00:15:40.527345 kubelet[1957]: E0913 00:15:40.526822 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:40.527345 kubelet[1957]: E0913 00:15:40.526843 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-554f9c74c-f6qn4" podUID="38bfbe79-582b-4c6f-8b11-026d8b67f69b" Sep 13 00:15:40.537360 env[1216]: time="2025-09-13T00:15:40.537296744Z" level=error msg="StopPodSandbox for \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\" failed" error="failed to destroy network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.537566 kubelet[1957]: E0913 00:15:40.537523 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:15:40.537635 kubelet[1957]: E0913 00:15:40.537574 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f"} Sep 13 00:15:40.537635 kubelet[1957]: E0913 00:15:40.537605 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"961bb16b-b8c1-4c25-8cba-0e381e56b93a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:40.537711 kubelet[1957]: E0913 00:15:40.537638 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"961bb16b-b8c1-4c25-8cba-0e381e56b93a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-8497d5cc75-tg4qf" podUID="961bb16b-b8c1-4c25-8cba-0e381e56b93a" Sep 13 00:15:40.548504 env[1216]: time="2025-09-13T00:15:40.548445303Z" level=error msg="StopPodSandbox for \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\" failed" error="failed to destroy network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.548716 kubelet[1957]: E0913 00:15:40.548672 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:15:40.548782 kubelet[1957]: E0913 00:15:40.548723 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f"} Sep 13 00:15:40.548782 kubelet[1957]: E0913 00:15:40.548761 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3f14fbff-2859-45e7-a008-64321fd60526\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:40.548861 kubelet[1957]: E0913 00:15:40.548782 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3f14fbff-2859-45e7-a008-64321fd60526\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-wqmfs" podUID="3f14fbff-2859-45e7-a008-64321fd60526" Sep 13 00:15:40.553431 env[1216]: time="2025-09-13T00:15:40.553313987Z" level=error msg="StopPodSandbox for \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\" failed" error="failed to destroy network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.553579 kubelet[1957]: E0913 00:15:40.553544 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:15:40.553631 kubelet[1957]: E0913 00:15:40.553587 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907"} Sep 13 00:15:40.553670 kubelet[1957]: E0913 00:15:40.553629 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:40.553670 kubelet[1957]: E0913 00:15:40.553651 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7d86d86d7d-hs529" podUID="ca7eba97-c05f-4e81-9ea9-2e4465d49b2a" Sep 13 00:15:40.556646 env[1216]: time="2025-09-13T00:15:40.556603523Z" level=error msg="StopPodSandbox for \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\" failed" error="failed to destroy network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.556804 kubelet[1957]: E0913 00:15:40.556770 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:15:40.556839 kubelet[1957]: E0913 00:15:40.556811 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f"} Sep 13 00:15:40.556864 kubelet[1957]: E0913 00:15:40.556836 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5c6f181e-9298-4d6e-9a7b-b66e7e550b17\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:40.556864 kubelet[1957]: E0913 00:15:40.556854 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5c6f181e-9298-4d6e-9a7b-b66e7e550b17\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-8497d5cc75-mfc8r" podUID="5c6f181e-9298-4d6e-9a7b-b66e7e550b17" Sep 13 00:15:40.562324 env[1216]: time="2025-09-13T00:15:40.562283482Z" level=error msg="StopPodSandbox for \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\" failed" error="failed to destroy network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:40.562573 kubelet[1957]: E0913 00:15:40.562530 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:15:40.562632 kubelet[1957]: E0913 00:15:40.562576 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d"} Sep 13 00:15:40.562632 kubelet[1957]: E0913 00:15:40.562604 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:40.562714 kubelet[1957]: E0913 00:15:40.562632 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-pvt9z" podUID="4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a" Sep 13 00:15:41.255031 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f-shm.mount: Deactivated successfully. Sep 13 00:15:41.255131 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d-shm.mount: Deactivated successfully. Sep 13 00:15:41.501989 kubelet[1957]: I0913 00:15:41.501835 1957 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:15:41.504097 env[1216]: time="2025-09-13T00:15:41.502967515Z" level=info msg="StopPodSandbox for \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\"" Sep 13 00:15:41.528042 env[1216]: time="2025-09-13T00:15:41.527922899Z" level=error msg="StopPodSandbox for \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\" failed" error="failed to destroy network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:15:41.528250 kubelet[1957]: E0913 00:15:41.528210 1957 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:15:41.528312 kubelet[1957]: E0913 00:15:41.528264 1957 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044"} Sep 13 00:15:41.528312 kubelet[1957]: E0913 00:15:41.528303 1957 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1931babe-4e10-42d3-96e5-479d8859d7ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:15:41.528399 kubelet[1957]: E0913 00:15:41.528328 1957 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1931babe-4e10-42d3-96e5-479d8859d7ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-g5255" podUID="1931babe-4e10-42d3-96e5-479d8859d7ad" Sep 13 00:15:46.366721 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3095067694.mount: Deactivated successfully. Sep 13 00:15:46.702294 env[1216]: time="2025-09-13T00:15:46.702236893Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:46.704930 env[1216]: time="2025-09-13T00:15:46.704887437Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:46.707099 env[1216]: time="2025-09-13T00:15:46.707033424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:46.708916 env[1216]: time="2025-09-13T00:15:46.708874534Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:46.709325 env[1216]: time="2025-09-13T00:15:46.709300331Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 13 00:15:46.723359 env[1216]: time="2025-09-13T00:15:46.723306848Z" level=info msg="CreateContainer within sandbox \"8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 13 00:15:46.746151 env[1216]: time="2025-09-13T00:15:46.746105593Z" level=info msg="CreateContainer within sandbox \"8cea99a8bf1573b59bf8535b956d9b5136596484c1056c438a4128152267f076\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"2d328894b11cf9cef175397e97ee4d5d832e7c49b8c7b52c233aeb338ce5ebb2\"" Sep 13 00:15:46.747424 env[1216]: time="2025-09-13T00:15:46.747383705Z" level=info msg="StartContainer for \"2d328894b11cf9cef175397e97ee4d5d832e7c49b8c7b52c233aeb338ce5ebb2\"" Sep 13 00:15:46.765196 systemd[1]: Started cri-containerd-2d328894b11cf9cef175397e97ee4d5d832e7c49b8c7b52c233aeb338ce5ebb2.scope. Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.792695 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 13 00:15:46.792751 kernel: audit: type=1400 audit(1757722546.790:1001): avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2427 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:46.797744 kernel: audit: type=1300 audit(1757722546.790:1001): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2427 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:46.797834 kernel: audit: type=1327 audit(1757722546.790:1001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333238383934623131636639636566313735333937653937656534 Sep 13 00:15:46.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333238383934623131636639636566313735333937653937656534 Sep 13 00:15:46.800952 kernel: audit: type=1400 audit(1757722546.790:1002): avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.802931 kernel: audit: type=1400 audit(1757722546.790:1002): avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.807094 kernel: audit: type=1400 audit(1757722546.790:1002): avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.809863 kernel: audit: type=1400 audit(1757722546.790:1002): avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.809949 kernel: audit: type=1400 audit(1757722546.790:1002): avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.812364 kernel: audit: type=1400 audit(1757722546.790:1002): avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.816524 kernel: audit: type=1400 audit(1757722546.790:1002): avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.790000 audit: BPF prog-id=133 op=LOAD Sep 13 00:15:46.790000 audit[3170]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2427 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:46.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333238383934623131636639636566313735333937653937656534 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.793000 audit: BPF prog-id=134 op=LOAD Sep 13 00:15:46.793000 audit[3170]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2427 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:46.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333238383934623131636639636566313735333937653937656534 Sep 13 00:15:46.796000 audit: BPF prog-id=134 op=UNLOAD Sep 13 00:15:46.796000 audit: BPF prog-id=133 op=UNLOAD Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:46.796000 audit: BPF prog-id=135 op=LOAD Sep 13 00:15:46.796000 audit[3170]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2427 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:46.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333238383934623131636639636566313735333937653937656534 Sep 13 00:15:46.827204 env[1216]: time="2025-09-13T00:15:46.827155672Z" level=info msg="StartContainer for \"2d328894b11cf9cef175397e97ee4d5d832e7c49b8c7b52c233aeb338ce5ebb2\" returns successfully" Sep 13 00:15:46.959669 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 13 00:15:46.959800 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 13 00:15:47.089101 env[1216]: time="2025-09-13T00:15:47.089037376Z" level=info msg="StopPodSandbox for \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\"" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.183 [INFO][3222] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.184 [INFO][3222] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" iface="eth0" netns="/var/run/netns/cni-675e7213-8395-231b-b6b6-25d1cf5081df" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.184 [INFO][3222] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" iface="eth0" netns="/var/run/netns/cni-675e7213-8395-231b-b6b6-25d1cf5081df" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.185 [INFO][3222] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" iface="eth0" netns="/var/run/netns/cni-675e7213-8395-231b-b6b6-25d1cf5081df" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.185 [INFO][3222] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.185 [INFO][3222] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.279 [INFO][3238] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.280 [INFO][3238] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.280 [INFO][3238] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.289 [WARNING][3238] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.290 [INFO][3238] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.291 [INFO][3238] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:47.295331 env[1216]: 2025-09-13 00:15:47.293 [INFO][3222] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:15:47.295974 env[1216]: time="2025-09-13T00:15:47.295938587Z" level=info msg="TearDown network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\" successfully" Sep 13 00:15:47.296056 env[1216]: time="2025-09-13T00:15:47.296039147Z" level=info msg="StopPodSandbox for \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\" returns successfully" Sep 13 00:15:47.344733 kubelet[1957]: I0913 00:15:47.344627 1957 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-hkmfj\" (UniqueName: \"kubernetes.io/projected/38bfbe79-582b-4c6f-8b11-026d8b67f69b-kube-api-access-hkmfj\") pod \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\" (UID: \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\") " Sep 13 00:15:47.344733 kubelet[1957]: I0913 00:15:47.344672 1957 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-ca-bundle\") pod \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\" (UID: \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\") " Sep 13 00:15:47.344733 kubelet[1957]: I0913 00:15:47.344704 1957 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-backend-key-pair\") pod \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\" (UID: \"38bfbe79-582b-4c6f-8b11-026d8b67f69b\") " Sep 13 00:15:47.348259 kubelet[1957]: I0913 00:15:47.348189 1957 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "38bfbe79-582b-4c6f-8b11-026d8b67f69b" (UID: "38bfbe79-582b-4c6f-8b11-026d8b67f69b"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Sep 13 00:15:47.352435 kubelet[1957]: I0913 00:15:47.352368 1957 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/38bfbe79-582b-4c6f-8b11-026d8b67f69b-kube-api-access-hkmfj" (OuterVolumeSpecName: "kube-api-access-hkmfj") pod "38bfbe79-582b-4c6f-8b11-026d8b67f69b" (UID: "38bfbe79-582b-4c6f-8b11-026d8b67f69b"). InnerVolumeSpecName "kube-api-access-hkmfj". PluginName "kubernetes.io/projected", VolumeGidValue "" Sep 13 00:15:47.352547 kubelet[1957]: I0913 00:15:47.352440 1957 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "38bfbe79-582b-4c6f-8b11-026d8b67f69b" (UID: "38bfbe79-582b-4c6f-8b11-026d8b67f69b"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Sep 13 00:15:47.366825 systemd[1]: run-netns-cni\x2d675e7213\x2d8395\x2d231b\x2db6b6\x2d25d1cf5081df.mount: Deactivated successfully. Sep 13 00:15:47.366912 systemd[1]: var-lib-kubelet-pods-38bfbe79\x2d582b\x2d4c6f\x2d8b11\x2d026d8b67f69b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dhkmfj.mount: Deactivated successfully. Sep 13 00:15:47.366972 systemd[1]: var-lib-kubelet-pods-38bfbe79\x2d582b\x2d4c6f\x2d8b11\x2d026d8b67f69b-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 13 00:15:47.426018 systemd[1]: Removed slice kubepods-besteffort-pod38bfbe79_582b_4c6f_8b11_026d8b67f69b.slice. Sep 13 00:15:47.445264 kubelet[1957]: I0913 00:15:47.445231 1957 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-hkmfj\" (UniqueName: \"kubernetes.io/projected/38bfbe79-582b-4c6f-8b11-026d8b67f69b-kube-api-access-hkmfj\") on node \"localhost\" DevicePath \"\"" Sep 13 00:15:47.445264 kubelet[1957]: I0913 00:15:47.445262 1957 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Sep 13 00:15:47.445264 kubelet[1957]: I0913 00:15:47.445272 1957 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/38bfbe79-582b-4c6f-8b11-026d8b67f69b-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Sep 13 00:15:47.568687 kubelet[1957]: I0913 00:15:47.568629 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-rmmgp" podStartSLOduration=1.513717052 podStartE2EDuration="15.56860634s" podCreationTimestamp="2025-09-13 00:15:32 +0000 UTC" firstStartedPulling="2025-09-13 00:15:32.655228478 +0000 UTC m=+21.349865242" lastFinishedPulling="2025-09-13 00:15:46.710117766 +0000 UTC m=+35.404754530" observedRunningTime="2025-09-13 00:15:47.559216314 +0000 UTC m=+36.253853078" watchObservedRunningTime="2025-09-13 00:15:47.56860634 +0000 UTC m=+36.263243104" Sep 13 00:15:47.576624 systemd[1]: Created slice kubepods-besteffort-pod3bc318f0_36da_4edd_880d_974168587573.slice. Sep 13 00:15:47.646204 kubelet[1957]: I0913 00:15:47.646059 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3bc318f0-36da-4edd-880d-974168587573-whisker-ca-bundle\") pod \"whisker-688c87845d-pzxzj\" (UID: \"3bc318f0-36da-4edd-880d-974168587573\") " pod="calico-system/whisker-688c87845d-pzxzj" Sep 13 00:15:47.646410 kubelet[1957]: I0913 00:15:47.646392 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3bc318f0-36da-4edd-880d-974168587573-whisker-backend-key-pair\") pod \"whisker-688c87845d-pzxzj\" (UID: \"3bc318f0-36da-4edd-880d-974168587573\") " pod="calico-system/whisker-688c87845d-pzxzj" Sep 13 00:15:47.646497 kubelet[1957]: I0913 00:15:47.646481 1957 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t7mvc\" (UniqueName: \"kubernetes.io/projected/3bc318f0-36da-4edd-880d-974168587573-kube-api-access-t7mvc\") pod \"whisker-688c87845d-pzxzj\" (UID: \"3bc318f0-36da-4edd-880d-974168587573\") " pod="calico-system/whisker-688c87845d-pzxzj" Sep 13 00:15:47.881733 env[1216]: time="2025-09-13T00:15:47.881689781Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-688c87845d-pzxzj,Uid:3bc318f0-36da-4edd-880d-974168587573,Namespace:calico-system,Attempt:0,}" Sep 13 00:15:47.963153 kubelet[1957]: I0913 00:15:47.960522 1957 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:15:47.964155 kubelet[1957]: E0913 00:15:47.963573 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:48.015000 audit[3282]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3282 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:48.015000 audit[3282]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff31e79f0 a2=0 a3=1 items=0 ppid=2073 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.015000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:48.022000 audit[3282]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3282 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:48.022000 audit[3282]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff31e79f0 a2=0 a3=1 items=0 ppid=2073 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.022000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:48.045535 systemd-networkd[1043]: calid59130d32d6: Link UP Sep 13 00:15:48.046978 systemd-networkd[1043]: calid59130d32d6: Gained carrier Sep 13 00:15:48.047206 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:15:48.047449 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid59130d32d6: link becomes ready Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:47.949 [INFO][3260] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:47.963 [INFO][3260] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--688c87845d--pzxzj-eth0 whisker-688c87845d- calico-system 3bc318f0-36da-4edd-880d-974168587573 887 0 2025-09-13 00:15:47 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:688c87845d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-688c87845d-pzxzj eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calid59130d32d6 [] [] }} ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:47.963 [INFO][3260] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-eth0" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.000 [INFO][3274] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" HandleID="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Workload="localhost-k8s-whisker--688c87845d--pzxzj-eth0" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.000 [INFO][3274] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" HandleID="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Workload="localhost-k8s-whisker--688c87845d--pzxzj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c660), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-688c87845d-pzxzj", "timestamp":"2025-09-13 00:15:48.00020746 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.000 [INFO][3274] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.000 [INFO][3274] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.000 [INFO][3274] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.013 [INFO][3274] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.019 [INFO][3274] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.023 [INFO][3274] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.024 [INFO][3274] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.027 [INFO][3274] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.027 [INFO][3274] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.028 [INFO][3274] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.031 [INFO][3274] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.036 [INFO][3274] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.036 [INFO][3274] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" host="localhost" Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.036 [INFO][3274] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:48.062862 env[1216]: 2025-09-13 00:15:48.036 [INFO][3274] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" HandleID="k8s-pod-network.50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Workload="localhost-k8s-whisker--688c87845d--pzxzj-eth0" Sep 13 00:15:48.063577 env[1216]: 2025-09-13 00:15:48.038 [INFO][3260] cni-plugin/k8s.go 418: Populated endpoint ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--688c87845d--pzxzj-eth0", GenerateName:"whisker-688c87845d-", Namespace:"calico-system", SelfLink:"", UID:"3bc318f0-36da-4edd-880d-974168587573", ResourceVersion:"887", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"688c87845d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-688c87845d-pzxzj", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid59130d32d6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:48.063577 env[1216]: 2025-09-13 00:15:48.038 [INFO][3260] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-eth0" Sep 13 00:15:48.063577 env[1216]: 2025-09-13 00:15:48.038 [INFO][3260] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid59130d32d6 ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-eth0" Sep 13 00:15:48.063577 env[1216]: 2025-09-13 00:15:48.048 [INFO][3260] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-eth0" Sep 13 00:15:48.063577 env[1216]: 2025-09-13 00:15:48.049 [INFO][3260] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--688c87845d--pzxzj-eth0", GenerateName:"whisker-688c87845d-", Namespace:"calico-system", SelfLink:"", UID:"3bc318f0-36da-4edd-880d-974168587573", ResourceVersion:"887", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"688c87845d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d", Pod:"whisker-688c87845d-pzxzj", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid59130d32d6", MAC:"12:f2:f4:e6:13:8b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:48.063577 env[1216]: 2025-09-13 00:15:48.060 [INFO][3260] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d" Namespace="calico-system" Pod="whisker-688c87845d-pzxzj" WorkloadEndpoint="localhost-k8s-whisker--688c87845d--pzxzj-eth0" Sep 13 00:15:48.072498 env[1216]: time="2025-09-13T00:15:48.072428017Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:48.072498 env[1216]: time="2025-09-13T00:15:48.072469297Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:48.072628 env[1216]: time="2025-09-13T00:15:48.072501857Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:48.072697 env[1216]: time="2025-09-13T00:15:48.072671336Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d pid=3300 runtime=io.containerd.runc.v2 Sep 13 00:15:48.082594 systemd[1]: Started cri-containerd-50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d.scope. Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit: BPF prog-id=136 op=LOAD Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653036396634303064666366306235306338336639616138376563 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653036396634303064666366306235306338336639616138376563 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit: BPF prog-id=137 op=LOAD Sep 13 00:15:48.098000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653036396634303064666366306235306338336639616138376563 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.098000 audit: BPF prog-id=138 op=LOAD Sep 13 00:15:48.098000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653036396634303064666366306235306338336639616138376563 Sep 13 00:15:48.099000 audit: BPF prog-id=138 op=UNLOAD Sep 13 00:15:48.099000 audit: BPF prog-id=137 op=UNLOAD Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.099000 audit: BPF prog-id=139 op=LOAD Sep 13 00:15:48.099000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653036396634303064666366306235306338336639616138376563 Sep 13 00:15:48.100767 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:48.117143 env[1216]: time="2025-09-13T00:15:48.117103928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-688c87845d-pzxzj,Uid:3bc318f0-36da-4edd-880d-974168587573,Namespace:calico-system,Attempt:0,} returns sandbox id \"50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d\"" Sep 13 00:15:48.118690 env[1216]: time="2025-09-13T00:15:48.118607200Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 13 00:15:48.357000 audit[3377]: AVC avc: denied { write } for pid=3377 comm="tee" name="fd" dev="proc" ino=19689 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:15:48.357000 audit[3377]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffec1847d5 a2=241 a3=1b6 items=1 ppid=3351 pid=3377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.357000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 13 00:15:48.357000 audit: PATH item=0 name="/dev/fd/63" inode=21512 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:15:48.357000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:15:48.360000 audit[3383]: AVC avc: denied { write } for pid=3383 comm="tee" name="fd" dev="proc" ino=19693 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:15:48.360000 audit[3383]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffca2617e7 a2=241 a3=1b6 items=1 ppid=3347 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.360000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 13 00:15:48.360000 audit: PATH item=0 name="/dev/fd/63" inode=19044 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:15:48.360000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:15:48.369000 audit[3396]: AVC avc: denied { write } for pid=3396 comm="tee" name="fd" dev="proc" ino=19699 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:15:48.369000 audit[3396]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc8fa47e5 a2=241 a3=1b6 items=1 ppid=3342 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.369000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 13 00:15:48.369000 audit: PATH item=0 name="/dev/fd/63" inode=21519 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:15:48.369000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:15:48.373000 audit[3392]: AVC avc: denied { write } for pid=3392 comm="tee" name="fd" dev="proc" ino=19705 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:15:48.373000 audit[3392]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc19347e5 a2=241 a3=1b6 items=1 ppid=3341 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.373000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 13 00:15:48.373000 audit: PATH item=0 name="/dev/fd/63" inode=20504 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:15:48.373000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:15:48.383000 audit[3405]: AVC avc: denied { write } for pid=3405 comm="tee" name="fd" dev="proc" ino=21524 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:15:48.383000 audit[3405]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffbd0a7d6 a2=241 a3=1b6 items=1 ppid=3350 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.383000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 13 00:15:48.383000 audit: PATH item=0 name="/dev/fd/63" inode=19051 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:15:48.383000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:15:48.413000 audit[3419]: AVC avc: denied { write } for pid=3419 comm="tee" name="fd" dev="proc" ino=21531 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:15:48.413000 audit[3419]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc21597e6 a2=241 a3=1b6 items=1 ppid=3353 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.413000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 13 00:15:48.413000 audit: PATH item=0 name="/dev/fd/63" inode=21528 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:15:48.413000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:15:48.420000 audit[3425]: AVC avc: denied { write } for pid=3425 comm="tee" name="fd" dev="proc" ino=20513 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:15:48.420000 audit[3425]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdbf867e5 a2=241 a3=1b6 items=1 ppid=3349 pid=3425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.420000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 13 00:15:48.420000 audit: PATH item=0 name="/dev/fd/63" inode=20510 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:15:48.420000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:15:48.516943 kubelet[1957]: I0913 00:15:48.516908 1957 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:15:48.517502 kubelet[1957]: E0913 00:15:48.517192 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit: BPF prog-id=140 op=LOAD Sep 13 00:15:48.571000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd6722928 a2=98 a3=ffffd6722918 items=0 ppid=3354 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.571000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:15:48.571000 audit: BPF prog-id=140 op=UNLOAD Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.571000 audit: BPF prog-id=141 op=LOAD Sep 13 00:15:48.571000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd67227d8 a2=74 a3=95 items=0 ppid=3354 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.571000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:15:48.572000 audit: BPF prog-id=141 op=UNLOAD Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit: BPF prog-id=142 op=LOAD Sep 13 00:15:48.572000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd6722808 a2=40 a3=ffffd6722838 items=0 ppid=3354 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.572000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:15:48.572000 audit: BPF prog-id=142 op=UNLOAD Sep 13 00:15:48.572000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.572000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd6722920 a2=50 a3=0 items=0 ppid=3354 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.572000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit: BPF prog-id=143 op=LOAD Sep 13 00:15:48.573000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce0293b8 a2=98 a3=ffffce0293a8 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.573000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.573000 audit: BPF prog-id=143 op=UNLOAD Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit: BPF prog-id=144 op=LOAD Sep 13 00:15:48.573000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffce029048 a2=74 a3=95 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.573000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.573000 audit: BPF prog-id=144 op=UNLOAD Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.573000 audit: BPF prog-id=145 op=LOAD Sep 13 00:15:48.573000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffce0290a8 a2=94 a3=2 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.573000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.573000 audit: BPF prog-id=145 op=UNLOAD Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit: BPF prog-id=146 op=LOAD Sep 13 00:15:48.660000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffce029068 a2=40 a3=ffffce029098 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.660000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.660000 audit: BPF prog-id=146 op=UNLOAD Sep 13 00:15:48.660000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.660000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffce029180 a2=50 a3=0 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.660000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce0290d8 a2=28 a3=ffffce029208 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce029108 a2=28 a3=ffffce029238 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce028fb8 a2=28 a3=ffffce0290e8 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce029128 a2=28 a3=ffffce029258 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce029108 a2=28 a3=ffffce029238 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce0290f8 a2=28 a3=ffffce029228 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce029128 a2=28 a3=ffffce029258 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce029108 a2=28 a3=ffffce029238 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce029128 a2=28 a3=ffffce029258 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce0290f8 a2=28 a3=ffffce029228 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce029178 a2=28 a3=ffffce0292b8 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffce028eb0 a2=50 a3=0 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit: BPF prog-id=147 op=LOAD Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffce028eb8 a2=94 a3=5 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit: BPF prog-id=147 op=UNLOAD Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffce028fc0 a2=50 a3=0 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffce029108 a2=4 a3=3 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.671000 audit[3454]: AVC avc: denied { confidentiality } for pid=3454 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:15:48.671000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffce0290e8 a2=94 a3=6 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.671000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { confidentiality } for pid=3454 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:15:48.672000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffce0288b8 a2=94 a3=83 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.672000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.672000 audit[3454]: AVC avc: denied { confidentiality } for pid=3454 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:15:48.672000 audit[3454]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffce0288b8 a2=94 a3=83 items=0 ppid=3354 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.672000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit: BPF prog-id=148 op=LOAD Sep 13 00:15:48.681000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe4650fb8 a2=98 a3=ffffe4650fa8 items=0 ppid=3354 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.681000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:15:48.681000 audit: BPF prog-id=148 op=UNLOAD Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.681000 audit: BPF prog-id=149 op=LOAD Sep 13 00:15:48.681000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe4650e68 a2=74 a3=95 items=0 ppid=3354 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.681000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:15:48.682000 audit: BPF prog-id=149 op=UNLOAD Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.682000 audit: BPF prog-id=150 op=LOAD Sep 13 00:15:48.682000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe4650e98 a2=40 a3=ffffe4650ec8 items=0 ppid=3354 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.682000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:15:48.682000 audit: BPF prog-id=150 op=UNLOAD Sep 13 00:15:48.741671 systemd-networkd[1043]: vxlan.calico: Link UP Sep 13 00:15:48.741677 systemd-networkd[1043]: vxlan.calico: Gained carrier Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit: BPF prog-id=151 op=LOAD Sep 13 00:15:48.750000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff91f4808 a2=98 a3=fffff91f47f8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.750000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.750000 audit: BPF prog-id=151 op=UNLOAD Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.750000 audit: BPF prog-id=152 op=LOAD Sep 13 00:15:48.750000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff91f44e8 a2=74 a3=95 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.750000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit: BPF prog-id=152 op=UNLOAD Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit: BPF prog-id=153 op=LOAD Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff91f4548 a2=94 a3=2 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit: BPF prog-id=153 op=UNLOAD Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff91f4578 a2=28 a3=fffff91f46a8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff91f45a8 a2=28 a3=fffff91f46d8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff91f4458 a2=28 a3=fffff91f4588 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff91f45c8 a2=28 a3=fffff91f46f8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff91f45a8 a2=28 a3=fffff91f46d8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff91f4598 a2=28 a3=fffff91f46c8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff91f45c8 a2=28 a3=fffff91f46f8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff91f45a8 a2=28 a3=fffff91f46d8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff91f45c8 a2=28 a3=fffff91f46f8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff91f4598 a2=28 a3=fffff91f46c8 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff91f4618 a2=28 a3=fffff91f4758 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.751000 audit: BPF prog-id=154 op=LOAD Sep 13 00:15:48.751000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff91f4438 a2=40 a3=fffff91f4468 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.751000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.751000 audit: BPF prog-id=154 op=UNLOAD Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffff91f4460 a2=50 a3=0 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.752000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffff91f4460 a2=50 a3=0 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.752000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit: BPF prog-id=155 op=LOAD Sep 13 00:15:48.752000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff91f3bc8 a2=94 a3=2 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.752000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.752000 audit: BPF prog-id=155 op=UNLOAD Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { perfmon } for pid=3490 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit[3490]: AVC avc: denied { bpf } for pid=3490 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.752000 audit: BPF prog-id=156 op=LOAD Sep 13 00:15:48.752000 audit[3490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff91f3d58 a2=94 a3=30 items=0 ppid=3354 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.752000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.756000 audit: BPF prog-id=157 op=LOAD Sep 13 00:15:48.756000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe304d708 a2=98 a3=ffffe304d6f8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.756000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.759000 audit: BPF prog-id=157 op=UNLOAD Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit: BPF prog-id=158 op=LOAD Sep 13 00:15:48.759000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe304d398 a2=74 a3=95 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.759000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.759000 audit: BPF prog-id=158 op=UNLOAD Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.759000 audit: BPF prog-id=159 op=LOAD Sep 13 00:15:48.759000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe304d3f8 a2=94 a3=2 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.759000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.759000 audit: BPF prog-id=159 op=UNLOAD Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit: BPF prog-id=160 op=LOAD Sep 13 00:15:48.845000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe304d3b8 a2=40 a3=ffffe304d3e8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.845000 audit: BPF prog-id=160 op=UNLOAD Sep 13 00:15:48.845000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.845000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe304d4d0 a2=50 a3=0 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe304d428 a2=28 a3=ffffe304d558 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe304d458 a2=28 a3=ffffe304d588 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe304d308 a2=28 a3=ffffe304d438 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe304d478 a2=28 a3=ffffe304d5a8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe304d458 a2=28 a3=ffffe304d588 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe304d448 a2=28 a3=ffffe304d578 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe304d478 a2=28 a3=ffffe304d5a8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe304d458 a2=28 a3=ffffe304d588 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe304d478 a2=28 a3=ffffe304d5a8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe304d448 a2=28 a3=ffffe304d578 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe304d4c8 a2=28 a3=ffffe304d608 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe304d200 a2=50 a3=0 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.854000 audit: BPF prog-id=161 op=LOAD Sep 13 00:15:48.854000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe304d208 a2=94 a3=5 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.855000 audit: BPF prog-id=161 op=UNLOAD Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe304d310 a2=50 a3=0 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.855000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe304d458 a2=4 a3=3 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.855000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { confidentiality } for pid=3492 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:15:48.855000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe304d438 a2=94 a3=6 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.855000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { confidentiality } for pid=3492 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:15:48.855000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe304cc08 a2=94 a3=83 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.855000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { confidentiality } for pid=3492 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:15:48.855000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe304cc08 a2=94 a3=83 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.855000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe304e648 a2=10 a3=ffffe304e738 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.855000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.855000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.855000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe304e508 a2=10 a3=ffffe304e5f8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.855000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.856000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.856000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe304e478 a2=10 a3=ffffe304e5f8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.856000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.856000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:48.856000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe304e478 a2=10 a3=ffffe304e5f8 items=0 ppid=3354 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.856000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:15:48.861000 audit: BPF prog-id=156 op=UNLOAD Sep 13 00:15:48.919000 audit[3520]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3520 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:48.919000 audit[3520]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffdc31b490 a2=0 a3=ffffad05ffa8 items=0 ppid=3354 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.919000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:48.930000 audit[3519]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3519 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:48.930000 audit[3519]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe7f1b950 a2=0 a3=ffff8f300fa8 items=0 ppid=3354 pid=3519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.930000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:48.946000 audit[3518]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3518 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:48.946000 audit[3518]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffe82521d0 a2=0 a3=ffff84a39fa8 items=0 ppid=3354 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.946000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:48.947000 audit[3523]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:48.947000 audit[3523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffe1ea1da0 a2=0 a3=ffff892b9fa8 items=0 ppid=3354 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:48.947000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:49.379828 env[1216]: time="2025-09-13T00:15:49.379713707Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:49.384115 env[1216]: time="2025-09-13T00:15:49.383973804Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:49.385655 env[1216]: time="2025-09-13T00:15:49.385620355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:49.387430 env[1216]: time="2025-09-13T00:15:49.387391625Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:49.387923 env[1216]: time="2025-09-13T00:15:49.387892302Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 13 00:15:49.390301 env[1216]: time="2025-09-13T00:15:49.390251490Z" level=info msg="CreateContainer within sandbox \"50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 13 00:15:49.409596 env[1216]: time="2025-09-13T00:15:49.409548625Z" level=info msg="CreateContainer within sandbox \"50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"7150babe5b3c8e84859b798b75dc94c9baee721e573dc043ee5b1cd9687c61f6\"" Sep 13 00:15:49.412339 env[1216]: time="2025-09-13T00:15:49.412146371Z" level=info msg="StartContainer for \"7150babe5b3c8e84859b798b75dc94c9baee721e573dc043ee5b1cd9687c61f6\"" Sep 13 00:15:49.421167 kubelet[1957]: I0913 00:15:49.420951 1957 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="38bfbe79-582b-4c6f-8b11-026d8b67f69b" path="/var/lib/kubelet/pods/38bfbe79-582b-4c6f-8b11-026d8b67f69b/volumes" Sep 13 00:15:49.437573 systemd[1]: Started cri-containerd-7150babe5b3c8e84859b798b75dc94c9baee721e573dc043ee5b1cd9687c61f6.scope. Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.449000 audit: BPF prog-id=162 op=LOAD Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3300 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:49.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731353062616265356233633865383438353962373938623735646339 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3300 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:49.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731353062616265356233633865383438353962373938623735646339 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.450000 audit: BPF prog-id=163 op=LOAD Sep 13 00:15:49.450000 audit[3541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3300 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:49.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731353062616265356233633865383438353962373938623735646339 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.451000 audit: BPF prog-id=164 op=LOAD Sep 13 00:15:49.451000 audit[3541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3300 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:49.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731353062616265356233633865383438353962373938623735646339 Sep 13 00:15:49.452000 audit: BPF prog-id=164 op=UNLOAD Sep 13 00:15:49.452000 audit: BPF prog-id=163 op=UNLOAD Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { perfmon } for pid=3541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit[3541]: AVC avc: denied { bpf } for pid=3541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:49.452000 audit: BPF prog-id=165 op=LOAD Sep 13 00:15:49.452000 audit[3541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3300 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:49.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731353062616265356233633865383438353962373938623735646339 Sep 13 00:15:49.472471 env[1216]: time="2025-09-13T00:15:49.472422444Z" level=info msg="StartContainer for \"7150babe5b3c8e84859b798b75dc94c9baee721e573dc043ee5b1cd9687c61f6\" returns successfully" Sep 13 00:15:49.473534 env[1216]: time="2025-09-13T00:15:49.473500238Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 13 00:15:49.486000 audit[3551]: AVC avc: denied { search } for pid=3551 comm="nginx" name="crypto" dev="proc" ino=21751 scontext=system_u:system_r:svirt_lxc_net_t:s0:c75,c370 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 13 00:15:49.486000 audit[3551]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff9406c958 a2=0 a3=0 items=0 ppid=3300 pid=3551 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c75,c370 key=(null) Sep 13 00:15:49.486000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 13 00:15:49.796307 systemd-networkd[1043]: calid59130d32d6: Gained IPv6LL Sep 13 00:15:50.373188 systemd-networkd[1043]: vxlan.calico: Gained IPv6LL Sep 13 00:15:51.261670 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1772952341.mount: Deactivated successfully. Sep 13 00:15:51.291670 env[1216]: time="2025-09-13T00:15:51.291624740Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:51.294402 env[1216]: time="2025-09-13T00:15:51.294370446Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:51.296788 env[1216]: time="2025-09-13T00:15:51.296761313Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:51.299729 env[1216]: time="2025-09-13T00:15:51.299702138Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:51.300894 env[1216]: time="2025-09-13T00:15:51.300640854Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 13 00:15:51.306059 env[1216]: time="2025-09-13T00:15:51.305619148Z" level=info msg="CreateContainer within sandbox \"50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 13 00:15:51.318130 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount254485849.mount: Deactivated successfully. Sep 13 00:15:51.321886 env[1216]: time="2025-09-13T00:15:51.321826065Z" level=info msg="CreateContainer within sandbox \"50e069f400dfcf0b50c83f9aa87ecf7e2a623e0783dbda50496ffa322a64d37d\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"9363ff12d287874e6002a3db9c2f7481341e8c252256efaa4b1e737a4c56f05c\"" Sep 13 00:15:51.324277 env[1216]: time="2025-09-13T00:15:51.323855614Z" level=info msg="StartContainer for \"9363ff12d287874e6002a3db9c2f7481341e8c252256efaa4b1e737a4c56f05c\"" Sep 13 00:15:51.342449 systemd[1]: Started cri-containerd-9363ff12d287874e6002a3db9c2f7481341e8c252256efaa4b1e737a4c56f05c.scope. Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit: BPF prog-id=166 op=LOAD Sep 13 00:15:51.359000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.359000 audit[3582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3300 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933363366663132643238373837346536303032613364623963326637 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3300 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933363366663132643238373837346536303032613364623963326637 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.360000 audit: BPF prog-id=167 op=LOAD Sep 13 00:15:51.360000 audit[3582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3300 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933363366663132643238373837346536303032613364623963326637 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.361000 audit: BPF prog-id=168 op=LOAD Sep 13 00:15:51.361000 audit[3582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3300 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933363366663132643238373837346536303032613364623963326637 Sep 13 00:15:51.362000 audit: BPF prog-id=168 op=UNLOAD Sep 13 00:15:51.362000 audit: BPF prog-id=167 op=UNLOAD Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { perfmon } for pid=3582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit[3582]: AVC avc: denied { bpf } for pid=3582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.362000 audit: BPF prog-id=169 op=LOAD Sep 13 00:15:51.362000 audit[3582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3300 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933363366663132643238373837346536303032613364623963326637 Sep 13 00:15:51.387420 env[1216]: time="2025-09-13T00:15:51.387375489Z" level=info msg="StartContainer for \"9363ff12d287874e6002a3db9c2f7481341e8c252256efaa4b1e737a4c56f05c\" returns successfully" Sep 13 00:15:51.419267 env[1216]: time="2025-09-13T00:15:51.419211485Z" level=info msg="StopPodSandbox for \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\"" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.480 [INFO][3622] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.480 [INFO][3622] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" iface="eth0" netns="/var/run/netns/cni-0b4afb25-aed5-6a50-2408-59c1e40d0389" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.480 [INFO][3622] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" iface="eth0" netns="/var/run/netns/cni-0b4afb25-aed5-6a50-2408-59c1e40d0389" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.480 [INFO][3622] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" iface="eth0" netns="/var/run/netns/cni-0b4afb25-aed5-6a50-2408-59c1e40d0389" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.480 [INFO][3622] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.480 [INFO][3622] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.499 [INFO][3633] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.499 [INFO][3633] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.499 [INFO][3633] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.513 [WARNING][3633] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.513 [INFO][3633] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.515 [INFO][3633] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:51.520566 env[1216]: 2025-09-13 00:15:51.517 [INFO][3622] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:15:51.521172 env[1216]: time="2025-09-13T00:15:51.521138122Z" level=info msg="TearDown network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\" successfully" Sep 13 00:15:51.521247 env[1216]: time="2025-09-13T00:15:51.521231442Z" level=info msg="StopPodSandbox for \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\" returns successfully" Sep 13 00:15:51.522096 kubelet[1957]: E0913 00:15:51.521529 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:51.522951 env[1216]: time="2025-09-13T00:15:51.522733394Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-pvt9z,Uid:4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a,Namespace:kube-system,Attempt:1,}" Sep 13 00:15:51.551000 audit[3657]: NETFILTER_CFG table=filter:105 family=2 entries=19 op=nft_register_rule pid=3657 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:51.551000 audit[3657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd36d5cb0 a2=0 a3=1 items=0 ppid=2073 pid=3657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.551000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:51.557000 audit[3657]: NETFILTER_CFG table=nat:106 family=2 entries=21 op=nft_register_chain pid=3657 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:51.557000 audit[3657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffd36d5cb0 a2=0 a3=1 items=0 ppid=2073 pid=3657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.557000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:51.643866 systemd-networkd[1043]: cali813d87920ae: Link UP Sep 13 00:15:51.644227 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:15:51.644264 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali813d87920ae: link becomes ready Sep 13 00:15:51.644091 systemd-networkd[1043]: cali813d87920ae: Gained carrier Sep 13 00:15:51.658866 kubelet[1957]: I0913 00:15:51.658750 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-688c87845d-pzxzj" podStartSLOduration=1.475156171 podStartE2EDuration="4.658732257s" podCreationTimestamp="2025-09-13 00:15:47 +0000 UTC" firstStartedPulling="2025-09-13 00:15:48.118343921 +0000 UTC m=+36.812980685" lastFinishedPulling="2025-09-13 00:15:51.301920047 +0000 UTC m=+39.996556771" observedRunningTime="2025-09-13 00:15:51.53921075 +0000 UTC m=+40.233847554" watchObservedRunningTime="2025-09-13 00:15:51.658732257 +0000 UTC m=+40.353369021" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.573 [INFO][3644] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0 coredns-7c65d6cfc9- kube-system 4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a 917 0 2025-09-13 00:15:19 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-pvt9z eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali813d87920ae [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.573 [INFO][3644] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.601 [INFO][3661] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" HandleID="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.601 [INFO][3661] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" HandleID="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd5f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-pvt9z", "timestamp":"2025-09-13 00:15:51.601235191 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.601 [INFO][3661] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.601 [INFO][3661] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.601 [INFO][3661] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.612 [INFO][3661] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.617 [INFO][3661] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.622 [INFO][3661] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.624 [INFO][3661] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.626 [INFO][3661] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.627 [INFO][3661] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.628 [INFO][3661] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.632 [INFO][3661] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.639 [INFO][3661] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.639 [INFO][3661] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" host="localhost" Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.639 [INFO][3661] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:51.662126 env[1216]: 2025-09-13 00:15:51.639 [INFO][3661] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" HandleID="k8s-pod-network.f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.662708 env[1216]: 2025-09-13 00:15:51.641 [INFO][3644] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a", ResourceVersion:"917", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-pvt9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali813d87920ae", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:51.662708 env[1216]: 2025-09-13 00:15:51.641 [INFO][3644] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.662708 env[1216]: 2025-09-13 00:15:51.641 [INFO][3644] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali813d87920ae ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.662708 env[1216]: 2025-09-13 00:15:51.643 [INFO][3644] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.662708 env[1216]: 2025-09-13 00:15:51.645 [INFO][3644] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a", ResourceVersion:"917", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e", Pod:"coredns-7c65d6cfc9-pvt9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali813d87920ae", MAC:"62:3f:96:7f:44:19", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:51.662708 env[1216]: 2025-09-13 00:15:51.659 [INFO][3644] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-pvt9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:15:51.671000 audit[3678]: NETFILTER_CFG table=filter:107 family=2 entries=42 op=nft_register_chain pid=3678 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:51.671000 audit[3678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=fffff1ca8e60 a2=0 a3=ffff8c22cfa8 items=0 ppid=3354 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.671000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:51.676989 env[1216]: time="2025-09-13T00:15:51.676916323Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:51.676989 env[1216]: time="2025-09-13T00:15:51.676956883Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:51.677198 env[1216]: time="2025-09-13T00:15:51.676967243Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:51.677198 env[1216]: time="2025-09-13T00:15:51.677098282Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e pid=3687 runtime=io.containerd.runc.v2 Sep 13 00:15:51.686483 systemd[1]: Started cri-containerd-f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e.scope. Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.703000 audit: BPF prog-id=170 op=LOAD Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3687 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638316564346635373031306562373831636431623263336535343433 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3687 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638316564346635373031306562373831636431623263336535343433 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit: BPF prog-id=171 op=LOAD Sep 13 00:15:51.704000 audit[3696]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3687 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638316564346635373031306562373831636431623263336535343433 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit: BPF prog-id=172 op=LOAD Sep 13 00:15:51.704000 audit[3696]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3687 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638316564346635373031306562373831636431623263336535343433 Sep 13 00:15:51.704000 audit: BPF prog-id=172 op=UNLOAD Sep 13 00:15:51.704000 audit: BPF prog-id=171 op=UNLOAD Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.704000 audit: BPF prog-id=173 op=LOAD Sep 13 00:15:51.704000 audit[3696]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3687 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638316564346635373031306562373831636431623263336535343433 Sep 13 00:15:51.706036 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:51.710350 systemd[1]: run-netns-cni\x2d0b4afb25\x2daed5\x2d6a50\x2d2408\x2d59c1e40d0389.mount: Deactivated successfully. Sep 13 00:15:51.726239 env[1216]: time="2025-09-13T00:15:51.726203750Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-pvt9z,Uid:4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a,Namespace:kube-system,Attempt:1,} returns sandbox id \"f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e\"" Sep 13 00:15:51.727343 kubelet[1957]: E0913 00:15:51.727319 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:51.729836 env[1216]: time="2025-09-13T00:15:51.729805932Z" level=info msg="CreateContainer within sandbox \"f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 00:15:51.745405 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2093471765.mount: Deactivated successfully. Sep 13 00:15:51.753612 env[1216]: time="2025-09-13T00:15:51.753561490Z" level=info msg="CreateContainer within sandbox \"f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"4fdd815603c1cf8d46de081b2026fac645fd327feaf2c04f20d2c88a54367c72\"" Sep 13 00:15:51.753704 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount407029943.mount: Deactivated successfully. Sep 13 00:15:51.754629 env[1216]: time="2025-09-13T00:15:51.754604925Z" level=info msg="StartContainer for \"4fdd815603c1cf8d46de081b2026fac645fd327feaf2c04f20d2c88a54367c72\"" Sep 13 00:15:51.769265 systemd[1]: Started cri-containerd-4fdd815603c1cf8d46de081b2026fac645fd327feaf2c04f20d2c88a54367c72.scope. Sep 13 00:15:51.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.787000 audit: BPF prog-id=174 op=LOAD Sep 13 00:15:51.787000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.787000 audit[3728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3687 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466646438313536303363316366386434366465303831623230323666 Sep 13 00:15:51.787000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.787000 audit[3728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3687 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466646438313536303363316366386434366465303831623230323666 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit: BPF prog-id=175 op=LOAD Sep 13 00:15:51.788000 audit[3728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3687 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466646438313536303363316366386434366465303831623230323666 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.788000 audit: BPF prog-id=176 op=LOAD Sep 13 00:15:51.788000 audit[3728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3687 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466646438313536303363316366386434366465303831623230323666 Sep 13 00:15:51.789000 audit: BPF prog-id=176 op=UNLOAD Sep 13 00:15:51.789000 audit: BPF prog-id=175 op=UNLOAD Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:51.789000 audit: BPF prog-id=177 op=LOAD Sep 13 00:15:51.789000 audit[3728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3687 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:51.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466646438313536303363316366386434366465303831623230323666 Sep 13 00:15:51.802284 env[1216]: time="2025-09-13T00:15:51.802205360Z" level=info msg="StartContainer for \"4fdd815603c1cf8d46de081b2026fac645fd327feaf2c04f20d2c88a54367c72\" returns successfully" Sep 13 00:15:51.851696 kernel: kauditd_printk_skb: 893 callbacks suppressed Sep 13 00:15:51.851834 kernel: audit: type=1400 audit(1757722551.849:1212): avc: denied { getattr } for pid=3739 comm="coredns" path="cgroup:[4026532207]" dev="nsfs" ino=4026532207 scontext=system_u:system_r:svirt_lxc_net_t:s0:c713,c817 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 00:15:51.849000 audit[3739]: AVC avc: denied { getattr } for pid=3739 comm="coredns" path="cgroup:[4026532207]" dev="nsfs" ino=4026532207 scontext=system_u:system_r:svirt_lxc_net_t:s0:c713,c817 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 00:15:51.849000 audit[3739]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=3687 pid=3739 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c713,c817 key=(null) Sep 13 00:15:51.858652 kernel: audit: type=1300 audit(1757722551.849:1212): arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=3687 pid=3739 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c713,c817 key=(null) Sep 13 00:15:51.858718 kernel: audit: type=1327 audit(1757722551.849:1212): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 00:15:51.849000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 00:15:52.419436 env[1216]: time="2025-09-13T00:15:52.419398049Z" level=info msg="StopPodSandbox for \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\"" Sep 13 00:15:52.419919 env[1216]: time="2025-09-13T00:15:52.419405129Z" level=info msg="StopPodSandbox for \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\"" Sep 13 00:15:52.420188 env[1216]: time="2025-09-13T00:15:52.419399689Z" level=info msg="StopPodSandbox for \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\"" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.472 [INFO][3798] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.472 [INFO][3798] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" iface="eth0" netns="/var/run/netns/cni-a4ccd41f-ed3b-cae3-8c4d-e3ce95e129e3" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.472 [INFO][3798] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" iface="eth0" netns="/var/run/netns/cni-a4ccd41f-ed3b-cae3-8c4d-e3ce95e129e3" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.472 [INFO][3798] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" iface="eth0" netns="/var/run/netns/cni-a4ccd41f-ed3b-cae3-8c4d-e3ce95e129e3" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.472 [INFO][3798] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.472 [INFO][3798] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.504 [INFO][3821] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.504 [INFO][3821] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.504 [INFO][3821] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.516 [WARNING][3821] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.516 [INFO][3821] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.518 [INFO][3821] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:52.529181 env[1216]: 2025-09-13 00:15:52.526 [INFO][3798] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:15:52.529610 env[1216]: time="2025-09-13T00:15:52.529292980Z" level=info msg="TearDown network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\" successfully" Sep 13 00:15:52.529610 env[1216]: time="2025-09-13T00:15:52.529320339Z" level=info msg="StopPodSandbox for \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\" returns successfully" Sep 13 00:15:52.530433 env[1216]: time="2025-09-13T00:15:52.529843897Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-tg4qf,Uid:961bb16b-b8c1-4c25-8cba-0e381e56b93a,Namespace:calico-apiserver,Attempt:1,}" Sep 13 00:15:52.534368 kubelet[1957]: E0913 00:15:52.534335 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.481 [INFO][3799] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.481 [INFO][3799] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" iface="eth0" netns="/var/run/netns/cni-e94e8944-75ce-fb5f-5197-2f5216c2c040" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.482 [INFO][3799] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" iface="eth0" netns="/var/run/netns/cni-e94e8944-75ce-fb5f-5197-2f5216c2c040" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.482 [INFO][3799] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" iface="eth0" netns="/var/run/netns/cni-e94e8944-75ce-fb5f-5197-2f5216c2c040" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.482 [INFO][3799] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.482 [INFO][3799] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.508 [INFO][3827] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.508 [INFO][3827] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.518 [INFO][3827] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.530 [WARNING][3827] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.530 [INFO][3827] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.534 [INFO][3827] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:52.543190 env[1216]: 2025-09-13 00:15:52.541 [INFO][3799] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:15:52.546811 env[1216]: time="2025-09-13T00:15:52.543318269Z" level=info msg="TearDown network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\" successfully" Sep 13 00:15:52.546811 env[1216]: time="2025-09-13T00:15:52.543348109Z" level=info msg="StopPodSandbox for \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\" returns successfully" Sep 13 00:15:52.546811 env[1216]: time="2025-09-13T00:15:52.546636773Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-wqmfs,Uid:3f14fbff-2859-45e7-a008-64321fd60526,Namespace:kube-system,Attempt:1,}" Sep 13 00:15:52.546884 kubelet[1957]: E0913 00:15:52.544236 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:52.553481 kubelet[1957]: I0913 00:15:52.553423 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-pvt9z" podStartSLOduration=33.553406979 podStartE2EDuration="33.553406979s" podCreationTimestamp="2025-09-13 00:15:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:15:52.55318058 +0000 UTC m=+41.247817344" watchObservedRunningTime="2025-09-13 00:15:52.553406979 +0000 UTC m=+41.248043743" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.499 [INFO][3788] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.499 [INFO][3788] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" iface="eth0" netns="/var/run/netns/cni-d483d7e9-ea74-8b51-18f6-2d708d0e25ab" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.500 [INFO][3788] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" iface="eth0" netns="/var/run/netns/cni-d483d7e9-ea74-8b51-18f6-2d708d0e25ab" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.500 [INFO][3788] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" iface="eth0" netns="/var/run/netns/cni-d483d7e9-ea74-8b51-18f6-2d708d0e25ab" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.500 [INFO][3788] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.500 [INFO][3788] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.534 [INFO][3835] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.535 [INFO][3835] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.535 [INFO][3835] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.548 [WARNING][3835] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.549 [INFO][3835] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.554 [INFO][3835] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:52.562735 env[1216]: 2025-09-13 00:15:52.560 [INFO][3788] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:15:52.563559 env[1216]: time="2025-09-13T00:15:52.563526248Z" level=info msg="TearDown network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\" successfully" Sep 13 00:15:52.563683 env[1216]: time="2025-09-13T00:15:52.563638808Z" level=info msg="StopPodSandbox for \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\" returns successfully" Sep 13 00:15:52.564524 env[1216]: time="2025-09-13T00:15:52.564491604Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g5255,Uid:1931babe-4e10-42d3-96e5-479d8859d7ad,Namespace:calico-system,Attempt:1,}" Sep 13 00:15:52.569000 audit[3846]: NETFILTER_CFG table=filter:108 family=2 entries=18 op=nft_register_rule pid=3846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:52.569000 audit[3846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd02388d0 a2=0 a3=1 items=0 ppid=2073 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.576870 kernel: audit: type=1325 audit(1757722552.569:1213): table=filter:108 family=2 entries=18 op=nft_register_rule pid=3846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:52.576943 kernel: audit: type=1300 audit(1757722552.569:1213): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd02388d0 a2=0 a3=1 items=0 ppid=2073 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.576968 kernel: audit: type=1327 audit(1757722552.569:1213): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:52.569000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:52.581000 audit[3846]: NETFILTER_CFG table=nat:109 family=2 entries=16 op=nft_register_rule pid=3846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:52.581000 audit[3846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffd02388d0 a2=0 a3=1 items=0 ppid=2073 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.588316 kernel: audit: type=1325 audit(1757722552.581:1214): table=nat:109 family=2 entries=16 op=nft_register_rule pid=3846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:52.588410 kernel: audit: type=1300 audit(1757722552.581:1214): arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffd02388d0 a2=0 a3=1 items=0 ppid=2073 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.588435 kernel: audit: type=1327 audit(1757722552.581:1214): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:52.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:52.606000 audit[3884]: NETFILTER_CFG table=filter:110 family=2 entries=15 op=nft_register_rule pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:52.606000 audit[3884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc0956370 a2=0 a3=1 items=0 ppid=2073 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:52.610082 kernel: audit: type=1325 audit(1757722552.606:1215): table=filter:110 family=2 entries=15 op=nft_register_rule pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:52.613000 audit[3884]: NETFILTER_CFG table=nat:111 family=2 entries=37 op=nft_register_chain pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:52.613000 audit[3884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffc0956370 a2=0 a3=1 items=0 ppid=2073 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.613000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:52.712300 systemd[1]: run-netns-cni\x2dd483d7e9\x2dea74\x2d8b51\x2d18f6\x2d2d708d0e25ab.mount: Deactivated successfully. Sep 13 00:15:52.712386 systemd[1]: run-netns-cni\x2da4ccd41f\x2ded3b\x2dcae3\x2d8c4d\x2de3ce95e129e3.mount: Deactivated successfully. Sep 13 00:15:52.712433 systemd[1]: run-netns-cni\x2de94e8944\x2d75ce\x2dfb5f\x2d5197\x2d2f5216c2c040.mount: Deactivated successfully. Sep 13 00:15:52.719652 systemd-networkd[1043]: cali51d1700c870: Link UP Sep 13 00:15:52.722559 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:15:52.722641 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali51d1700c870: link becomes ready Sep 13 00:15:52.722866 systemd-networkd[1043]: cali51d1700c870: Gained carrier Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.641 [INFO][3868] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--g5255-eth0 csi-node-driver- calico-system 1931babe-4e10-42d3-96e5-479d8859d7ad 937 0 2025-09-13 00:15:32 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:856c6b598f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-g5255 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali51d1700c870 [] [] }} ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.641 [INFO][3868] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.665 [INFO][3901] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" HandleID="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.665 [INFO][3901] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" HandleID="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Workload="localhost-k8s-csi--node--driver--g5255-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d8c0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-g5255", "timestamp":"2025-09-13 00:15:52.665710618 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.665 [INFO][3901] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.665 [INFO][3901] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.666 [INFO][3901] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.680 [INFO][3901] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.684 [INFO][3901] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.689 [INFO][3901] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.691 [INFO][3901] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.693 [INFO][3901] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.693 [INFO][3901] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.695 [INFO][3901] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864 Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.700 [INFO][3901] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.709 [INFO][3901] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.709 [INFO][3901] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" host="localhost" Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.709 [INFO][3901] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:52.737163 env[1216]: 2025-09-13 00:15:52.709 [INFO][3901] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" HandleID="k8s-pod-network.8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.737914 env[1216]: 2025-09-13 00:15:52.713 [INFO][3868] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--g5255-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1931babe-4e10-42d3-96e5-479d8859d7ad", ResourceVersion:"937", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-g5255", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali51d1700c870", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:52.737914 env[1216]: 2025-09-13 00:15:52.713 [INFO][3868] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.737914 env[1216]: 2025-09-13 00:15:52.713 [INFO][3868] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali51d1700c870 ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.737914 env[1216]: 2025-09-13 00:15:52.720 [INFO][3868] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.737914 env[1216]: 2025-09-13 00:15:52.720 [INFO][3868] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--g5255-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1931babe-4e10-42d3-96e5-479d8859d7ad", ResourceVersion:"937", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864", Pod:"csi-node-driver-g5255", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali51d1700c870", MAC:"7e:db:2b:45:bf:02", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:52.737914 env[1216]: 2025-09-13 00:15:52.732 [INFO][3868] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864" Namespace="calico-system" Pod="csi-node-driver-g5255" WorkloadEndpoint="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:15:52.749246 env[1216]: time="2025-09-13T00:15:52.749056481Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:52.749246 env[1216]: time="2025-09-13T00:15:52.749113921Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:52.749246 env[1216]: time="2025-09-13T00:15:52.749123961Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:52.749400 env[1216]: time="2025-09-13T00:15:52.749327240Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864 pid=3934 runtime=io.containerd.runc.v2 Sep 13 00:15:52.748000 audit[3939]: NETFILTER_CFG table=filter:112 family=2 entries=40 op=nft_register_chain pid=3939 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:52.748000 audit[3939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffd719fcc0 a2=0 a3=ffffa1a1dfa8 items=0 ppid=3354 pid=3939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.748000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:52.761208 systemd[1]: Started cri-containerd-8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864.scope. Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.792000 audit: BPF prog-id=178 op=LOAD Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3934 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837333138383666376137393565653961396339313765613462666636 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3934 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837333138383666376137393565653961396339313765613462666636 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit: BPF prog-id=179 op=LOAD Sep 13 00:15:52.793000 audit[3945]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3934 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837333138383666376137393565653961396339313765613462666636 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit: BPF prog-id=180 op=LOAD Sep 13 00:15:52.793000 audit[3945]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3934 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837333138383666376137393565653961396339313765613462666636 Sep 13 00:15:52.793000 audit: BPF prog-id=180 op=UNLOAD Sep 13 00:15:52.793000 audit: BPF prog-id=179 op=UNLOAD Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.793000 audit: BPF prog-id=181 op=LOAD Sep 13 00:15:52.793000 audit[3945]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3934 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837333138383666376137393565653961396339313765613462666636 Sep 13 00:15:52.795863 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:52.811060 env[1216]: time="2025-09-13T00:15:52.811017531Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g5255,Uid:1931babe-4e10-42d3-96e5-479d8859d7ad,Namespace:calico-system,Attempt:1,} returns sandbox id \"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864\"" Sep 13 00:15:52.813176 env[1216]: time="2025-09-13T00:15:52.812710363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 13 00:15:52.819174 systemd-networkd[1043]: cali083b34c36d3: Link UP Sep 13 00:15:52.821132 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali083b34c36d3: link becomes ready Sep 13 00:15:52.821726 systemd-networkd[1043]: cali083b34c36d3: Gained carrier Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.634 [INFO][3859] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0 coredns-7c65d6cfc9- kube-system 3f14fbff-2859-45e7-a008-64321fd60526 936 0 2025-09-13 00:15:19 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-wqmfs eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali083b34c36d3 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.634 [INFO][3859] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.666 [INFO][3893] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" HandleID="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.666 [INFO][3893] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" HandleID="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3690), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-wqmfs", "timestamp":"2025-09-13 00:15:52.662165355 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.666 [INFO][3893] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.709 [INFO][3893] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.709 [INFO][3893] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.783 [INFO][3893] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.789 [INFO][3893] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.795 [INFO][3893] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.797 [INFO][3893] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.800 [INFO][3893] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.800 [INFO][3893] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.801 [INFO][3893] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.805 [INFO][3893] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.811 [INFO][3893] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.811 [INFO][3893] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" host="localhost" Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.811 [INFO][3893] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:52.834471 env[1216]: 2025-09-13 00:15:52.811 [INFO][3893] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" HandleID="k8s-pod-network.dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.835053 env[1216]: 2025-09-13 00:15:52.814 [INFO][3859] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3f14fbff-2859-45e7-a008-64321fd60526", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-wqmfs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali083b34c36d3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:52.835053 env[1216]: 2025-09-13 00:15:52.815 [INFO][3859] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.835053 env[1216]: 2025-09-13 00:15:52.815 [INFO][3859] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali083b34c36d3 ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.835053 env[1216]: 2025-09-13 00:15:52.822 [INFO][3859] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.835053 env[1216]: 2025-09-13 00:15:52.822 [INFO][3859] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3f14fbff-2859-45e7-a008-64321fd60526", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd", Pod:"coredns-7c65d6cfc9-wqmfs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali083b34c36d3", MAC:"3e:8f:ff:d6:a2:7b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:52.835053 env[1216]: 2025-09-13 00:15:52.831 [INFO][3859] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd" Namespace="kube-system" Pod="coredns-7c65d6cfc9-wqmfs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:15:52.859722 env[1216]: time="2025-09-13T00:15:52.859651248Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:52.859722 env[1216]: time="2025-09-13T00:15:52.859691288Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:52.859722 env[1216]: time="2025-09-13T00:15:52.859702208Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:52.859896 env[1216]: time="2025-09-13T00:15:52.859841607Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd pid=3986 runtime=io.containerd.runc.v2 Sep 13 00:15:52.863000 audit[3995]: NETFILTER_CFG table=filter:113 family=2 entries=40 op=nft_register_chain pid=3995 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:52.863000 audit[3995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20344 a0=3 a1=ffffd45ef770 a2=0 a3=ffffbca08fa8 items=0 ppid=3354 pid=3995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.863000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:52.872341 systemd[1]: Started cri-containerd-dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd.scope. Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit: BPF prog-id=182 op=LOAD Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3986 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316131613235613363626231666637646665333530326465623234 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3986 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316131613235613363626231666637646665333530326465623234 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.900000 audit: BPF prog-id=183 op=LOAD Sep 13 00:15:52.900000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3986 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316131613235613363626231666637646665333530326465623234 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit: BPF prog-id=184 op=LOAD Sep 13 00:15:52.901000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3986 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316131613235613363626231666637646665333530326465623234 Sep 13 00:15:52.901000 audit: BPF prog-id=184 op=UNLOAD Sep 13 00:15:52.901000 audit: BPF prog-id=183 op=UNLOAD Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.901000 audit: BPF prog-id=185 op=LOAD Sep 13 00:15:52.901000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3986 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316131613235613363626231666637646665333530326465623234 Sep 13 00:15:52.902808 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:52.922345 systemd-networkd[1043]: calie8f6550a89a: Link UP Sep 13 00:15:52.923707 systemd-networkd[1043]: calie8f6550a89a: Gained carrier Sep 13 00:15:52.924086 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie8f6550a89a: link becomes ready Sep 13 00:15:52.932443 env[1216]: time="2025-09-13T00:15:52.932404684Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-wqmfs,Uid:3f14fbff-2859-45e7-a008-64321fd60526,Namespace:kube-system,Attempt:1,} returns sandbox id \"dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd\"" Sep 13 00:15:52.933836 kubelet[1957]: E0913 00:15:52.933128 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:52.937271 env[1216]: time="2025-09-13T00:15:52.937174940Z" level=info msg="CreateContainer within sandbox \"dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.640 [INFO][3848] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0 calico-apiserver-8497d5cc75- calico-apiserver 961bb16b-b8c1-4c25-8cba-0e381e56b93a 935 0 2025-09-13 00:15:27 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:8497d5cc75 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-8497d5cc75-tg4qf eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie8f6550a89a [] [] }} ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.640 [INFO][3848] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.667 [INFO][3899] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" HandleID="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.667 [INFO][3899] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" HandleID="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400021f5e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-8497d5cc75-tg4qf", "timestamp":"2025-09-13 00:15:52.66721185 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.667 [INFO][3899] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.811 [INFO][3899] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.811 [INFO][3899] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.881 [INFO][3899] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.890 [INFO][3899] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.895 [INFO][3899] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.897 [INFO][3899] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.900 [INFO][3899] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.900 [INFO][3899] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.903 [INFO][3899] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9 Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.908 [INFO][3899] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.916 [INFO][3899] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.916 [INFO][3899] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" host="localhost" Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.916 [INFO][3899] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:52.945114 env[1216]: 2025-09-13 00:15:52.916 [INFO][3899] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" HandleID="k8s-pod-network.6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.945644 env[1216]: 2025-09-13 00:15:52.919 [INFO][3848] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"961bb16b-b8c1-4c25-8cba-0e381e56b93a", ResourceVersion:"935", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-8497d5cc75-tg4qf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie8f6550a89a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:52.945644 env[1216]: 2025-09-13 00:15:52.919 [INFO][3848] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.945644 env[1216]: 2025-09-13 00:15:52.919 [INFO][3848] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie8f6550a89a ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.945644 env[1216]: 2025-09-13 00:15:52.924 [INFO][3848] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.945644 env[1216]: 2025-09-13 00:15:52.925 [INFO][3848] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"961bb16b-b8c1-4c25-8cba-0e381e56b93a", ResourceVersion:"935", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9", Pod:"calico-apiserver-8497d5cc75-tg4qf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie8f6550a89a", MAC:"86:34:a8:04:00:32", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:52.945644 env[1216]: 2025-09-13 00:15:52.936 [INFO][3848] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-tg4qf" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:15:52.950000 audit[4028]: NETFILTER_CFG table=filter:114 family=2 entries=62 op=nft_register_chain pid=4028 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:52.950000 audit[4028]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=31772 a0=3 a1=ffffcb0e4440 a2=0 a3=ffff85ee0fa8 items=0 ppid=3354 pid=4028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.950000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:52.956506 env[1216]: time="2025-09-13T00:15:52.956467364Z" level=info msg="CreateContainer within sandbox \"dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1a4c32649016f323041fb8691bb0300e90faced1aa47ad14e6440814833e68a5\"" Sep 13 00:15:52.956613 env[1216]: time="2025-09-13T00:15:52.956494284Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:52.956613 env[1216]: time="2025-09-13T00:15:52.956551764Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:52.956613 env[1216]: time="2025-09-13T00:15:52.956563123Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:52.957257 env[1216]: time="2025-09-13T00:15:52.957223880Z" level=info msg="StartContainer for \"1a4c32649016f323041fb8691bb0300e90faced1aa47ad14e6440814833e68a5\"" Sep 13 00:15:52.957592 env[1216]: time="2025-09-13T00:15:52.957115041Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9 pid=4037 runtime=io.containerd.runc.v2 Sep 13 00:15:52.968435 systemd[1]: Started cri-containerd-6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9.scope. Sep 13 00:15:52.973062 systemd[1]: Started cri-containerd-1a4c32649016f323041fb8691bb0300e90faced1aa47ad14e6440814833e68a5.scope. Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit: BPF prog-id=186 op=LOAD Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3986 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161346333323634393031366633323330343166623836393162623033 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3986 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161346333323634393031366633323330343166623836393162623033 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit: BPF prog-id=187 op=LOAD Sep 13 00:15:52.990000 audit[4059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3986 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161346333323634393031366633323330343166623836393162623033 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit: BPF prog-id=188 op=LOAD Sep 13 00:15:52.990000 audit[4059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3986 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161346333323634393031366633323330343166623836393162623033 Sep 13 00:15:52.990000 audit: BPF prog-id=188 op=UNLOAD Sep 13 00:15:52.990000 audit: BPF prog-id=187 op=UNLOAD Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { perfmon } for pid=4059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit[4059]: AVC avc: denied { bpf } for pid=4059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.990000 audit: BPF prog-id=189 op=LOAD Sep 13 00:15:52.990000 audit[4059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3986 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161346333323634393031366633323330343166623836393162623033 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.993000 audit: BPF prog-id=190 op=LOAD Sep 13 00:15:52.994000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.994000 audit[4046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4037 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661613033396634396631323539613365376564346332386332383166 Sep 13 00:15:52.994000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.994000 audit[4046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4037 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661613033396634396631323539613365376564346332386332383166 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.995000 audit: BPF prog-id=191 op=LOAD Sep 13 00:15:52.995000 audit[4046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4037 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661613033396634396631323539613365376564346332386332383166 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit: BPF prog-id=192 op=LOAD Sep 13 00:15:52.996000 audit[4046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4037 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661613033396634396631323539613365376564346332386332383166 Sep 13 00:15:52.996000 audit: BPF prog-id=192 op=UNLOAD Sep 13 00:15:52.996000 audit: BPF prog-id=191 op=UNLOAD Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { perfmon } for pid=4046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit[4046]: AVC avc: denied { bpf } for pid=4046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:52.996000 audit: BPF prog-id=193 op=LOAD Sep 13 00:15:52.996000 audit[4046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4037 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:52.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661613033396634396631323539613365376564346332386332383166 Sep 13 00:15:52.999127 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:53.008427 env[1216]: time="2025-09-13T00:15:53.008386305Z" level=info msg="StartContainer for \"1a4c32649016f323041fb8691bb0300e90faced1aa47ad14e6440814833e68a5\" returns successfully" Sep 13 00:15:53.015000 audit[4074]: AVC avc: denied { getattr } for pid=4074 comm="coredns" path="cgroup:[4026532593]" dev="nsfs" ino=4026532593 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c660 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 00:15:53.015000 audit[4074]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40001cc918 a2=40001ce578 a3=0 items=0 ppid=3986 pid=4074 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c660 key=(null) Sep 13 00:15:53.015000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 00:15:53.023503 env[1216]: time="2025-09-13T00:15:53.023464312Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-tg4qf,Uid:961bb16b-b8c1-4c25-8cba-0e381e56b93a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9\"" Sep 13 00:15:53.316293 systemd-networkd[1043]: cali813d87920ae: Gained IPv6LL Sep 13 00:15:53.543883 kubelet[1957]: E0913 00:15:53.543840 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:53.544463 kubelet[1957]: E0913 00:15:53.544442 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:53.581000 audit[4109]: NETFILTER_CFG table=filter:115 family=2 entries=12 op=nft_register_rule pid=4109 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:53.581000 audit[4109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffff3138d0 a2=0 a3=1 items=0 ppid=2073 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:53.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:53.585532 kubelet[1957]: I0913 00:15:53.585472 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-wqmfs" podStartSLOduration=34.585456051 podStartE2EDuration="34.585456051s" podCreationTimestamp="2025-09-13 00:15:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:15:53.565446229 +0000 UTC m=+42.260082993" watchObservedRunningTime="2025-09-13 00:15:53.585456051 +0000 UTC m=+42.280092815" Sep 13 00:15:53.587000 audit[4109]: NETFILTER_CFG table=nat:116 family=2 entries=46 op=nft_register_rule pid=4109 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:53.587000 audit[4109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffff3138d0 a2=0 a3=1 items=0 ppid=2073 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:53.587000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:53.956173 systemd-networkd[1043]: cali51d1700c870: Gained IPv6LL Sep 13 00:15:54.148232 systemd-networkd[1043]: calie8f6550a89a: Gained IPv6LL Sep 13 00:15:54.382140 env[1216]: time="2025-09-13T00:15:54.382010090Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:54.383934 env[1216]: time="2025-09-13T00:15:54.383869921Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:54.385892 env[1216]: time="2025-09-13T00:15:54.385855392Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:54.387453 env[1216]: time="2025-09-13T00:15:54.387419424Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:54.387744 env[1216]: time="2025-09-13T00:15:54.387706583Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 13 00:15:54.390543 env[1216]: time="2025-09-13T00:15:54.390027332Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 00:15:54.392316 env[1216]: time="2025-09-13T00:15:54.392278401Z" level=info msg="CreateContainer within sandbox \"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 13 00:15:54.414136 env[1216]: time="2025-09-13T00:15:54.414099217Z" level=info msg="CreateContainer within sandbox \"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"9f90e9f403413ca73bb4e1de9058892996c5e2fb95211cd66259b8be11df2e0c\"" Sep 13 00:15:54.414769 env[1216]: time="2025-09-13T00:15:54.414744014Z" level=info msg="StartContainer for \"9f90e9f403413ca73bb4e1de9058892996c5e2fb95211cd66259b8be11df2e0c\"" Sep 13 00:15:54.418209 env[1216]: time="2025-09-13T00:15:54.418161158Z" level=info msg="StopPodSandbox for \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\"" Sep 13 00:15:54.444659 systemd[1]: Started cri-containerd-9f90e9f403413ca73bb4e1de9058892996c5e2fb95211cd66259b8be11df2e0c.scope. Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3934 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966393065396634303334313363613733626234653164653930353838 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit: BPF prog-id=194 op=LOAD Sep 13 00:15:54.469000 audit[4140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3934 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966393065396634303334313363613733626234653164653930353838 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.469000 audit: BPF prog-id=195 op=LOAD Sep 13 00:15:54.469000 audit[4140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3934 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966393065396634303334313363613733626234653164653930353838 Sep 13 00:15:54.470000 audit: BPF prog-id=195 op=UNLOAD Sep 13 00:15:54.470000 audit: BPF prog-id=194 op=UNLOAD Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.470000 audit: BPF prog-id=196 op=LOAD Sep 13 00:15:54.470000 audit[4140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3934 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966393065396634303334313363613733626234653164653930353838 Sep 13 00:15:54.517814 env[1216]: time="2025-09-13T00:15:54.517765204Z" level=info msg="StartContainer for \"9f90e9f403413ca73bb4e1de9058892996c5e2fb95211cd66259b8be11df2e0c\" returns successfully" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.473 [INFO][4135] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.473 [INFO][4135] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" iface="eth0" netns="/var/run/netns/cni-579f6e41-4385-2235-59db-9551feb1ae1f" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.474 [INFO][4135] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" iface="eth0" netns="/var/run/netns/cni-579f6e41-4385-2235-59db-9551feb1ae1f" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.474 [INFO][4135] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" iface="eth0" netns="/var/run/netns/cni-579f6e41-4385-2235-59db-9551feb1ae1f" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.474 [INFO][4135] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.474 [INFO][4135] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.499 [INFO][4161] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.499 [INFO][4161] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.499 [INFO][4161] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.511 [WARNING][4161] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.511 [INFO][4161] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.514 [INFO][4161] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:54.518480 env[1216]: 2025-09-13 00:15:54.515 [INFO][4135] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:15:54.520662 env[1216]: time="2025-09-13T00:15:54.520633790Z" level=info msg="TearDown network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\" successfully" Sep 13 00:15:54.520709 env[1216]: time="2025-09-13T00:15:54.520663070Z" level=info msg="StopPodSandbox for \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\" returns successfully" Sep 13 00:15:54.521952 env[1216]: time="2025-09-13T00:15:54.521854384Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7d86d86d7d-hs529,Uid:ca7eba97-c05f-4e81-9ea9-2e4465d49b2a,Namespace:calico-system,Attempt:1,}" Sep 13 00:15:54.547952 kubelet[1957]: E0913 00:15:54.547906 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:54.548351 kubelet[1957]: E0913 00:15:54.548296 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:54.596199 systemd-networkd[1043]: cali083b34c36d3: Gained IPv6LL Sep 13 00:15:54.607000 audit[4202]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4202 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:54.607000 audit[4202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd6e64ae0 a2=0 a3=1 items=0 ppid=2073 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:54.623000 audit[4202]: NETFILTER_CFG table=nat:118 family=2 entries=58 op=nft_register_chain pid=4202 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:54.623000 audit[4202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffd6e64ae0 a2=0 a3=1 items=0 ppid=2073 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.623000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:54.635220 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:15:54.635338 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0bbec764a7b: link becomes ready Sep 13 00:15:54.636454 systemd-networkd[1043]: cali0bbec764a7b: Link UP Sep 13 00:15:54.636597 systemd-networkd[1043]: cali0bbec764a7b: Gained carrier Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.569 [INFO][4178] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0 calico-kube-controllers-7d86d86d7d- calico-system ca7eba97-c05f-4e81-9ea9-2e4465d49b2a 979 0 2025-09-13 00:15:32 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7d86d86d7d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7d86d86d7d-hs529 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali0bbec764a7b [] [] }} ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.569 [INFO][4178] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.590 [INFO][4193] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" HandleID="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.590 [INFO][4193] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" HandleID="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3050), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7d86d86d7d-hs529", "timestamp":"2025-09-13 00:15:54.590694417 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.590 [INFO][4193] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.590 [INFO][4193] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.590 [INFO][4193] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.600 [INFO][4193] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.607 [INFO][4193] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.611 [INFO][4193] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.614 [INFO][4193] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.616 [INFO][4193] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.617 [INFO][4193] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.619 [INFO][4193] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.624 [INFO][4193] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.630 [INFO][4193] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.630 [INFO][4193] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" host="localhost" Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.630 [INFO][4193] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:54.654091 env[1216]: 2025-09-13 00:15:54.630 [INFO][4193] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" HandleID="k8s-pod-network.aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.654684 env[1216]: 2025-09-13 00:15:54.632 [INFO][4178] cni-plugin/k8s.go 418: Populated endpoint ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0", GenerateName:"calico-kube-controllers-7d86d86d7d-", Namespace:"calico-system", SelfLink:"", UID:"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7d86d86d7d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7d86d86d7d-hs529", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0bbec764a7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:54.654684 env[1216]: 2025-09-13 00:15:54.632 [INFO][4178] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.654684 env[1216]: 2025-09-13 00:15:54.632 [INFO][4178] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0bbec764a7b ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.654684 env[1216]: 2025-09-13 00:15:54.638 [INFO][4178] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.654684 env[1216]: 2025-09-13 00:15:54.638 [INFO][4178] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0", GenerateName:"calico-kube-controllers-7d86d86d7d-", Namespace:"calico-system", SelfLink:"", UID:"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7d86d86d7d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f", Pod:"calico-kube-controllers-7d86d86d7d-hs529", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0bbec764a7b", MAC:"26:6b:fa:d1:70:61", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:54.654684 env[1216]: 2025-09-13 00:15:54.650 [INFO][4178] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f" Namespace="calico-system" Pod="calico-kube-controllers-7d86d86d7d-hs529" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:15:54.661000 audit[4212]: NETFILTER_CFG table=filter:119 family=2 entries=58 op=nft_register_chain pid=4212 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:54.661000 audit[4212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27180 a0=3 a1=ffffc43430c0 a2=0 a3=ffff8bcf9fa8 items=0 ppid=3354 pid=4212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.661000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:54.669383 env[1216]: time="2025-09-13T00:15:54.669181243Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:54.669383 env[1216]: time="2025-09-13T00:15:54.669218283Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:54.669383 env[1216]: time="2025-09-13T00:15:54.669229043Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:54.669573 env[1216]: time="2025-09-13T00:15:54.669503401Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f pid=4221 runtime=io.containerd.runc.v2 Sep 13 00:15:54.684089 systemd[1]: Started cri-containerd-aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f.scope. Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.703000 audit: BPF prog-id=197 op=LOAD Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4221 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161636135333961616234366434323839663162306463623436326530 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4221 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161636135333961616234366434323839663162306463623436326530 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit: BPF prog-id=198 op=LOAD Sep 13 00:15:54.705000 audit[4231]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4221 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161636135333961616234366434323839663162306463623436326530 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit: BPF prog-id=199 op=LOAD Sep 13 00:15:54.705000 audit[4231]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4221 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161636135333961616234366434323839663162306463623436326530 Sep 13 00:15:54.705000 audit: BPF prog-id=199 op=UNLOAD Sep 13 00:15:54.705000 audit: BPF prog-id=198 op=UNLOAD Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:54.705000 audit: BPF prog-id=200 op=LOAD Sep 13 00:15:54.705000 audit[4231]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4221 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:54.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161636135333961616234366434323839663162306463623436326530 Sep 13 00:15:54.710746 systemd[1]: run-netns-cni\x2d579f6e41\x2d4385\x2d2235\x2d59db\x2d9551feb1ae1f.mount: Deactivated successfully. Sep 13 00:15:54.711039 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:54.723644 env[1216]: time="2025-09-13T00:15:54.723587264Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7d86d86d7d-hs529,Uid:ca7eba97-c05f-4e81-9ea9-2e4465d49b2a,Namespace:calico-system,Attempt:1,} returns sandbox id \"aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f\"" Sep 13 00:15:55.418705 env[1216]: time="2025-09-13T00:15:55.418666279Z" level=info msg="StopPodSandbox for \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\"" Sep 13 00:15:55.419462 env[1216]: time="2025-09-13T00:15:55.419435755Z" level=info msg="StopPodSandbox for \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\"" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.471 [INFO][4273] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.472 [INFO][4273] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" iface="eth0" netns="/var/run/netns/cni-000d887e-24a9-b5ef-d1ed-1cc1cc9a900d" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.472 [INFO][4273] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" iface="eth0" netns="/var/run/netns/cni-000d887e-24a9-b5ef-d1ed-1cc1cc9a900d" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.475 [INFO][4273] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" iface="eth0" netns="/var/run/netns/cni-000d887e-24a9-b5ef-d1ed-1cc1cc9a900d" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.475 [INFO][4273] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.475 [INFO][4273] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.492 [INFO][4296] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.492 [INFO][4296] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.492 [INFO][4296] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.501 [WARNING][4296] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.501 [INFO][4296] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.503 [INFO][4296] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:55.510596 env[1216]: 2025-09-13 00:15:55.509 [INFO][4273] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:15:55.513923 env[1216]: time="2025-09-13T00:15:55.513195239Z" level=info msg="TearDown network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\" successfully" Sep 13 00:15:55.513923 env[1216]: time="2025-09-13T00:15:55.513239999Z" level=info msg="StopPodSandbox for \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\" returns successfully" Sep 13 00:15:55.513923 env[1216]: time="2025-09-13T00:15:55.513821756Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-pv25h,Uid:a08d3783-674a-4ee3-9a17-76ed3e2c4bb6,Namespace:calico-system,Attempt:1,}" Sep 13 00:15:55.515251 systemd[1]: run-netns-cni\x2d000d887e\x2d24a9\x2db5ef\x2dd1ed\x2d1cc1cc9a900d.mount: Deactivated successfully. Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.475 [INFO][4282] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.475 [INFO][4282] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" iface="eth0" netns="/var/run/netns/cni-9fb52d8f-3111-cd91-3e9f-c9d6b6aef709" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.475 [INFO][4282] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" iface="eth0" netns="/var/run/netns/cni-9fb52d8f-3111-cd91-3e9f-c9d6b6aef709" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.475 [INFO][4282] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" iface="eth0" netns="/var/run/netns/cni-9fb52d8f-3111-cd91-3e9f-c9d6b6aef709" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.475 [INFO][4282] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.475 [INFO][4282] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.497 [INFO][4295] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.497 [INFO][4295] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.503 [INFO][4295] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.514 [WARNING][4295] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.514 [INFO][4295] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.516 [INFO][4295] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:55.520384 env[1216]: 2025-09-13 00:15:55.518 [INFO][4282] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:15:55.522952 env[1216]: time="2025-09-13T00:15:55.522919994Z" level=info msg="TearDown network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\" successfully" Sep 13 00:15:55.523054 env[1216]: time="2025-09-13T00:15:55.523037473Z" level=info msg="StopPodSandbox for \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\" returns successfully" Sep 13 00:15:55.523784 env[1216]: time="2025-09-13T00:15:55.523757310Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-mfc8r,Uid:5c6f181e-9298-4d6e-9a7b-b66e7e550b17,Namespace:calico-apiserver,Attempt:1,}" Sep 13 00:15:55.524737 systemd[1]: run-netns-cni\x2d9fb52d8f\x2d3111\x2dcd91\x2d3e9f\x2dc9d6b6aef709.mount: Deactivated successfully. Sep 13 00:15:55.553015 kubelet[1957]: E0913 00:15:55.552980 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:15:55.644600 systemd-networkd[1043]: cali63b6380abb2: Link UP Sep 13 00:15:55.645468 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:15:55.645528 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali63b6380abb2: link becomes ready Sep 13 00:15:55.645689 systemd-networkd[1043]: cali63b6380abb2: Gained carrier Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.568 [INFO][4311] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--7988f88666--pv25h-eth0 goldmane-7988f88666- calico-system a08d3783-674a-4ee3-9a17-76ed3e2c4bb6 995 0 2025-09-13 00:15:32 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:7988f88666 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-7988f88666-pv25h eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali63b6380abb2 [] [] }} ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.568 [INFO][4311] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.593 [INFO][4341] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" HandleID="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.593 [INFO][4341] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" HandleID="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c580), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-7988f88666-pv25h", "timestamp":"2025-09-13 00:15:55.593755024 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.594 [INFO][4341] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.594 [INFO][4341] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.594 [INFO][4341] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.604 [INFO][4341] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.609 [INFO][4341] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.616 [INFO][4341] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.618 [INFO][4341] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.622 [INFO][4341] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.622 [INFO][4341] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.623 [INFO][4341] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.627 [INFO][4341] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.637 [INFO][4341] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.637 [INFO][4341] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" host="localhost" Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.637 [INFO][4341] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:55.659928 env[1216]: 2025-09-13 00:15:55.637 [INFO][4341] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" HandleID="k8s-pod-network.432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.660733 env[1216]: 2025-09-13 00:15:55.641 [INFO][4311] cni-plugin/k8s.go 418: Populated endpoint ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--pv25h-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-7988f88666-pv25h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b6380abb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:55.660733 env[1216]: 2025-09-13 00:15:55.641 [INFO][4311] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.660733 env[1216]: 2025-09-13 00:15:55.641 [INFO][4311] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali63b6380abb2 ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.660733 env[1216]: 2025-09-13 00:15:55.645 [INFO][4311] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.660733 env[1216]: 2025-09-13 00:15:55.645 [INFO][4311] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--pv25h-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd", Pod:"goldmane-7988f88666-pv25h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b6380abb2", MAC:"52:4f:1e:c2:17:7c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:55.660733 env[1216]: 2025-09-13 00:15:55.655 [INFO][4311] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd" Namespace="calico-system" Pod="goldmane-7988f88666-pv25h" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:15:55.669000 audit[4369]: NETFILTER_CFG table=filter:120 family=2 entries=60 op=nft_register_chain pid=4369 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:55.669000 audit[4369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29916 a0=3 a1=ffffdc252ed0 a2=0 a3=ffff84dd3fa8 items=0 ppid=3354 pid=4369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.669000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:55.678868 env[1216]: time="2025-09-13T00:15:55.678808948Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:55.679001 env[1216]: time="2025-09-13T00:15:55.678848308Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:55.679001 env[1216]: time="2025-09-13T00:15:55.678859028Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:55.679001 env[1216]: time="2025-09-13T00:15:55.678983187Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd pid=4377 runtime=io.containerd.runc.v2 Sep 13 00:15:55.690472 systemd[1]: Started cri-containerd-432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd.scope. Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit: BPF prog-id=201 op=LOAD Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4377 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323135393233343135326239393732643936313630363334306134 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4377 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323135393233343135326239393732643936313630363334306134 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.718000 audit: BPF prog-id=202 op=LOAD Sep 13 00:15:55.718000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4377 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323135393233343135326239393732643936313630363334306134 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit: BPF prog-id=203 op=LOAD Sep 13 00:15:55.719000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4377 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323135393233343135326239393732643936313630363334306134 Sep 13 00:15:55.719000 audit: BPF prog-id=203 op=UNLOAD Sep 13 00:15:55.719000 audit: BPF prog-id=202 op=UNLOAD Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.719000 audit: BPF prog-id=204 op=LOAD Sep 13 00:15:55.719000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4377 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323135393233343135326239393732643936313630363334306134 Sep 13 00:15:55.721058 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:55.750274 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali935fad99f4a: link becomes ready Sep 13 00:15:55.750348 env[1216]: time="2025-09-13T00:15:55.750173056Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-pv25h,Uid:a08d3783-674a-4ee3-9a17-76ed3e2c4bb6,Namespace:calico-system,Attempt:1,} returns sandbox id \"432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd\"" Sep 13 00:15:55.749728 systemd-networkd[1043]: cali935fad99f4a: Link UP Sep 13 00:15:55.749870 systemd-networkd[1043]: cali935fad99f4a: Gained carrier Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.582 [INFO][4322] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0 calico-apiserver-8497d5cc75- calico-apiserver 5c6f181e-9298-4d6e-9a7b-b66e7e550b17 997 0 2025-09-13 00:15:27 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:8497d5cc75 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-8497d5cc75-mfc8r eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali935fad99f4a [] [] }} ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.582 [INFO][4322] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.619 [INFO][4349] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" HandleID="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.619 [INFO][4349] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" HandleID="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000582ae0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-8497d5cc75-mfc8r", "timestamp":"2025-09-13 00:15:55.619315985 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.619 [INFO][4349] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.637 [INFO][4349] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.638 [INFO][4349] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.704 [INFO][4349] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.717 [INFO][4349] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.722 [INFO][4349] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.725 [INFO][4349] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.727 [INFO][4349] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.727 [INFO][4349] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.730 [INFO][4349] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663 Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.735 [INFO][4349] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.742 [INFO][4349] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.742 [INFO][4349] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" host="localhost" Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.742 [INFO][4349] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:15:55.770863 env[1216]: 2025-09-13 00:15:55.742 [INFO][4349] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" HandleID="k8s-pod-network.e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.771604 env[1216]: 2025-09-13 00:15:55.747 [INFO][4322] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"5c6f181e-9298-4d6e-9a7b-b66e7e550b17", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-8497d5cc75-mfc8r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali935fad99f4a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:55.771604 env[1216]: 2025-09-13 00:15:55.747 [INFO][4322] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.771604 env[1216]: 2025-09-13 00:15:55.747 [INFO][4322] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali935fad99f4a ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.771604 env[1216]: 2025-09-13 00:15:55.750 [INFO][4322] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.771604 env[1216]: 2025-09-13 00:15:55.751 [INFO][4322] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"5c6f181e-9298-4d6e-9a7b-b66e7e550b17", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663", Pod:"calico-apiserver-8497d5cc75-mfc8r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali935fad99f4a", MAC:"7a:b1:d6:41:28:7e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:15:55.771604 env[1216]: 2025-09-13 00:15:55.762 [INFO][4322] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663" Namespace="calico-apiserver" Pod="calico-apiserver-8497d5cc75-mfc8r" WorkloadEndpoint="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:15:55.774000 audit[4418]: NETFILTER_CFG table=filter:121 family=2 entries=57 op=nft_register_chain pid=4418 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:15:55.774000 audit[4418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27812 a0=3 a1=fffffd0ce460 a2=0 a3=ffff952acfa8 items=0 ppid=3354 pid=4418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.774000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:15:55.788130 env[1216]: time="2025-09-13T00:15:55.788054320Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:15:55.788130 env[1216]: time="2025-09-13T00:15:55.788107079Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:15:55.788130 env[1216]: time="2025-09-13T00:15:55.788117759Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:15:55.788351 env[1216]: time="2025-09-13T00:15:55.788244599Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663 pid=4427 runtime=io.containerd.runc.v2 Sep 13 00:15:55.809000 systemd[1]: Started cri-containerd-e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663.scope. Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit: BPF prog-id=205 op=LOAD Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4427 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303732656230353337663031393262353161373832303837613639 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4427 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303732656230353337663031393262353161373832303837613639 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.832000 audit: BPF prog-id=206 op=LOAD Sep 13 00:15:55.832000 audit[4436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4427 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303732656230353337663031393262353161373832303837613639 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit: BPF prog-id=207 op=LOAD Sep 13 00:15:55.833000 audit[4436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4427 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303732656230353337663031393262353161373832303837613639 Sep 13 00:15:55.833000 audit: BPF prog-id=207 op=UNLOAD Sep 13 00:15:55.833000 audit: BPF prog-id=206 op=UNLOAD Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:55.833000 audit: BPF prog-id=208 op=LOAD Sep 13 00:15:55.833000 audit[4436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4427 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:55.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303732656230353337663031393262353161373832303837613639 Sep 13 00:15:55.835715 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 13 00:15:55.864934 env[1216]: time="2025-09-13T00:15:55.864836162Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8497d5cc75-mfc8r,Uid:5c6f181e-9298-4d6e-9a7b-b66e7e550b17,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663\"" Sep 13 00:15:56.452216 systemd-networkd[1043]: cali0bbec764a7b: Gained IPv6LL Sep 13 00:15:56.876551 env[1216]: time="2025-09-13T00:15:56.876440663Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:56.877869 env[1216]: time="2025-09-13T00:15:56.877835776Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:56.879728 env[1216]: time="2025-09-13T00:15:56.879672728Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:56.880920 env[1216]: time="2025-09-13T00:15:56.880890202Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:56.881442 env[1216]: time="2025-09-13T00:15:56.881414920Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 00:15:56.884161 env[1216]: time="2025-09-13T00:15:56.883287391Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 13 00:15:56.885565 env[1216]: time="2025-09-13T00:15:56.885534021Z" level=info msg="CreateContainer within sandbox \"6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 00:15:56.899315 env[1216]: time="2025-09-13T00:15:56.897819925Z" level=info msg="CreateContainer within sandbox \"6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"b3f2858ef6d3f91c48a339f375d9b3967ab09d7a9405956ffe95b6be97f69a0a\"" Sep 13 00:15:56.899435 env[1216]: time="2025-09-13T00:15:56.899405598Z" level=info msg="StartContainer for \"b3f2858ef6d3f91c48a339f375d9b3967ab09d7a9405956ffe95b6be97f69a0a\"" Sep 13 00:15:56.922710 systemd[1]: Started cri-containerd-b3f2858ef6d3f91c48a339f375d9b3967ab09d7a9405956ffe95b6be97f69a0a.scope. Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948533 kernel: kauditd_printk_skb: 480 callbacks suppressed Sep 13 00:15:56.948585 kernel: audit: type=1400 audit(1757722556.946:1360): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.952672 kernel: audit: type=1400 audit(1757722556.946:1361): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.952726 kernel: audit: type=1400 audit(1757722556.946:1362): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.957487 kernel: audit: type=1400 audit(1757722556.946:1363): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.957560 kernel: audit: type=1400 audit(1757722556.946:1364): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.961512 kernel: audit: type=1400 audit(1757722556.946:1365): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.961567 kernel: audit: type=1400 audit(1757722556.946:1366): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.965887 kernel: audit: type=1400 audit(1757722556.946:1367): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.965981 kernel: audit: type=1400 audit(1757722556.946:1368): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.970015 kernel: audit: type=1400 audit(1757722556.948:1369): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit: BPF prog-id=209 op=LOAD Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4037 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:56.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233663238353865663664336639316334386133333966333735643962 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4037 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:56.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233663238353865663664336639316334386133333966333735643962 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.948000 audit: BPF prog-id=210 op=LOAD Sep 13 00:15:56.948000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4037 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:56.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233663238353865663664336639316334386133333966333735643962 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.949000 audit: BPF prog-id=211 op=LOAD Sep 13 00:15:56.949000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4037 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:56.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233663238353865663664336639316334386133333966333735643962 Sep 13 00:15:56.951000 audit: BPF prog-id=211 op=UNLOAD Sep 13 00:15:56.951000 audit: BPF prog-id=210 op=UNLOAD Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:56.951000 audit: BPF prog-id=212 op=LOAD Sep 13 00:15:56.951000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4037 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:56.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233663238353865663664336639316334386133333966333735643962 Sep 13 00:15:56.992472 env[1216]: time="2025-09-13T00:15:56.992407575Z" level=info msg="StartContainer for \"b3f2858ef6d3f91c48a339f375d9b3967ab09d7a9405956ffe95b6be97f69a0a\" returns successfully" Sep 13 00:15:57.220182 systemd-networkd[1043]: cali935fad99f4a: Gained IPv6LL Sep 13 00:15:57.268273 kubelet[1957]: I0913 00:15:57.268232 1957 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:15:57.367051 systemd[1]: Started sshd@7-10.0.0.69:22-10.0.0.1:47886.service. Sep 13 00:15:57.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.69:22-10.0.0.1:47886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:57.421000 audit[4527]: USER_ACCT pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:57.422468 sshd[4527]: Accepted publickey for core from 10.0.0.1 port 47886 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:15:57.428968 sshd[4527]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:15:57.426000 audit[4527]: CRED_ACQ pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:57.426000 audit[4527]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7604ec0 a2=3 a3=1 items=0 ppid=1 pid=4527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:57.426000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:15:57.433751 systemd-logind[1203]: New session 8 of user core. Sep 13 00:15:57.437669 systemd[1]: Started session-8.scope. Sep 13 00:15:57.447000 audit[4527]: USER_START pid=4527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:57.449000 audit[4541]: CRED_ACQ pid=4541 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:57.579049 kubelet[1957]: I0913 00:15:57.577599 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-8497d5cc75-tg4qf" podStartSLOduration=26.719632797 podStartE2EDuration="30.577582285s" podCreationTimestamp="2025-09-13 00:15:27 +0000 UTC" firstStartedPulling="2025-09-13 00:15:53.024529507 +0000 UTC m=+41.719166271" lastFinishedPulling="2025-09-13 00:15:56.882478995 +0000 UTC m=+45.577115759" observedRunningTime="2025-09-13 00:15:57.576629689 +0000 UTC m=+46.271266453" watchObservedRunningTime="2025-09-13 00:15:57.577582285 +0000 UTC m=+46.272219049" Sep 13 00:15:57.643000 audit[4563]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4563 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:57.643000 audit[4563]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffdf059310 a2=0 a3=1 items=0 ppid=2073 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:57.643000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:57.651000 audit[4563]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4563 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:57.651000 audit[4563]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffdf059310 a2=0 a3=1 items=0 ppid=2073 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:57.651000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:57.668220 systemd-networkd[1043]: cali63b6380abb2: Gained IPv6LL Sep 13 00:15:57.678837 sshd[4527]: pam_unix(sshd:session): session closed for user core Sep 13 00:15:57.678000 audit[4527]: USER_END pid=4527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:57.678000 audit[4527]: CRED_DISP pid=4527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:15:57.681301 systemd[1]: sshd@7-10.0.0.69:22-10.0.0.1:47886.service: Deactivated successfully. Sep 13 00:15:57.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.69:22-10.0.0.1:47886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:15:57.682053 systemd[1]: session-8.scope: Deactivated successfully. Sep 13 00:15:57.682520 systemd-logind[1203]: Session 8 logged out. Waiting for processes to exit. Sep 13 00:15:57.683170 systemd-logind[1203]: Removed session 8. Sep 13 00:15:58.063000 audit[4479]: AVC avc: denied { watch } for pid=4479 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_15_40.1154852104/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c608,c1002 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c608,c1002 tclass=file permissive=0 Sep 13 00:15:58.063000 audit[4479]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ef7ea0 a2=fc6 a3=0 items=0 ppid=4037 pid=4479 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c608,c1002 key=(null) Sep 13 00:15:58.063000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:15:58.117000 audit[4567]: NETFILTER_CFG table=filter:124 family=2 entries=11 op=nft_register_rule pid=4567 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:58.117000 audit[4567]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffbbd8030 a2=0 a3=1 items=0 ppid=2073 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:58.117000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:58.127000 audit[4567]: NETFILTER_CFG table=nat:125 family=2 entries=29 op=nft_register_chain pid=4567 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:15:58.127000 audit[4567]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffffbbd8030 a2=0 a3=1 items=0 ppid=2073 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:58.127000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:15:58.434490 env[1216]: time="2025-09-13T00:15:58.434447263Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:58.436800 env[1216]: time="2025-09-13T00:15:58.436770613Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:58.439383 env[1216]: time="2025-09-13T00:15:58.439346362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:58.442585 env[1216]: time="2025-09-13T00:15:58.442555268Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:15:58.443159 env[1216]: time="2025-09-13T00:15:58.443134465Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 13 00:15:58.444456 env[1216]: time="2025-09-13T00:15:58.444395980Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 13 00:15:58.448532 env[1216]: time="2025-09-13T00:15:58.448497242Z" level=info msg="CreateContainer within sandbox \"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 13 00:15:58.470346 env[1216]: time="2025-09-13T00:15:58.470290266Z" level=info msg="CreateContainer within sandbox \"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"5beef5912d9dadc613ace9d030cd19521369437d19ed8cac9b9b854f2774c7ce\"" Sep 13 00:15:58.471117 env[1216]: time="2025-09-13T00:15:58.471090263Z" level=info msg="StartContainer for \"5beef5912d9dadc613ace9d030cd19521369437d19ed8cac9b9b854f2774c7ce\"" Sep 13 00:15:58.506288 systemd[1]: Started cri-containerd-5beef5912d9dadc613ace9d030cd19521369437d19ed8cac9b9b854f2774c7ce.scope. Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3934 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:58.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656566353931326439646164633631336163653964303330636431 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit: BPF prog-id=213 op=LOAD Sep 13 00:15:58.525000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3934 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:58.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656566353931326439646164633631336163653964303330636431 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit: BPF prog-id=214 op=LOAD Sep 13 00:15:58.525000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3934 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:58.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656566353931326439646164633631336163653964303330636431 Sep 13 00:15:58.525000 audit: BPF prog-id=214 op=UNLOAD Sep 13 00:15:58.525000 audit: BPF prog-id=213 op=UNLOAD Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:15:58.525000 audit: BPF prog-id=215 op=LOAD Sep 13 00:15:58.525000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3934 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:15:58.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656566353931326439646164633631336163653964303330636431 Sep 13 00:15:58.539708 env[1216]: time="2025-09-13T00:15:58.539655483Z" level=info msg="StartContainer for \"5beef5912d9dadc613ace9d030cd19521369437d19ed8cac9b9b854f2774c7ce\" returns successfully" Sep 13 00:15:59.473686 kubelet[1957]: I0913 00:15:59.473637 1957 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 13 00:15:59.474515 kubelet[1957]: I0913 00:15:59.474492 1957 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 13 00:16:00.723288 env[1216]: time="2025-09-13T00:16:00.723235262Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:00.725479 env[1216]: time="2025-09-13T00:16:00.725447532Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:00.727558 env[1216]: time="2025-09-13T00:16:00.727515124Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:00.729617 env[1216]: time="2025-09-13T00:16:00.729587515Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:00.730133 env[1216]: time="2025-09-13T00:16:00.730105473Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 13 00:16:00.731809 env[1216]: time="2025-09-13T00:16:00.731777026Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 13 00:16:00.743331 env[1216]: time="2025-09-13T00:16:00.743289057Z" level=info msg="CreateContainer within sandbox \"aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 13 00:16:00.757109 env[1216]: time="2025-09-13T00:16:00.755947884Z" level=info msg="CreateContainer within sandbox \"aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"ce4520b1b372a605e1c696754b76ec9ddf15d0c15c6c00d2059f56491c0e342e\"" Sep 13 00:16:00.757955 env[1216]: time="2025-09-13T00:16:00.757890476Z" level=info msg="StartContainer for \"ce4520b1b372a605e1c696754b76ec9ddf15d0c15c6c00d2059f56491c0e342e\"" Sep 13 00:16:00.773037 systemd[1]: Started cri-containerd-ce4520b1b372a605e1c696754b76ec9ddf15d0c15c6c00d2059f56491c0e342e.scope. Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.793000 audit: BPF prog-id=216 op=LOAD Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4221 pid=4625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:00.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365343532306231623337326136303565316336393637353462373665 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4221 pid=4625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:00.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365343532306231623337326136303565316336393637353462373665 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit: BPF prog-id=217 op=LOAD Sep 13 00:16:00.794000 audit[4625]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4221 pid=4625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:00.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365343532306231623337326136303565316336393637353462373665 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit: BPF prog-id=218 op=LOAD Sep 13 00:16:00.794000 audit[4625]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4221 pid=4625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:00.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365343532306231623337326136303565316336393637353462373665 Sep 13 00:16:00.794000 audit: BPF prog-id=218 op=UNLOAD Sep 13 00:16:00.794000 audit: BPF prog-id=217 op=UNLOAD Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { perfmon } for pid=4625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit[4625]: AVC avc: denied { bpf } for pid=4625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:00.794000 audit: BPF prog-id=219 op=LOAD Sep 13 00:16:00.794000 audit[4625]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4221 pid=4625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:00.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365343532306231623337326136303565316336393637353462373665 Sep 13 00:16:00.821317 env[1216]: time="2025-09-13T00:16:00.821266929Z" level=info msg="StartContainer for \"ce4520b1b372a605e1c696754b76ec9ddf15d0c15c6c00d2059f56491c0e342e\" returns successfully" Sep 13 00:16:01.588737 kubelet[1957]: I0913 00:16:01.588675 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-g5255" podStartSLOduration=23.957155085 podStartE2EDuration="29.588660943s" podCreationTimestamp="2025-09-13 00:15:32 +0000 UTC" firstStartedPulling="2025-09-13 00:15:52.812385324 +0000 UTC m=+41.507022088" lastFinishedPulling="2025-09-13 00:15:58.443891222 +0000 UTC m=+47.138527946" observedRunningTime="2025-09-13 00:15:58.581269782 +0000 UTC m=+47.275906546" watchObservedRunningTime="2025-09-13 00:16:01.588660943 +0000 UTC m=+50.283297667" Sep 13 00:16:01.648169 kubelet[1957]: I0913 00:16:01.648098 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7d86d86d7d-hs529" podStartSLOduration=23.642105964 podStartE2EDuration="29.648063137s" podCreationTimestamp="2025-09-13 00:15:32 +0000 UTC" firstStartedPulling="2025-09-13 00:15:54.724910937 +0000 UTC m=+43.419547701" lastFinishedPulling="2025-09-13 00:16:00.73086811 +0000 UTC m=+49.425504874" observedRunningTime="2025-09-13 00:16:01.589683378 +0000 UTC m=+50.284320142" watchObservedRunningTime="2025-09-13 00:16:01.648063137 +0000 UTC m=+50.342699901" Sep 13 00:16:02.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.69:22-10.0.0.1:46946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:02.684738 systemd[1]: Started sshd@8-10.0.0.69:22-10.0.0.1:46946.service. Sep 13 00:16:02.685657 kernel: kauditd_printk_skb: 173 callbacks suppressed Sep 13 00:16:02.685711 kernel: audit: type=1130 audit(1757722562.683:1416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.69:22-10.0.0.1:46946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:02.742000 audit[4690]: USER_ACCT pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.743597 sshd[4690]: Accepted publickey for core from 10.0.0.1 port 46946 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:02.745281 sshd[4690]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:02.743000 audit[4690]: CRED_ACQ pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.748312 kernel: audit: type=1101 audit(1757722562.742:1417): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.748379 kernel: audit: type=1103 audit(1757722562.743:1418): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.748404 kernel: audit: type=1006 audit(1757722562.743:1419): pid=4690 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Sep 13 00:16:02.749790 kernel: audit: type=1300 audit(1757722562.743:1419): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd118dd80 a2=3 a3=1 items=0 ppid=1 pid=4690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:02.743000 audit[4690]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd118dd80 a2=3 a3=1 items=0 ppid=1 pid=4690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:02.743000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:02.753468 kernel: audit: type=1327 audit(1757722562.743:1419): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:02.756311 systemd-logind[1203]: New session 9 of user core. Sep 13 00:16:02.756830 systemd[1]: Started session-9.scope. Sep 13 00:16:02.759000 audit[4690]: USER_START pid=4690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.763000 audit[4692]: CRED_ACQ pid=4692 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.766718 kernel: audit: type=1105 audit(1757722562.759:1420): pid=4690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.766787 kernel: audit: type=1103 audit(1757722562.763:1421): pid=4692 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:02.976760 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2671370178.mount: Deactivated successfully. Sep 13 00:16:03.074792 sshd[4690]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:03.074000 audit[4690]: USER_END pid=4690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:03.080399 systemd[1]: sshd@8-10.0.0.69:22-10.0.0.1:46946.service: Deactivated successfully. Sep 13 00:16:03.081220 systemd[1]: session-9.scope: Deactivated successfully. Sep 13 00:16:03.074000 audit[4690]: CRED_DISP pid=4690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:03.081974 systemd-logind[1203]: Session 9 logged out. Waiting for processes to exit. Sep 13 00:16:03.084195 kernel: audit: type=1106 audit(1757722563.074:1422): pid=4690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:03.084271 kernel: audit: type=1104 audit(1757722563.074:1423): pid=4690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:03.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.69:22-10.0.0.1:46946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:03.084717 systemd-logind[1203]: Removed session 9. Sep 13 00:16:03.586001 env[1216]: time="2025-09-13T00:16:03.585945910Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.588531 env[1216]: time="2025-09-13T00:16:03.588486740Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.590180 env[1216]: time="2025-09-13T00:16:03.590139253Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.592440 env[1216]: time="2025-09-13T00:16:03.592370884Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.593518 env[1216]: time="2025-09-13T00:16:03.593009761Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 13 00:16:03.596153 env[1216]: time="2025-09-13T00:16:03.596121549Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 00:16:03.597613 env[1216]: time="2025-09-13T00:16:03.597573063Z" level=info msg="CreateContainer within sandbox \"432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 13 00:16:03.611528 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3177576381.mount: Deactivated successfully. Sep 13 00:16:03.615645 env[1216]: time="2025-09-13T00:16:03.615588231Z" level=info msg="CreateContainer within sandbox \"432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"b13ddce0112e66a5236432d3f1c588cdcb9c001fd36307e0a05177a86c886196\"" Sep 13 00:16:03.616477 env[1216]: time="2025-09-13T00:16:03.616438228Z" level=info msg="StartContainer for \"b13ddce0112e66a5236432d3f1c588cdcb9c001fd36307e0a05177a86c886196\"" Sep 13 00:16:03.649393 systemd[1]: Started cri-containerd-b13ddce0112e66a5236432d3f1c588cdcb9c001fd36307e0a05177a86c886196.scope. Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit: BPF prog-id=220 op=LOAD Sep 13 00:16:03.670000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4377 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231336464636530313132653636613532333634333264336631633538 Sep 13 00:16:03.670000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.670000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4377 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231336464636530313132653636613532333634333264336631633538 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit: BPF prog-id=221 op=LOAD Sep 13 00:16:03.671000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4377 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231336464636530313132653636613532333634333264336631633538 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit: BPF prog-id=222 op=LOAD Sep 13 00:16:03.671000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4377 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231336464636530313132653636613532333634333264336631633538 Sep 13 00:16:03.671000 audit: BPF prog-id=222 op=UNLOAD Sep 13 00:16:03.671000 audit: BPF prog-id=221 op=UNLOAD Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.671000 audit: BPF prog-id=223 op=LOAD Sep 13 00:16:03.671000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4377 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231336464636530313132653636613532333634333264336631633538 Sep 13 00:16:03.703383 env[1216]: time="2025-09-13T00:16:03.703273680Z" level=info msg="StartContainer for \"b13ddce0112e66a5236432d3f1c588cdcb9c001fd36307e0a05177a86c886196\" returns successfully" Sep 13 00:16:03.863724 env[1216]: time="2025-09-13T00:16:03.863567759Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.866354 env[1216]: time="2025-09-13T00:16:03.866317708Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.868148 env[1216]: time="2025-09-13T00:16:03.868109860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.869822 env[1216]: time="2025-09-13T00:16:03.869788214Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:16:03.870295 env[1216]: time="2025-09-13T00:16:03.870271452Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 00:16:03.872902 env[1216]: time="2025-09-13T00:16:03.872851401Z" level=info msg="CreateContainer within sandbox \"e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 00:16:03.886576 env[1216]: time="2025-09-13T00:16:03.886512907Z" level=info msg="CreateContainer within sandbox \"e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"d99ff3c1b7cf811d98621a464eeb87c723d290f140f2135bd5db5654589f05a3\"" Sep 13 00:16:03.887219 env[1216]: time="2025-09-13T00:16:03.887191504Z" level=info msg="StartContainer for \"d99ff3c1b7cf811d98621a464eeb87c723d290f140f2135bd5db5654589f05a3\"" Sep 13 00:16:03.909959 systemd[1]: Started cri-containerd-d99ff3c1b7cf811d98621a464eeb87c723d290f140f2135bd5db5654589f05a3.scope. Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.928000 audit: BPF prog-id=224 op=LOAD Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4427 pid=4749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439396666336331623763663831316439383632316134363465656238 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4427 pid=4749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439396666336331623763663831316439383632316134363465656238 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit: BPF prog-id=225 op=LOAD Sep 13 00:16:03.929000 audit[4749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4427 pid=4749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439396666336331623763663831316439383632316134363465656238 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit: BPF prog-id=226 op=LOAD Sep 13 00:16:03.929000 audit[4749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4427 pid=4749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439396666336331623763663831316439383632316134363465656238 Sep 13 00:16:03.929000 audit: BPF prog-id=226 op=UNLOAD Sep 13 00:16:03.929000 audit: BPF prog-id=225 op=UNLOAD Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { perfmon } for pid=4749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit[4749]: AVC avc: denied { bpf } for pid=4749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:16:03.929000 audit: BPF prog-id=227 op=LOAD Sep 13 00:16:03.929000 audit[4749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4427 pid=4749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:03.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439396666336331623763663831316439383632316134363465656238 Sep 13 00:16:03.953273 env[1216]: time="2025-09-13T00:16:03.953084800Z" level=info msg="StartContainer for \"d99ff3c1b7cf811d98621a464eeb87c723d290f140f2135bd5db5654589f05a3\" returns successfully" Sep 13 00:16:04.605713 systemd[1]: run-containerd-runc-k8s.io-b13ddce0112e66a5236432d3f1c588cdcb9c001fd36307e0a05177a86c886196-runc.TNRE9Q.mount: Deactivated successfully. Sep 13 00:16:04.610730 kubelet[1957]: I0913 00:16:04.610638 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-7988f88666-pv25h" podStartSLOduration=24.76959297 podStartE2EDuration="32.610618925s" podCreationTimestamp="2025-09-13 00:15:32 +0000 UTC" firstStartedPulling="2025-09-13 00:15:55.753358561 +0000 UTC m=+44.447995325" lastFinishedPulling="2025-09-13 00:16:03.594384516 +0000 UTC m=+52.289021280" observedRunningTime="2025-09-13 00:16:04.607961656 +0000 UTC m=+53.302598420" watchObservedRunningTime="2025-09-13 00:16:04.610618925 +0000 UTC m=+53.305255689" Sep 13 00:16:04.629107 kubelet[1957]: I0913 00:16:04.629030 1957 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-8497d5cc75-mfc8r" podStartSLOduration=29.623944641 podStartE2EDuration="37.629013333s" podCreationTimestamp="2025-09-13 00:15:27 +0000 UTC" firstStartedPulling="2025-09-13 00:15:55.866255636 +0000 UTC m=+44.560892400" lastFinishedPulling="2025-09-13 00:16:03.871324328 +0000 UTC m=+52.565961092" observedRunningTime="2025-09-13 00:16:04.628559215 +0000 UTC m=+53.323195979" watchObservedRunningTime="2025-09-13 00:16:04.629013333 +0000 UTC m=+53.323650097" Sep 13 00:16:04.645000 audit[4802]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=4802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:04.645000 audit[4802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffa77d110 a2=0 a3=1 items=0 ppid=2073 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:04.645000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:04.654000 audit[4802]: NETFILTER_CFG table=nat:127 family=2 entries=24 op=nft_register_rule pid=4802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:04.654000 audit[4802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=fffffa77d110 a2=0 a3=1 items=0 ppid=2073 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:04.654000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:04.677000 audit[4809]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=4809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:04.677000 audit[4809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdf675900 a2=0 a3=1 items=0 ppid=2073 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:04.677000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:04.681000 audit[4809]: NETFILTER_CFG table=nat:129 family=2 entries=32 op=nft_register_rule pid=4809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:04.681000 audit[4809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffdf675900 a2=0 a3=1 items=0 ppid=2073 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:04.681000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:05.542000 audit[4759]: AVC avc: denied { watch } for pid=4759 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_15_40.646533148/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c30,c399 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c30,c399 tclass=file permissive=0 Sep 13 00:16:05.542000 audit[4759]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40010de060 a2=fc6 a3=0 items=0 ppid=4427 pid=4759 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c30,c399 key=(null) Sep 13 00:16:05.542000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:16:05.591696 kubelet[1957]: I0913 00:16:05.591651 1957 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:16:08.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.69:22-10.0.0.1:46958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.079940 systemd[1]: Started sshd@9-10.0.0.69:22-10.0.0.1:46958.service. Sep 13 00:16:08.084136 kernel: kauditd_printk_skb: 130 callbacks suppressed Sep 13 00:16:08.084231 kernel: audit: type=1130 audit(1757722568.078:1466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.69:22-10.0.0.1:46958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.146000 audit[4835]: USER_ACCT pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.146885 sshd[4835]: Accepted publickey for core from 10.0.0.1 port 46958 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:08.148612 sshd[4835]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:08.147000 audit[4835]: CRED_ACQ pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.152216 kernel: audit: type=1101 audit(1757722568.146:1467): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.152298 kernel: audit: type=1103 audit(1757722568.147:1468): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.152610 kernel: audit: type=1006 audit(1757722568.147:1469): pid=4835 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 13 00:16:08.147000 audit[4835]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff816ad10 a2=3 a3=1 items=0 ppid=1 pid=4835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:08.157000 kernel: audit: type=1300 audit(1757722568.147:1469): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff816ad10 a2=3 a3=1 items=0 ppid=1 pid=4835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:08.147000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:08.157221 systemd[1]: Started session-10.scope. Sep 13 00:16:08.157862 systemd-logind[1203]: New session 10 of user core. Sep 13 00:16:08.158723 kernel: audit: type=1327 audit(1757722568.147:1469): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:08.164000 audit[4835]: USER_START pid=4835 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.168130 kernel: audit: type=1105 audit(1757722568.164:1470): pid=4835 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.168188 kernel: audit: type=1103 audit(1757722568.167:1471): pid=4837 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.167000 audit[4837]: CRED_ACQ pid=4837 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.320215 sshd[4835]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:08.324410 systemd[1]: Started sshd@10-10.0.0.69:22-10.0.0.1:46968.service. Sep 13 00:16:08.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.69:22-10.0.0.1:46968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.327662 systemd[1]: sshd@9-10.0.0.69:22-10.0.0.1:46958.service: Deactivated successfully. Sep 13 00:16:08.328356 systemd[1]: session-10.scope: Deactivated successfully. Sep 13 00:16:08.324000 audit[4835]: USER_END pid=4835 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.332367 kernel: audit: type=1130 audit(1757722568.322:1472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.69:22-10.0.0.1:46968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.332436 kernel: audit: type=1106 audit(1757722568.324:1473): pid=4835 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.324000 audit[4835]: CRED_DISP pid=4835 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.69:22-10.0.0.1:46958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.332884 systemd-logind[1203]: Session 10 logged out. Waiting for processes to exit. Sep 13 00:16:08.333554 systemd-logind[1203]: Removed session 10. Sep 13 00:16:08.368000 audit[4849]: USER_ACCT pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.369739 sshd[4849]: Accepted publickey for core from 10.0.0.1 port 46968 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:08.370000 audit[4849]: CRED_ACQ pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.370000 audit[4849]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9957c90 a2=3 a3=1 items=0 ppid=1 pid=4849 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:08.370000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:08.371596 sshd[4849]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:08.376185 systemd-logind[1203]: New session 11 of user core. Sep 13 00:16:08.376551 systemd[1]: Started session-11.scope. Sep 13 00:16:08.380000 audit[4849]: USER_START pid=4849 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.382000 audit[4852]: CRED_ACQ pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.572711 sshd[4849]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:08.573320 systemd[1]: Started sshd@11-10.0.0.69:22-10.0.0.1:46978.service. Sep 13 00:16:08.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.69:22-10.0.0.1:46978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.578000 audit[4849]: USER_END pid=4849 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.578000 audit[4849]: CRED_DISP pid=4849 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.581355 systemd[1]: sshd@10-10.0.0.69:22-10.0.0.1:46968.service: Deactivated successfully. Sep 13 00:16:08.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.69:22-10.0.0.1:46968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.582101 systemd[1]: session-11.scope: Deactivated successfully. Sep 13 00:16:08.585978 systemd-logind[1203]: Session 11 logged out. Waiting for processes to exit. Sep 13 00:16:08.589725 systemd-logind[1203]: Removed session 11. Sep 13 00:16:08.615000 audit[4862]: USER_ACCT pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.617103 sshd[4862]: Accepted publickey for core from 10.0.0.1 port 46978 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:08.616000 audit[4862]: CRED_ACQ pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.616000 audit[4862]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5029b30 a2=3 a3=1 items=0 ppid=1 pid=4862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:08.616000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:08.618438 sshd[4862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:08.622996 systemd[1]: Started session-12.scope. Sep 13 00:16:08.623316 systemd-logind[1203]: New session 12 of user core. Sep 13 00:16:08.627000 audit[4862]: USER_START pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.629000 audit[4865]: CRED_ACQ pid=4865 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.648000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:08.648000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:08.648000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=4009720090 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:16:08.648000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=400a003b20 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:16:08.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:16:08.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:16:08.648000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:08.648000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=40097200c0 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:16:08.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:16:08.655000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:08.655000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=40097200f0 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:16:08.655000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:16:08.655000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:08.655000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4007466fe0 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:16:08.655000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:16:08.655000 audit[1843]: AVC avc: denied { watch } for pid=1843 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:08.655000 audit[1843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4009d6adb0 a2=fc6 a3=0 items=0 ppid=1681 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c840 key=(null) Sep 13 00:16:08.655000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 13 00:16:08.743368 sshd[4862]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:08.743000 audit[4862]: USER_END pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.743000 audit[4862]: CRED_DISP pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:08.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.69:22-10.0.0.1:46978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:08.746200 systemd[1]: sshd@11-10.0.0.69:22-10.0.0.1:46978.service: Deactivated successfully. Sep 13 00:16:08.746946 systemd[1]: session-12.scope: Deactivated successfully. Sep 13 00:16:08.747728 systemd-logind[1203]: Session 12 logged out. Waiting for processes to exit. Sep 13 00:16:08.748626 systemd-logind[1203]: Removed session 12. Sep 13 00:16:09.677000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:09.677000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400266ac60 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:16:09.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:16:09.677000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:09.677000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4003184120 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:16:09.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:16:11.393764 env[1216]: time="2025-09-13T00:16:11.393414387Z" level=info msg="StopPodSandbox for \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\"" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.445 [WARNING][4896] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--pv25h-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6", ResourceVersion:"1124", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd", Pod:"goldmane-7988f88666-pv25h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b6380abb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.447 [INFO][4896] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.447 [INFO][4896] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" iface="eth0" netns="" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.447 [INFO][4896] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.447 [INFO][4896] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.467 [INFO][4907] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.467 [INFO][4907] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.467 [INFO][4907] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.476 [WARNING][4907] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.477 [INFO][4907] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.478 [INFO][4907] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:11.482191 env[1216]: 2025-09-13 00:16:11.480 [INFO][4896] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.482799 env[1216]: time="2025-09-13T00:16:11.482212066Z" level=info msg="TearDown network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\" successfully" Sep 13 00:16:11.482799 env[1216]: time="2025-09-13T00:16:11.482242146Z" level=info msg="StopPodSandbox for \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\" returns successfully" Sep 13 00:16:11.482799 env[1216]: time="2025-09-13T00:16:11.482712144Z" level=info msg="RemovePodSandbox for \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\"" Sep 13 00:16:11.482799 env[1216]: time="2025-09-13T00:16:11.482743624Z" level=info msg="Forcibly stopping sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\"" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.514 [WARNING][4925] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--pv25h-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a08d3783-674a-4ee3-9a17-76ed3e2c4bb6", ResourceVersion:"1124", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"432159234152b9972d961606340a45a5c9ba535c900791fff884a325191bfedd", Pod:"goldmane-7988f88666-pv25h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b6380abb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.515 [INFO][4925] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.515 [INFO][4925] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" iface="eth0" netns="" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.515 [INFO][4925] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.515 [INFO][4925] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.533 [INFO][4933] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.533 [INFO][4933] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.533 [INFO][4933] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.542 [WARNING][4933] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.542 [INFO][4933] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" HandleID="k8s-pod-network.bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Workload="localhost-k8s-goldmane--7988f88666--pv25h-eth0" Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.543 [INFO][4933] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:11.547130 env[1216]: 2025-09-13 00:16:11.545 [INFO][4925] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6" Sep 13 00:16:11.547632 env[1216]: time="2025-09-13T00:16:11.547165631Z" level=info msg="TearDown network for sandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\" successfully" Sep 13 00:16:11.556195 env[1216]: time="2025-09-13T00:16:11.556157759Z" level=info msg="RemovePodSandbox \"bcdfb9a315de7a091e4a921d5d478be70a04e8238fbec8f9b7b3fbae2fdcaad6\" returns successfully" Sep 13 00:16:11.556780 env[1216]: time="2025-09-13T00:16:11.556710717Z" level=info msg="StopPodSandbox for \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\"" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.602 [WARNING][4951] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" WorkloadEndpoint="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.607 [INFO][4951] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.607 [INFO][4951] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" iface="eth0" netns="" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.607 [INFO][4951] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.607 [INFO][4951] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.631 [INFO][4961] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.631 [INFO][4961] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.631 [INFO][4961] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.640 [WARNING][4961] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.640 [INFO][4961] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.641 [INFO][4961] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:11.644914 env[1216]: 2025-09-13 00:16:11.643 [INFO][4951] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.644914 env[1216]: time="2025-09-13T00:16:11.644881998Z" level=info msg="TearDown network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\" successfully" Sep 13 00:16:11.644914 env[1216]: time="2025-09-13T00:16:11.644909878Z" level=info msg="StopPodSandbox for \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\" returns successfully" Sep 13 00:16:11.646136 env[1216]: time="2025-09-13T00:16:11.646109314Z" level=info msg="RemovePodSandbox for \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\"" Sep 13 00:16:11.646452 env[1216]: time="2025-09-13T00:16:11.646356873Z" level=info msg="Forcibly stopping sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\"" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.680 [WARNING][4979] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" WorkloadEndpoint="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.681 [INFO][4979] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.681 [INFO][4979] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" iface="eth0" netns="" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.681 [INFO][4979] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.681 [INFO][4979] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.708 [INFO][4988] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.708 [INFO][4988] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.708 [INFO][4988] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.722 [WARNING][4988] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.722 [INFO][4988] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" HandleID="k8s-pod-network.825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Workload="localhost-k8s-whisker--554f9c74c--f6qn4-eth0" Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.723 [INFO][4988] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:11.726610 env[1216]: 2025-09-13 00:16:11.724 [INFO][4979] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691" Sep 13 00:16:11.727114 env[1216]: time="2025-09-13T00:16:11.727057341Z" level=info msg="TearDown network for sandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\" successfully" Sep 13 00:16:11.730452 env[1216]: time="2025-09-13T00:16:11.730419129Z" level=info msg="RemovePodSandbox \"825f1701bbe34cdf0d967cb5ef681bf61835b1ab02e25d1c11e34e6287c44691\" returns successfully" Sep 13 00:16:11.731128 env[1216]: time="2025-09-13T00:16:11.731098526Z" level=info msg="StopPodSandbox for \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\"" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.763 [WARNING][5006] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--g5255-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1931babe-4e10-42d3-96e5-479d8859d7ad", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864", Pod:"csi-node-driver-g5255", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali51d1700c870", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.763 [INFO][5006] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.763 [INFO][5006] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" iface="eth0" netns="" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.763 [INFO][5006] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.763 [INFO][5006] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.781 [INFO][5015] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.781 [INFO][5015] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.781 [INFO][5015] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.789 [WARNING][5015] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.789 [INFO][5015] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.791 [INFO][5015] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:11.794720 env[1216]: 2025-09-13 00:16:11.793 [INFO][5006] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.795187 env[1216]: time="2025-09-13T00:16:11.794751576Z" level=info msg="TearDown network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\" successfully" Sep 13 00:16:11.795187 env[1216]: time="2025-09-13T00:16:11.794781376Z" level=info msg="StopPodSandbox for \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\" returns successfully" Sep 13 00:16:11.795365 env[1216]: time="2025-09-13T00:16:11.795262495Z" level=info msg="RemovePodSandbox for \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\"" Sep 13 00:16:11.795424 env[1216]: time="2025-09-13T00:16:11.795384334Z" level=info msg="Forcibly stopping sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\"" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.828 [WARNING][5033] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--g5255-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1931babe-4e10-42d3-96e5-479d8859d7ad", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8731886f7a795ee9a9c917ea4bff6886b343aaf0bc8e7c7df3ae672c84549864", Pod:"csi-node-driver-g5255", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali51d1700c870", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.828 [INFO][5033] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.828 [INFO][5033] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" iface="eth0" netns="" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.828 [INFO][5033] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.828 [INFO][5033] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.846 [INFO][5041] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.846 [INFO][5041] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.846 [INFO][5041] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.854 [WARNING][5041] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.854 [INFO][5041] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" HandleID="k8s-pod-network.b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Workload="localhost-k8s-csi--node--driver--g5255-eth0" Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.856 [INFO][5041] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:11.859929 env[1216]: 2025-09-13 00:16:11.858 [INFO][5033] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044" Sep 13 00:16:11.860376 env[1216]: time="2025-09-13T00:16:11.859957141Z" level=info msg="TearDown network for sandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\" successfully" Sep 13 00:16:11.863244 env[1216]: time="2025-09-13T00:16:11.863207849Z" level=info msg="RemovePodSandbox \"b7f1f5994904055e6cb6e40ba371dca4445062a2318b44c703344e02c0a40044\" returns successfully" Sep 13 00:16:11.863682 env[1216]: time="2025-09-13T00:16:11.863642808Z" level=info msg="StopPodSandbox for \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\"" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.897 [WARNING][5059] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"5c6f181e-9298-4d6e-9a7b-b66e7e550b17", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663", Pod:"calico-apiserver-8497d5cc75-mfc8r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali935fad99f4a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.897 [INFO][5059] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.897 [INFO][5059] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" iface="eth0" netns="" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.897 [INFO][5059] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.897 [INFO][5059] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.931 [INFO][5068] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.931 [INFO][5068] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.931 [INFO][5068] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.940 [WARNING][5068] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.940 [INFO][5068] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.942 [INFO][5068] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:11.945855 env[1216]: 2025-09-13 00:16:11.944 [INFO][5059] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:11.947691 env[1216]: time="2025-09-13T00:16:11.945880710Z" level=info msg="TearDown network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\" successfully" Sep 13 00:16:11.947691 env[1216]: time="2025-09-13T00:16:11.945915230Z" level=info msg="StopPodSandbox for \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\" returns successfully" Sep 13 00:16:11.947691 env[1216]: time="2025-09-13T00:16:11.946419108Z" level=info msg="RemovePodSandbox for \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\"" Sep 13 00:16:11.947691 env[1216]: time="2025-09-13T00:16:11.946464868Z" level=info msg="Forcibly stopping sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\"" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:11.983 [WARNING][5086] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"5c6f181e-9298-4d6e-9a7b-b66e7e550b17", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e8072eb0537f0192b51a782087a6979b67c21d9779b1b599ef927707faaba663", Pod:"calico-apiserver-8497d5cc75-mfc8r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali935fad99f4a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:11.984 [INFO][5086] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:11.984 [INFO][5086] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" iface="eth0" netns="" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:11.984 [INFO][5086] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:11.984 [INFO][5086] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:12.004 [INFO][5094] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:12.004 [INFO][5094] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:12.005 [INFO][5094] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:12.012 [WARNING][5094] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:12.013 [INFO][5094] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" HandleID="k8s-pod-network.e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--mfc8r-eth0" Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:12.015 [INFO][5094] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.018322 env[1216]: 2025-09-13 00:16:12.016 [INFO][5086] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f" Sep 13 00:16:12.018739 env[1216]: time="2025-09-13T00:16:12.018350849Z" level=info msg="TearDown network for sandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\" successfully" Sep 13 00:16:12.021538 env[1216]: time="2025-09-13T00:16:12.021505838Z" level=info msg="RemovePodSandbox \"e281c8665ca561baf79b401e461a3a95e5907f54f2418aea0659ec3fea63c59f\" returns successfully" Sep 13 00:16:12.021963 env[1216]: time="2025-09-13T00:16:12.021934636Z" level=info msg="StopPodSandbox for \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\"" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.054 [WARNING][5111] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e", Pod:"coredns-7c65d6cfc9-pvt9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali813d87920ae", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.055 [INFO][5111] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.055 [INFO][5111] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" iface="eth0" netns="" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.055 [INFO][5111] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.055 [INFO][5111] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.073 [INFO][5120] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.074 [INFO][5120] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.074 [INFO][5120] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.083 [WARNING][5120] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.083 [INFO][5120] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.084 [INFO][5120] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.088139 env[1216]: 2025-09-13 00:16:12.086 [INFO][5111] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.088562 env[1216]: time="2025-09-13T00:16:12.088162759Z" level=info msg="TearDown network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\" successfully" Sep 13 00:16:12.088562 env[1216]: time="2025-09-13T00:16:12.088193199Z" level=info msg="StopPodSandbox for \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\" returns successfully" Sep 13 00:16:12.088613 env[1216]: time="2025-09-13T00:16:12.088580118Z" level=info msg="RemovePodSandbox for \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\"" Sep 13 00:16:12.088656 env[1216]: time="2025-09-13T00:16:12.088613398Z" level=info msg="Forcibly stopping sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\"" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.124 [WARNING][5139] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4dcf1e55-f1ff-4cf6-beaf-6e564e67a55a", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f81ed4f57010eb781cd1b2c3e54435798dc424963150e07759091dda8499e76e", Pod:"coredns-7c65d6cfc9-pvt9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali813d87920ae", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.124 [INFO][5139] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.124 [INFO][5139] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" iface="eth0" netns="" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.124 [INFO][5139] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.124 [INFO][5139] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.142 [INFO][5148] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.142 [INFO][5148] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.142 [INFO][5148] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.151 [WARNING][5148] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.151 [INFO][5148] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" HandleID="k8s-pod-network.1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Workload="localhost-k8s-coredns--7c65d6cfc9--pvt9z-eth0" Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.153 [INFO][5148] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.156962 env[1216]: 2025-09-13 00:16:12.155 [INFO][5139] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d" Sep 13 00:16:12.157438 env[1216]: time="2025-09-13T00:16:12.156984153Z" level=info msg="TearDown network for sandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\" successfully" Sep 13 00:16:12.160095 env[1216]: time="2025-09-13T00:16:12.160055062Z" level=info msg="RemovePodSandbox \"1d577692eca410450191e1f5b1fda7c2ce00f6d80fe190a8fc39c8b3ed84ee1d\" returns successfully" Sep 13 00:16:12.160559 env[1216]: time="2025-09-13T00:16:12.160522101Z" level=info msg="StopPodSandbox for \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\"" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.192 [WARNING][5166] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0", GenerateName:"calico-kube-controllers-7d86d86d7d-", Namespace:"calico-system", SelfLink:"", UID:"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a", ResourceVersion:"1100", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7d86d86d7d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f", Pod:"calico-kube-controllers-7d86d86d7d-hs529", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0bbec764a7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.192 [INFO][5166] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.192 [INFO][5166] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" iface="eth0" netns="" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.192 [INFO][5166] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.192 [INFO][5166] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.213 [INFO][5175] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.213 [INFO][5175] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.213 [INFO][5175] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.222 [WARNING][5175] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.222 [INFO][5175] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.223 [INFO][5175] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.226808 env[1216]: 2025-09-13 00:16:12.225 [INFO][5166] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.226808 env[1216]: time="2025-09-13T00:16:12.226776463Z" level=info msg="TearDown network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\" successfully" Sep 13 00:16:12.227236 env[1216]: time="2025-09-13T00:16:12.226811783Z" level=info msg="StopPodSandbox for \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\" returns successfully" Sep 13 00:16:12.228630 env[1216]: time="2025-09-13T00:16:12.228602057Z" level=info msg="RemovePodSandbox for \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\"" Sep 13 00:16:12.228753 env[1216]: time="2025-09-13T00:16:12.228716337Z" level=info msg="Forcibly stopping sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\"" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.259 [WARNING][5193] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0", GenerateName:"calico-kube-controllers-7d86d86d7d-", Namespace:"calico-system", SelfLink:"", UID:"ca7eba97-c05f-4e81-9ea9-2e4465d49b2a", ResourceVersion:"1100", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7d86d86d7d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aaca539aab46d4289f1b0dcb462e03ce1f3733ab1a612b1861abacf9d563f58f", Pod:"calico-kube-controllers-7d86d86d7d-hs529", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0bbec764a7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.259 [INFO][5193] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.259 [INFO][5193] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" iface="eth0" netns="" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.259 [INFO][5193] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.259 [INFO][5193] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.277 [INFO][5202] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.277 [INFO][5202] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.277 [INFO][5202] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.286 [WARNING][5202] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.286 [INFO][5202] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" HandleID="k8s-pod-network.e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Workload="localhost-k8s-calico--kube--controllers--7d86d86d7d--hs529-eth0" Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.287 [INFO][5202] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.291265 env[1216]: 2025-09-13 00:16:12.289 [INFO][5193] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907" Sep 13 00:16:12.291706 env[1216]: time="2025-09-13T00:16:12.291304353Z" level=info msg="TearDown network for sandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\" successfully" Sep 13 00:16:12.294594 env[1216]: time="2025-09-13T00:16:12.294552421Z" level=info msg="RemovePodSandbox \"e5082b87f5d308f8c9815d44ef1033e1954969ed164b541633adf6622ca10907\" returns successfully" Sep 13 00:16:12.295097 env[1216]: time="2025-09-13T00:16:12.295044379Z" level=info msg="StopPodSandbox for \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\"" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.332 [WARNING][5220] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3f14fbff-2859-45e7-a008-64321fd60526", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd", Pod:"coredns-7c65d6cfc9-wqmfs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali083b34c36d3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.332 [INFO][5220] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.332 [INFO][5220] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" iface="eth0" netns="" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.332 [INFO][5220] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.332 [INFO][5220] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.350 [INFO][5228] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.351 [INFO][5228] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.351 [INFO][5228] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.360 [WARNING][5228] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.360 [INFO][5228] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.361 [INFO][5228] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.372589 env[1216]: 2025-09-13 00:16:12.367 [INFO][5220] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.373145 env[1216]: time="2025-09-13T00:16:12.373110300Z" level=info msg="TearDown network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\" successfully" Sep 13 00:16:12.373220 env[1216]: time="2025-09-13T00:16:12.373203580Z" level=info msg="StopPodSandbox for \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\" returns successfully" Sep 13 00:16:12.373998 env[1216]: time="2025-09-13T00:16:12.373968057Z" level=info msg="RemovePodSandbox for \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\"" Sep 13 00:16:12.374060 env[1216]: time="2025-09-13T00:16:12.374008777Z" level=info msg="Forcibly stopping sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\"" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.409 [WARNING][5246] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3f14fbff-2859-45e7-a008-64321fd60526", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd1a1a25a3cbb1ff7dfe3502deb245f509b3de37e86ad106d35fc0a17f1539dd", Pod:"coredns-7c65d6cfc9-wqmfs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali083b34c36d3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.409 [INFO][5246] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.409 [INFO][5246] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" iface="eth0" netns="" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.409 [INFO][5246] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.409 [INFO][5246] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.443 [INFO][5256] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.443 [INFO][5256] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.443 [INFO][5256] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.453 [WARNING][5256] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.454 [INFO][5256] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" HandleID="k8s-pod-network.4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Workload="localhost-k8s-coredns--7c65d6cfc9--wqmfs-eth0" Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.455 [INFO][5256] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.459177 env[1216]: 2025-09-13 00:16:12.457 [INFO][5246] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f" Sep 13 00:16:12.459862 env[1216]: time="2025-09-13T00:16:12.459297312Z" level=info msg="TearDown network for sandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\" successfully" Sep 13 00:16:12.463077 env[1216]: time="2025-09-13T00:16:12.463018658Z" level=info msg="RemovePodSandbox \"4d1bbffed13bb0cc57274364ac5aec84ddadda4cd0e2c33b155c6fb68940736f\" returns successfully" Sep 13 00:16:12.463570 env[1216]: time="2025-09-13T00:16:12.463541696Z" level=info msg="StopPodSandbox for \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\"" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.498 [WARNING][5273] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"961bb16b-b8c1-4c25-8cba-0e381e56b93a", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9", Pod:"calico-apiserver-8497d5cc75-tg4qf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie8f6550a89a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.498 [INFO][5273] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.498 [INFO][5273] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" iface="eth0" netns="" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.498 [INFO][5273] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.498 [INFO][5273] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.515 [INFO][5281] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.515 [INFO][5281] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.515 [INFO][5281] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.527 [WARNING][5281] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.527 [INFO][5281] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.528 [INFO][5281] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.531664 env[1216]: 2025-09-13 00:16:12.530 [INFO][5273] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.531664 env[1216]: time="2025-09-13T00:16:12.531633493Z" level=info msg="TearDown network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\" successfully" Sep 13 00:16:12.532111 env[1216]: time="2025-09-13T00:16:12.531672933Z" level=info msg="StopPodSandbox for \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\" returns successfully" Sep 13 00:16:12.533203 env[1216]: time="2025-09-13T00:16:12.533174807Z" level=info msg="RemovePodSandbox for \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\"" Sep 13 00:16:12.533321 env[1216]: time="2025-09-13T00:16:12.533284487Z" level=info msg="Forcibly stopping sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\"" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.566 [WARNING][5298] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0", GenerateName:"calico-apiserver-8497d5cc75-", Namespace:"calico-apiserver", SelfLink:"", UID:"961bb16b-b8c1-4c25-8cba-0e381e56b93a", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 15, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8497d5cc75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6aa039f49f1259a3e7ed4c28c281fd2b18d8e1f62cafe04be519a5b4d7ff81b9", Pod:"calico-apiserver-8497d5cc75-tg4qf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie8f6550a89a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.566 [INFO][5298] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.566 [INFO][5298] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" iface="eth0" netns="" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.566 [INFO][5298] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.566 [INFO][5298] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.582 [INFO][5306] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.582 [INFO][5306] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.582 [INFO][5306] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.592 [WARNING][5306] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.592 [INFO][5306] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" HandleID="k8s-pod-network.b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Workload="localhost-k8s-calico--apiserver--8497d5cc75--tg4qf-eth0" Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.593 [INFO][5306] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:16:12.596715 env[1216]: 2025-09-13 00:16:12.595 [INFO][5298] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f" Sep 13 00:16:12.597163 env[1216]: time="2025-09-13T00:16:12.596740340Z" level=info msg="TearDown network for sandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\" successfully" Sep 13 00:16:12.600133 env[1216]: time="2025-09-13T00:16:12.600101008Z" level=info msg="RemovePodSandbox \"b156e7402f6c6849f03ddc1a6f16e76f3514655f5da871b73f696639b4e1588f\" returns successfully" Sep 13 00:16:13.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.69:22-10.0.0.1:60426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:13.748427 systemd[1]: Started sshd@12-10.0.0.69:22-10.0.0.1:60426.service. Sep 13 00:16:13.749413 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 13 00:16:13.749450 kernel: audit: type=1130 audit(1757722573.747:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.69:22-10.0.0.1:60426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:13.795000 audit[5316]: USER_ACCT pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.799283 sshd[5316]: Accepted publickey for core from 10.0.0.1 port 60426 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:13.800095 kernel: audit: type=1101 audit(1757722573.795:1502): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.800000 audit[5316]: CRED_ACQ pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.801022 sshd[5316]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:13.804705 kernel: audit: type=1103 audit(1757722573.800:1503): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.804756 kernel: audit: type=1006 audit(1757722573.800:1504): pid=5316 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 13 00:16:13.804781 kernel: audit: type=1300 audit(1757722573.800:1504): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed88f7a0 a2=3 a3=1 items=0 ppid=1 pid=5316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:13.800000 audit[5316]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed88f7a0 a2=3 a3=1 items=0 ppid=1 pid=5316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:13.807743 kernel: audit: type=1327 audit(1757722573.800:1504): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:13.800000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:13.806736 systemd-logind[1203]: New session 13 of user core. Sep 13 00:16:13.807620 systemd[1]: Started session-13.scope. Sep 13 00:16:13.810000 audit[5316]: USER_START pid=5316 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.811000 audit[5318]: CRED_ACQ pid=5318 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.817433 kernel: audit: type=1105 audit(1757722573.810:1505): pid=5316 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.817483 kernel: audit: type=1103 audit(1757722573.811:1506): pid=5318 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.982094 sshd[5316]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:13.983000 audit[5316]: USER_END pid=5316 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.984710 systemd[1]: sshd@12-10.0.0.69:22-10.0.0.1:60426.service: Deactivated successfully. Sep 13 00:16:13.985498 systemd[1]: session-13.scope: Deactivated successfully. Sep 13 00:16:13.986185 systemd-logind[1203]: Session 13 logged out. Waiting for processes to exit. Sep 13 00:16:13.983000 audit[5316]: CRED_DISP pid=5316 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.986851 systemd-logind[1203]: Removed session 13. Sep 13 00:16:13.988580 kernel: audit: type=1106 audit(1757722573.983:1507): pid=5316 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.988643 kernel: audit: type=1104 audit(1757722573.983:1508): pid=5316 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:13.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.69:22-10.0.0.1:60426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:17.396000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:17.396000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:17.396000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002f1ff40 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:16:17.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:16:17.396000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400311e860 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:16:17.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:16:17.396000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:17.397000 audit[1831]: AVC avc: denied { watch } for pid=1831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:16:17.396000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002e70b40 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:16:17.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:16:17.397000 audit[1831]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400311e880 a2=fc6 a3=0 items=0 ppid=1658 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c716,c976 key=(null) Sep 13 00:16:17.397000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:16:18.986717 systemd[1]: Started sshd@13-10.0.0.69:22-10.0.0.1:60434.service. Sep 13 00:16:18.990749 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 13 00:16:18.990827 kernel: audit: type=1130 audit(1757722578.985:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.69:22-10.0.0.1:60434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:18.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.69:22-10.0.0.1:60434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:19.024000 audit[5332]: USER_ACCT pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.025439 sshd[5332]: Accepted publickey for core from 10.0.0.1 port 60434 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:19.026501 sshd[5332]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:19.025000 audit[5332]: CRED_ACQ pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.030258 kernel: audit: type=1101 audit(1757722579.024:1515): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.031117 kernel: audit: type=1103 audit(1757722579.025:1516): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.031160 kernel: audit: type=1006 audit(1757722579.025:1517): pid=5332 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 13 00:16:19.031768 kernel: audit: type=1300 audit(1757722579.025:1517): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5df3530 a2=3 a3=1 items=0 ppid=1 pid=5332 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:19.025000 audit[5332]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5df3530 a2=3 a3=1 items=0 ppid=1 pid=5332 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:19.031483 systemd-logind[1203]: New session 14 of user core. Sep 13 00:16:19.032311 systemd[1]: Started session-14.scope. Sep 13 00:16:19.025000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:19.035143 kernel: audit: type=1327 audit(1757722579.025:1517): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:19.034000 audit[5332]: USER_START pid=5332 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.038443 kernel: audit: type=1105 audit(1757722579.034:1518): pid=5332 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.038521 kernel: audit: type=1103 audit(1757722579.035:1519): pid=5334 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.035000 audit[5334]: CRED_ACQ pid=5334 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.161543 sshd[5332]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:19.161000 audit[5332]: USER_END pid=5332 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.164392 systemd[1]: session-14.scope: Deactivated successfully. Sep 13 00:16:19.164974 systemd-logind[1203]: Session 14 logged out. Waiting for processes to exit. Sep 13 00:16:19.165142 systemd[1]: sshd@13-10.0.0.69:22-10.0.0.1:60434.service: Deactivated successfully. Sep 13 00:16:19.161000 audit[5332]: CRED_DISP pid=5332 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.166201 systemd-logind[1203]: Removed session 14. Sep 13 00:16:19.167818 kernel: audit: type=1106 audit(1757722579.161:1520): pid=5332 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.167878 kernel: audit: type=1104 audit(1757722579.161:1521): pid=5332 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:19.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.69:22-10.0.0.1:60434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:20.229934 kubelet[1957]: I0913 00:16:20.229889 1957 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:16:20.264000 audit[5349]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=5349 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:20.264000 audit[5349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe2ae0ae0 a2=0 a3=1 items=0 ppid=2073 pid=5349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:20.264000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:20.272000 audit[5349]: NETFILTER_CFG table=nat:131 family=2 entries=36 op=nft_register_chain pid=5349 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:20.272000 audit[5349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffe2ae0ae0 a2=0 a3=1 items=0 ppid=2073 pid=5349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:20.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:20.417623 kubelet[1957]: E0913 00:16:20.417585 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:16:24.167144 systemd[1]: Started sshd@14-10.0.0.69:22-10.0.0.1:33594.service. Sep 13 00:16:24.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.69:22-10.0.0.1:33594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:24.169360 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:16:24.169425 kernel: audit: type=1130 audit(1757722584.166:1525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.69:22-10.0.0.1:33594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:24.218000 audit[5376]: USER_ACCT pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.219942 sshd[5376]: Accepted publickey for core from 10.0.0.1 port 33594 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:24.221695 sshd[5376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:24.220000 audit[5376]: CRED_ACQ pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.228629 kernel: audit: type=1101 audit(1757722584.218:1526): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.228710 kernel: audit: type=1103 audit(1757722584.220:1527): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.228733 kernel: audit: type=1006 audit(1757722584.220:1528): pid=5376 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 13 00:16:24.220000 audit[5376]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda9c2040 a2=3 a3=1 items=0 ppid=1 pid=5376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:24.234484 kernel: audit: type=1300 audit(1757722584.220:1528): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda9c2040 a2=3 a3=1 items=0 ppid=1 pid=5376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:24.220000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:24.235498 kernel: audit: type=1327 audit(1757722584.220:1528): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:24.236730 systemd-logind[1203]: New session 15 of user core. Sep 13 00:16:24.237673 systemd[1]: Started session-15.scope. Sep 13 00:16:24.244000 audit[5376]: USER_START pid=5376 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.247000 audit[5378]: CRED_ACQ pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.251142 kernel: audit: type=1105 audit(1757722584.244:1529): pid=5376 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.251212 kernel: audit: type=1103 audit(1757722584.247:1530): pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.415349 sshd[5376]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:24.416000 audit[5376]: USER_END pid=5376 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.416000 audit[5376]: CRED_DISP pid=5376 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.422641 kernel: audit: type=1106 audit(1757722584.416:1531): pid=5376 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.422702 kernel: audit: type=1104 audit(1757722584.416:1532): pid=5376 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:24.423009 systemd[1]: sshd@14-10.0.0.69:22-10.0.0.1:33594.service: Deactivated successfully. Sep 13 00:16:24.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.69:22-10.0.0.1:33594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:24.423884 systemd[1]: session-15.scope: Deactivated successfully. Sep 13 00:16:24.424570 systemd-logind[1203]: Session 15 logged out. Waiting for processes to exit. Sep 13 00:16:24.425597 systemd-logind[1203]: Removed session 15. Sep 13 00:16:25.417783 kubelet[1957]: E0913 00:16:25.417739 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 13 00:16:25.652000 audit[5412]: NETFILTER_CFG table=filter:132 family=2 entries=9 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:25.652000 audit[5412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffde2a6560 a2=0 a3=1 items=0 ppid=2073 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:25.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:25.660000 audit[5412]: NETFILTER_CFG table=nat:133 family=2 entries=31 op=nft_register_chain pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:25.660000 audit[5412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffde2a6560 a2=0 a3=1 items=0 ppid=2073 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:25.660000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:29.420680 systemd[1]: Started sshd@15-10.0.0.69:22-10.0.0.1:33606.service. Sep 13 00:16:29.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.69:22-10.0.0.1:33606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:29.424745 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:16:29.424842 kernel: audit: type=1130 audit(1757722589.419:1536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.69:22-10.0.0.1:33606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:29.466000 audit[5442]: USER_ACCT pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.467666 sshd[5442]: Accepted publickey for core from 10.0.0.1 port 33606 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:29.469583 sshd[5442]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:29.467000 audit[5442]: CRED_ACQ pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.472625 kernel: audit: type=1101 audit(1757722589.466:1537): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.472682 kernel: audit: type=1103 audit(1757722589.467:1538): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.474461 kernel: audit: type=1006 audit(1757722589.468:1539): pid=5442 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 13 00:16:29.474522 kernel: audit: type=1300 audit(1757722589.468:1539): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd504bae0 a2=3 a3=1 items=0 ppid=1 pid=5442 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:29.468000 audit[5442]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd504bae0 a2=3 a3=1 items=0 ppid=1 pid=5442 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:29.468000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:29.477029 systemd-logind[1203]: New session 16 of user core. Sep 13 00:16:29.477519 systemd[1]: Started session-16.scope. Sep 13 00:16:29.477886 kernel: audit: type=1327 audit(1757722589.468:1539): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:29.480000 audit[5442]: USER_START pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.482000 audit[5444]: CRED_ACQ pid=5444 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.487738 kernel: audit: type=1105 audit(1757722589.480:1540): pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.487791 kernel: audit: type=1103 audit(1757722589.482:1541): pid=5444 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.652474 sshd[5442]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:29.654000 audit[5442]: USER_END pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.655795 systemd[1]: Started sshd@16-10.0.0.69:22-10.0.0.1:33620.service. Sep 13 00:16:29.654000 audit[5442]: CRED_DISP pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.660467 kernel: audit: type=1106 audit(1757722589.654:1542): pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.660511 kernel: audit: type=1104 audit(1757722589.654:1543): pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.69:22-10.0.0.1:33620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:29.660732 systemd[1]: sshd@15-10.0.0.69:22-10.0.0.1:33606.service: Deactivated successfully. Sep 13 00:16:29.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.69:22-10.0.0.1:33606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:29.661553 systemd[1]: session-16.scope: Deactivated successfully. Sep 13 00:16:29.663110 systemd-logind[1203]: Session 16 logged out. Waiting for processes to exit. Sep 13 00:16:29.666248 systemd-logind[1203]: Removed session 16. Sep 13 00:16:29.698000 audit[5454]: USER_ACCT pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.700291 sshd[5454]: Accepted publickey for core from 10.0.0.1 port 33620 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:29.700000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.700000 audit[5454]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc058a560 a2=3 a3=1 items=0 ppid=1 pid=5454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:29.700000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:29.702236 sshd[5454]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:29.705766 systemd-logind[1203]: New session 17 of user core. Sep 13 00:16:29.706618 systemd[1]: Started session-17.scope. Sep 13 00:16:29.709000 audit[5454]: USER_START pid=5454 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.710000 audit[5457]: CRED_ACQ pid=5457 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.786552 systemd[1]: run-containerd-runc-k8s.io-b13ddce0112e66a5236432d3f1c588cdcb9c001fd36307e0a05177a86c886196-runc.I037nM.mount: Deactivated successfully. Sep 13 00:16:29.950958 sshd[5454]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:29.953000 audit[5454]: USER_END pid=5454 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.953000 audit[5454]: CRED_DISP pid=5454 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:29.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.69:22-10.0.0.1:49638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:29.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.69:22-10.0.0.1:33620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:29.955055 systemd[1]: Started sshd@17-10.0.0.69:22-10.0.0.1:49638.service. Sep 13 00:16:29.956564 systemd[1]: sshd@16-10.0.0.69:22-10.0.0.1:33620.service: Deactivated successfully. Sep 13 00:16:29.957441 systemd[1]: session-17.scope: Deactivated successfully. Sep 13 00:16:29.958095 systemd-logind[1203]: Session 17 logged out. Waiting for processes to exit. Sep 13 00:16:29.958987 systemd-logind[1203]: Removed session 17. Sep 13 00:16:29.999000 audit[5486]: USER_ACCT pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:30.000540 sshd[5486]: Accepted publickey for core from 10.0.0.1 port 49638 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:30.000000 audit[5486]: CRED_ACQ pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:30.000000 audit[5486]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3b2bc40 a2=3 a3=1 items=0 ppid=1 pid=5486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:30.000000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:30.002338 sshd[5486]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:30.005889 systemd-logind[1203]: New session 18 of user core. Sep 13 00:16:30.006700 systemd[1]: Started session-18.scope. Sep 13 00:16:30.009000 audit[5486]: USER_START pid=5486 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:30.011000 audit[5489]: CRED_ACQ pid=5489 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:31.567831 sshd[5486]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:31.568000 audit[5486]: USER_END pid=5486 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:31.568000 audit[5486]: CRED_DISP pid=5486 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:31.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.69:22-10.0.0.1:49648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:31.571944 systemd[1]: Started sshd@18-10.0.0.69:22-10.0.0.1:49648.service. Sep 13 00:16:31.573160 systemd[1]: sshd@17-10.0.0.69:22-10.0.0.1:49638.service: Deactivated successfully. Sep 13 00:16:31.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.69:22-10.0.0.1:49638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:31.573998 systemd[1]: session-18.scope: Deactivated successfully. Sep 13 00:16:31.575159 systemd-logind[1203]: Session 18 logged out. Waiting for processes to exit. Sep 13 00:16:31.586738 systemd-logind[1203]: Removed session 18. Sep 13 00:16:31.614000 audit[5504]: NETFILTER_CFG table=filter:134 family=2 entries=20 op=nft_register_rule pid=5504 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:31.614000 audit[5504]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=fffffa687220 a2=0 a3=1 items=0 ppid=2073 pid=5504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:31.614000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:31.625000 audit[5504]: NETFILTER_CFG table=nat:135 family=2 entries=26 op=nft_register_rule pid=5504 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:31.625000 audit[5504]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=fffffa687220 a2=0 a3=1 items=0 ppid=2073 pid=5504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:31.625000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:31.628000 audit[5500]: USER_ACCT pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:31.630527 sshd[5500]: Accepted publickey for core from 10.0.0.1 port 49648 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:31.630000 audit[5500]: CRED_ACQ pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:31.630000 audit[5500]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5725300 a2=3 a3=1 items=0 ppid=1 pid=5500 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:31.630000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:31.632517 sshd[5500]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:31.638222 systemd-logind[1203]: New session 19 of user core. Sep 13 00:16:31.639094 systemd[1]: Started session-19.scope. Sep 13 00:16:31.643000 audit[5500]: USER_START pid=5500 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:31.645000 audit[5506]: CRED_ACQ pid=5506 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:31.648000 audit[5507]: NETFILTER_CFG table=filter:136 family=2 entries=32 op=nft_register_rule pid=5507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:31.648000 audit[5507]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffc41dafd0 a2=0 a3=1 items=0 ppid=2073 pid=5507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:31.648000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:31.653000 audit[5507]: NETFILTER_CFG table=nat:137 family=2 entries=26 op=nft_register_rule pid=5507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:31.653000 audit[5507]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffc41dafd0 a2=0 a3=1 items=0 ppid=2073 pid=5507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:31.653000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:32.083345 sshd[5500]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:32.083000 audit[5500]: USER_END pid=5500 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.083000 audit[5500]: CRED_DISP pid=5500 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.69:22-10.0.0.1:49662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:32.087318 systemd[1]: Started sshd@19-10.0.0.69:22-10.0.0.1:49662.service. Sep 13 00:16:32.087881 systemd[1]: sshd@18-10.0.0.69:22-10.0.0.1:49648.service: Deactivated successfully. Sep 13 00:16:32.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.69:22-10.0.0.1:49648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:32.088797 systemd[1]: session-19.scope: Deactivated successfully. Sep 13 00:16:32.090235 systemd-logind[1203]: Session 19 logged out. Waiting for processes to exit. Sep 13 00:16:32.091327 systemd-logind[1203]: Removed session 19. Sep 13 00:16:32.132000 audit[5515]: USER_ACCT pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.133696 sshd[5515]: Accepted publickey for core from 10.0.0.1 port 49662 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:32.133000 audit[5515]: CRED_ACQ pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.133000 audit[5515]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7659aa0 a2=3 a3=1 items=0 ppid=1 pid=5515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:32.133000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:32.134989 sshd[5515]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:32.138424 systemd-logind[1203]: New session 20 of user core. Sep 13 00:16:32.140139 systemd[1]: Started session-20.scope. Sep 13 00:16:32.142000 audit[5515]: USER_START pid=5515 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.143000 audit[5518]: CRED_ACQ pid=5518 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.260877 sshd[5515]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:32.260000 audit[5515]: USER_END pid=5515 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.260000 audit[5515]: CRED_DISP pid=5515 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:32.264350 systemd[1]: sshd@19-10.0.0.69:22-10.0.0.1:49662.service: Deactivated successfully. Sep 13 00:16:32.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.69:22-10.0.0.1:49662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:32.265144 systemd[1]: session-20.scope: Deactivated successfully. Sep 13 00:16:32.266092 systemd-logind[1203]: Session 20 logged out. Waiting for processes to exit. Sep 13 00:16:32.266902 systemd-logind[1203]: Removed session 20. Sep 13 00:16:36.463000 audit[5532]: NETFILTER_CFG table=filter:138 family=2 entries=20 op=nft_register_rule pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:36.466543 kernel: kauditd_printk_skb: 57 callbacks suppressed Sep 13 00:16:36.466603 kernel: audit: type=1325 audit(1757722596.463:1585): table=filter:138 family=2 entries=20 op=nft_register_rule pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:36.468089 kernel: audit: type=1300 audit(1757722596.463:1585): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffefee61f0 a2=0 a3=1 items=0 ppid=2073 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:36.463000 audit[5532]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffefee61f0 a2=0 a3=1 items=0 ppid=2073 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:36.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:36.472441 kernel: audit: type=1327 audit(1757722596.463:1585): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:36.475000 audit[5532]: NETFILTER_CFG table=nat:139 family=2 entries=110 op=nft_register_chain pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:36.475000 audit[5532]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffefee61f0 a2=0 a3=1 items=0 ppid=2073 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:36.481623 kernel: audit: type=1325 audit(1757722596.475:1586): table=nat:139 family=2 entries=110 op=nft_register_chain pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:16:36.481710 kernel: audit: type=1300 audit(1757722596.475:1586): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffefee61f0 a2=0 a3=1 items=0 ppid=2073 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:36.481743 kernel: audit: type=1327 audit(1757722596.475:1586): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:36.475000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:16:37.265359 systemd[1]: Started sshd@20-10.0.0.69:22-10.0.0.1:49674.service. Sep 13 00:16:37.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.69:22-10.0.0.1:49674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:37.269104 kernel: audit: type=1130 audit(1757722597.264:1587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.69:22-10.0.0.1:49674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:37.317000 audit[5535]: USER_ACCT pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.319026 sshd[5535]: Accepted publickey for core from 10.0.0.1 port 49674 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:37.321402 sshd[5535]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:37.319000 audit[5535]: CRED_ACQ pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.326931 systemd[1]: Started session-21.scope. Sep 13 00:16:37.328290 kernel: audit: type=1101 audit(1757722597.317:1588): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.328359 kernel: audit: type=1103 audit(1757722597.319:1589): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.328390 kernel: audit: type=1006 audit(1757722597.320:1590): pid=5535 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Sep 13 00:16:37.328642 systemd-logind[1203]: New session 21 of user core. Sep 13 00:16:37.320000 audit[5535]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc83ebd90 a2=3 a3=1 items=0 ppid=1 pid=5535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:37.320000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:37.335000 audit[5535]: USER_START pid=5535 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.336000 audit[5537]: CRED_ACQ pid=5537 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.518682 sshd[5535]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:37.518000 audit[5535]: USER_END pid=5535 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.518000 audit[5535]: CRED_DISP pid=5535 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:37.521894 systemd[1]: session-21.scope: Deactivated successfully. Sep 13 00:16:37.522663 systemd[1]: sshd@20-10.0.0.69:22-10.0.0.1:49674.service: Deactivated successfully. Sep 13 00:16:37.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.69:22-10.0.0.1:49674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:37.523449 systemd-logind[1203]: Session 21 logged out. Waiting for processes to exit. Sep 13 00:16:37.524155 systemd-logind[1203]: Removed session 21. Sep 13 00:16:42.523976 systemd[1]: Started sshd@21-10.0.0.69:22-10.0.0.1:48624.service. Sep 13 00:16:42.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.69:22-10.0.0.1:48624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:42.525412 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:16:42.525461 kernel: audit: type=1130 audit(1757722602.523:1596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.69:22-10.0.0.1:48624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:42.587835 sshd[5549]: Accepted publickey for core from 10.0.0.1 port 48624 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:42.586000 audit[5549]: USER_ACCT pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.589458 sshd[5549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:42.587000 audit[5549]: CRED_ACQ pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.594608 kernel: audit: type=1101 audit(1757722602.586:1597): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.594664 kernel: audit: type=1103 audit(1757722602.587:1598): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.594699 kernel: audit: type=1006 audit(1757722602.587:1599): pid=5549 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 13 00:16:42.594128 systemd-logind[1203]: New session 22 of user core. Sep 13 00:16:42.594944 systemd[1]: Started session-22.scope. Sep 13 00:16:42.587000 audit[5549]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5043880 a2=3 a3=1 items=0 ppid=1 pid=5549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:42.598930 kernel: audit: type=1300 audit(1757722602.587:1599): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5043880 a2=3 a3=1 items=0 ppid=1 pid=5549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:42.598997 kernel: audit: type=1327 audit(1757722602.587:1599): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:42.587000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:42.599000 audit[5549]: USER_START pid=5549 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.603532 kernel: audit: type=1105 audit(1757722602.599:1600): pid=5549 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.600000 audit[5551]: CRED_ACQ pid=5551 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.606077 kernel: audit: type=1103 audit(1757722602.600:1601): pid=5551 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.763110 sshd[5549]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:42.762000 audit[5549]: USER_END pid=5549 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.765664 systemd[1]: sshd@21-10.0.0.69:22-10.0.0.1:48624.service: Deactivated successfully. Sep 13 00:16:42.766434 systemd[1]: session-22.scope: Deactivated successfully. Sep 13 00:16:42.766966 systemd-logind[1203]: Session 22 logged out. Waiting for processes to exit. Sep 13 00:16:42.763000 audit[5549]: CRED_DISP pid=5549 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.767682 systemd-logind[1203]: Removed session 22. Sep 13 00:16:42.769449 kernel: audit: type=1106 audit(1757722602.762:1602): pid=5549 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.769530 kernel: audit: type=1104 audit(1757722602.763:1603): pid=5549 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:42.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.69:22-10.0.0.1:48624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:47.769031 systemd[1]: Started sshd@22-10.0.0.69:22-10.0.0.1:48628.service. Sep 13 00:16:47.772559 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:16:47.772656 kernel: audit: type=1130 audit(1757722607.768:1605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.69:22-10.0.0.1:48628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:47.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.69:22-10.0.0.1:48628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:47.807000 audit[5562]: USER_ACCT pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.808881 sshd[5562]: Accepted publickey for core from 10.0.0.1 port 48628 ssh2: RSA SHA256:IYYmYtZT7fhBES8dcJq//ghMZv88JUKT/A8TkXgi+lY Sep 13 00:16:47.810211 sshd[5562]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:16:47.808000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.814245 kernel: audit: type=1101 audit(1757722607.807:1606): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.814306 kernel: audit: type=1103 audit(1757722607.808:1607): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.817260 kernel: audit: type=1006 audit(1757722607.808:1608): pid=5562 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 13 00:16:47.817316 kernel: audit: type=1300 audit(1757722607.808:1608): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff268a850 a2=3 a3=1 items=0 ppid=1 pid=5562 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:47.808000 audit[5562]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff268a850 a2=3 a3=1 items=0 ppid=1 pid=5562 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:16:47.817073 systemd-logind[1203]: New session 23 of user core. Sep 13 00:16:47.817683 systemd[1]: Started session-23.scope. Sep 13 00:16:47.808000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:47.820082 kernel: audit: type=1327 audit(1757722607.808:1608): proctitle=737368643A20636F7265205B707269765D Sep 13 00:16:47.820000 audit[5562]: USER_START pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.824000 audit[5564]: CRED_ACQ pid=5564 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.827922 kernel: audit: type=1105 audit(1757722607.820:1609): pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.827972 kernel: audit: type=1103 audit(1757722607.824:1610): pid=5564 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.990060 sshd[5562]: pam_unix(sshd:session): session closed for user core Sep 13 00:16:47.990000 audit[5562]: USER_END pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.992654 systemd[1]: session-23.scope: Deactivated successfully. Sep 13 00:16:47.993213 systemd[1]: sshd@22-10.0.0.69:22-10.0.0.1:48628.service: Deactivated successfully. Sep 13 00:16:47.994404 systemd-logind[1203]: Session 23 logged out. Waiting for processes to exit. Sep 13 00:16:47.995057 systemd-logind[1203]: Removed session 23. Sep 13 00:16:47.990000 audit[5562]: CRED_DISP pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.999316 kernel: audit: type=1106 audit(1757722607.990:1611): pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.999381 kernel: audit: type=1104 audit(1757722607.990:1612): pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 13 00:16:47.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.69:22-10.0.0.1:48628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:16:48.418560 kubelet[1957]: E0913 00:16:48.418530 1957 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"