Aug 13 01:01:42.996359 kernel: Linux version 5.15.189-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Aug 12 23:01:50 -00 2025 Aug 13 01:01:42.996405 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=8f8aacd9fbcdd713563d390e899e90bedf5577e4b1b261b4e57687d87edd6b57 Aug 13 01:01:42.996422 kernel: BIOS-provided physical RAM map: Aug 13 01:01:42.996434 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Aug 13 01:01:42.996444 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000786cdfff] usable Aug 13 01:01:42.996456 kernel: BIOS-e820: [mem 0x00000000786ce000-0x000000007894dfff] reserved Aug 13 01:01:42.996470 kernel: BIOS-e820: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Aug 13 01:01:42.996483 kernel: BIOS-e820: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Aug 13 01:01:42.996496 kernel: BIOS-e820: [mem 0x00000000789de000-0x000000007c97bfff] usable Aug 13 01:01:42.996506 kernel: BIOS-e820: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Aug 13 01:01:42.996516 kernel: NX (Execute Disable) protection: active Aug 13 01:01:42.996527 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Aug 13 01:01:42.996539 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Aug 13 01:01:42.996551 kernel: extended physical RAM map: Aug 13 01:01:42.996569 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Aug 13 01:01:42.996581 kernel: reserve setup_data: [mem 0x0000000000100000-0x0000000076813017] usable Aug 13 01:01:42.996594 kernel: reserve setup_data: [mem 0x0000000076813018-0x000000007681be57] usable Aug 13 01:01:42.996607 kernel: reserve setup_data: [mem 0x000000007681be58-0x00000000786cdfff] usable Aug 13 01:01:42.996620 kernel: reserve setup_data: [mem 0x00000000786ce000-0x000000007894dfff] reserved Aug 13 01:01:42.996634 kernel: reserve setup_data: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Aug 13 01:01:42.996647 kernel: reserve setup_data: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Aug 13 01:01:42.996661 kernel: reserve setup_data: [mem 0x00000000789de000-0x000000007c97bfff] usable Aug 13 01:01:42.996674 kernel: reserve setup_data: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Aug 13 01:01:42.996687 kernel: efi: EFI v2.70 by EDK II Aug 13 01:01:42.996704 kernel: efi: SMBIOS=0x7886a000 ACPI=0x7895d000 ACPI 2.0=0x7895d014 MEMATTR=0x77004a98 Aug 13 01:01:42.996717 kernel: SMBIOS 2.7 present. Aug 13 01:01:42.996730 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Aug 13 01:01:42.996742 kernel: Hypervisor detected: KVM Aug 13 01:01:42.996752 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Aug 13 01:01:42.996763 kernel: kvm-clock: cpu 0, msr 1419e001, primary cpu clock Aug 13 01:01:42.996772 kernel: kvm-clock: using sched offset of 3912021010 cycles Aug 13 01:01:42.996783 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Aug 13 01:01:42.996796 kernel: tsc: Detected 2499.998 MHz processor Aug 13 01:01:42.996805 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Aug 13 01:01:42.996816 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Aug 13 01:01:42.996830 kernel: last_pfn = 0x7c97c max_arch_pfn = 0x400000000 Aug 13 01:01:42.996842 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Aug 13 01:01:42.996853 kernel: Using GB pages for direct mapping Aug 13 01:01:42.996865 kernel: Secure boot disabled Aug 13 01:01:42.996876 kernel: ACPI: Early table checksum verification disabled Aug 13 01:01:42.996893 kernel: ACPI: RSDP 0x000000007895D014 000024 (v02 AMAZON) Aug 13 01:01:42.996906 kernel: ACPI: XSDT 0x000000007895C0E8 00006C (v01 AMAZON AMZNFACP 00000001 01000013) Aug 13 01:01:42.996920 kernel: ACPI: FACP 0x0000000078955000 000114 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Aug 13 01:01:42.996933 kernel: ACPI: DSDT 0x0000000078956000 00115A (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Aug 13 01:01:42.996947 kernel: ACPI: FACS 0x00000000789D0000 000040 Aug 13 01:01:42.996961 kernel: ACPI: WAET 0x000000007895B000 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Aug 13 01:01:42.996976 kernel: ACPI: SLIT 0x000000007895A000 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Aug 13 01:01:42.996990 kernel: ACPI: APIC 0x0000000078959000 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Aug 13 01:01:42.997003 kernel: ACPI: SRAT 0x0000000078958000 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Aug 13 01:01:42.997021 kernel: ACPI: HPET 0x0000000078954000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Aug 13 01:01:42.997036 kernel: ACPI: SSDT 0x0000000078953000 000759 (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Aug 13 01:01:42.997047 kernel: ACPI: SSDT 0x0000000078952000 00007F (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Aug 13 01:01:42.997059 kernel: ACPI: BGRT 0x0000000078951000 000038 (v01 AMAZON AMAZON 00000002 01000013) Aug 13 01:01:42.997071 kernel: ACPI: Reserving FACP table memory at [mem 0x78955000-0x78955113] Aug 13 01:01:42.997083 kernel: ACPI: Reserving DSDT table memory at [mem 0x78956000-0x78957159] Aug 13 01:01:42.997096 kernel: ACPI: Reserving FACS table memory at [mem 0x789d0000-0x789d003f] Aug 13 01:01:42.997110 kernel: ACPI: Reserving WAET table memory at [mem 0x7895b000-0x7895b027] Aug 13 01:01:42.997123 kernel: ACPI: Reserving SLIT table memory at [mem 0x7895a000-0x7895a06b] Aug 13 01:01:42.997139 kernel: ACPI: Reserving APIC table memory at [mem 0x78959000-0x78959075] Aug 13 01:01:42.997154 kernel: ACPI: Reserving SRAT table memory at [mem 0x78958000-0x7895809f] Aug 13 01:01:42.997169 kernel: ACPI: Reserving HPET table memory at [mem 0x78954000-0x78954037] Aug 13 01:01:42.997183 kernel: ACPI: Reserving SSDT table memory at [mem 0x78953000-0x78953758] Aug 13 01:01:42.997198 kernel: ACPI: Reserving SSDT table memory at [mem 0x78952000-0x7895207e] Aug 13 01:01:42.997212 kernel: ACPI: Reserving BGRT table memory at [mem 0x78951000-0x78951037] Aug 13 01:01:42.997227 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Aug 13 01:01:42.997242 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Aug 13 01:01:42.997257 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Aug 13 01:01:42.997275 kernel: NUMA: Initialized distance table, cnt=1 Aug 13 01:01:42.997289 kernel: NODE_DATA(0) allocated [mem 0x7a8ef000-0x7a8f4fff] Aug 13 01:01:42.997304 kernel: Zone ranges: Aug 13 01:01:42.997317 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Aug 13 01:01:42.997330 kernel: DMA32 [mem 0x0000000001000000-0x000000007c97bfff] Aug 13 01:01:42.997344 kernel: Normal empty Aug 13 01:01:42.997371 kernel: Movable zone start for each node Aug 13 01:01:42.997444 kernel: Early memory node ranges Aug 13 01:01:42.997456 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Aug 13 01:01:42.997471 kernel: node 0: [mem 0x0000000000100000-0x00000000786cdfff] Aug 13 01:01:42.997483 kernel: node 0: [mem 0x00000000789de000-0x000000007c97bfff] Aug 13 01:01:42.997496 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007c97bfff] Aug 13 01:01:42.997510 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Aug 13 01:01:42.997524 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Aug 13 01:01:42.997538 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Aug 13 01:01:42.997551 kernel: On node 0, zone DMA32: 13956 pages in unavailable ranges Aug 13 01:01:42.997565 kernel: ACPI: PM-Timer IO Port: 0xb008 Aug 13 01:01:42.997579 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Aug 13 01:01:42.997595 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Aug 13 01:01:42.997609 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Aug 13 01:01:42.997623 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Aug 13 01:01:42.997637 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Aug 13 01:01:42.997651 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Aug 13 01:01:42.997664 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Aug 13 01:01:42.997676 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Aug 13 01:01:42.997689 kernel: TSC deadline timer available Aug 13 01:01:42.997703 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Aug 13 01:01:42.997717 kernel: [mem 0x7ca00000-0xffffffff] available for PCI devices Aug 13 01:01:42.997734 kernel: Booting paravirtualized kernel on KVM Aug 13 01:01:42.997748 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Aug 13 01:01:42.997761 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Aug 13 01:01:42.997773 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Aug 13 01:01:42.997784 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Aug 13 01:01:42.997796 kernel: pcpu-alloc: [0] 0 1 Aug 13 01:01:42.997807 kernel: kvm-guest: stealtime: cpu 0, msr 7a41c0c0 Aug 13 01:01:42.997818 kernel: kvm-guest: PV spinlocks enabled Aug 13 01:01:42.997831 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Aug 13 01:01:42.997847 kernel: Built 1 zonelists, mobility grouping on. Total pages: 501318 Aug 13 01:01:42.997859 kernel: Policy zone: DMA32 Aug 13 01:01:42.997875 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=8f8aacd9fbcdd713563d390e899e90bedf5577e4b1b261b4e57687d87edd6b57 Aug 13 01:01:42.997889 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Aug 13 01:01:42.997902 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Aug 13 01:01:42.997930 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Aug 13 01:01:42.997944 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Aug 13 01:01:42.997962 kernel: Memory: 1876640K/2037804K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47488K init, 4092K bss, 160904K reserved, 0K cma-reserved) Aug 13 01:01:42.997976 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Aug 13 01:01:42.997990 kernel: Kernel/User page tables isolation: enabled Aug 13 01:01:42.998005 kernel: ftrace: allocating 34608 entries in 136 pages Aug 13 01:01:42.998018 kernel: ftrace: allocated 136 pages with 2 groups Aug 13 01:01:42.998033 kernel: rcu: Hierarchical RCU implementation. Aug 13 01:01:42.998049 kernel: rcu: RCU event tracing is enabled. Aug 13 01:01:42.998077 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Aug 13 01:01:42.998091 kernel: Rude variant of Tasks RCU enabled. Aug 13 01:01:42.998106 kernel: Tracing variant of Tasks RCU enabled. Aug 13 01:01:42.998121 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Aug 13 01:01:42.998137 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Aug 13 01:01:42.998154 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Aug 13 01:01:42.998169 kernel: random: crng init done Aug 13 01:01:42.998184 kernel: Console: colour dummy device 80x25 Aug 13 01:01:42.998198 kernel: printk: console [tty0] enabled Aug 13 01:01:42.998213 kernel: printk: console [ttyS0] enabled Aug 13 01:01:42.998228 kernel: ACPI: Core revision 20210730 Aug 13 01:01:42.998243 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Aug 13 01:01:42.998261 kernel: APIC: Switch to symmetric I/O mode setup Aug 13 01:01:42.998276 kernel: x2apic enabled Aug 13 01:01:42.998291 kernel: Switched APIC routing to physical x2apic. Aug 13 01:01:42.998306 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Aug 13 01:01:42.998321 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499998) Aug 13 01:01:42.998336 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Aug 13 01:01:42.998351 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Aug 13 01:01:42.998369 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Aug 13 01:01:42.998398 kernel: Spectre V2 : Mitigation: Retpolines Aug 13 01:01:42.998413 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Aug 13 01:01:42.998428 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Aug 13 01:01:42.998443 kernel: RETBleed: Vulnerable Aug 13 01:01:42.998458 kernel: Speculative Store Bypass: Vulnerable Aug 13 01:01:42.998472 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Aug 13 01:01:42.998487 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Aug 13 01:01:42.998502 kernel: GDS: Unknown: Dependent on hypervisor status Aug 13 01:01:42.998516 kernel: ITS: Mitigation: Aligned branch/return thunks Aug 13 01:01:42.998531 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Aug 13 01:01:42.998549 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Aug 13 01:01:42.998565 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Aug 13 01:01:42.998580 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Aug 13 01:01:42.998595 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Aug 13 01:01:42.998609 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Aug 13 01:01:42.998624 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Aug 13 01:01:42.998638 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Aug 13 01:01:42.998653 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Aug 13 01:01:42.998668 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Aug 13 01:01:42.998684 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Aug 13 01:01:42.998698 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Aug 13 01:01:42.998716 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Aug 13 01:01:42.998730 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Aug 13 01:01:42.998745 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Aug 13 01:01:42.998760 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Aug 13 01:01:42.998775 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Aug 13 01:01:42.998790 kernel: Freeing SMP alternatives memory: 32K Aug 13 01:01:42.998804 kernel: pid_max: default: 32768 minimum: 301 Aug 13 01:01:42.998819 kernel: LSM: Security Framework initializing Aug 13 01:01:42.998830 kernel: SELinux: Initializing. Aug 13 01:01:42.998841 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Aug 13 01:01:42.998853 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Aug 13 01:01:42.998868 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Aug 13 01:01:42.998881 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Aug 13 01:01:42.998894 kernel: signal: max sigframe size: 3632 Aug 13 01:01:42.998907 kernel: rcu: Hierarchical SRCU implementation. Aug 13 01:01:42.998920 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Aug 13 01:01:42.998933 kernel: smp: Bringing up secondary CPUs ... Aug 13 01:01:42.998946 kernel: x86: Booting SMP configuration: Aug 13 01:01:42.998959 kernel: .... node #0, CPUs: #1 Aug 13 01:01:42.998972 kernel: kvm-clock: cpu 1, msr 1419e041, secondary cpu clock Aug 13 01:01:42.998984 kernel: kvm-guest: stealtime: cpu 1, msr 7a51c0c0 Aug 13 01:01:42.999001 kernel: Transient Scheduler Attacks: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Aug 13 01:01:42.999015 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Aug 13 01:01:42.999028 kernel: smp: Brought up 1 node, 2 CPUs Aug 13 01:01:42.999040 kernel: smpboot: Max logical packages: 1 Aug 13 01:01:42.999053 kernel: smpboot: Total of 2 processors activated (9999.99 BogoMIPS) Aug 13 01:01:42.999066 kernel: devtmpfs: initialized Aug 13 01:01:42.999078 kernel: x86/mm: Memory block size: 128MB Aug 13 01:01:42.999091 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7895e000-0x789ddfff] (524288 bytes) Aug 13 01:01:42.999108 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Aug 13 01:01:42.999120 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Aug 13 01:01:42.999133 kernel: pinctrl core: initialized pinctrl subsystem Aug 13 01:01:42.999146 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Aug 13 01:01:42.999158 kernel: audit: initializing netlink subsys (disabled) Aug 13 01:01:42.999171 kernel: audit: type=2000 audit(1755046902.562:1): state=initialized audit_enabled=0 res=1 Aug 13 01:01:42.999183 kernel: thermal_sys: Registered thermal governor 'step_wise' Aug 13 01:01:42.999195 kernel: thermal_sys: Registered thermal governor 'user_space' Aug 13 01:01:42.999208 kernel: cpuidle: using governor menu Aug 13 01:01:42.999223 kernel: ACPI: bus type PCI registered Aug 13 01:01:42.999235 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Aug 13 01:01:42.999248 kernel: dca service started, version 1.12.1 Aug 13 01:01:42.999260 kernel: PCI: Using configuration type 1 for base access Aug 13 01:01:42.999273 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Aug 13 01:01:42.999285 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Aug 13 01:01:42.999298 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Aug 13 01:01:42.999311 kernel: ACPI: Added _OSI(Module Device) Aug 13 01:01:42.999324 kernel: ACPI: Added _OSI(Processor Device) Aug 13 01:01:42.999339 kernel: ACPI: Added _OSI(Processor Aggregator Device) Aug 13 01:01:42.999351 kernel: ACPI: Added _OSI(Linux-Dell-Video) Aug 13 01:01:42.999364 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Aug 13 01:01:42.999389 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Aug 13 01:01:42.999402 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Aug 13 01:01:42.999414 kernel: ACPI: Interpreter enabled Aug 13 01:01:42.999427 kernel: ACPI: PM: (supports S0 S5) Aug 13 01:01:42.999440 kernel: ACPI: Using IOAPIC for interrupt routing Aug 13 01:01:42.999453 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Aug 13 01:01:42.999469 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Aug 13 01:01:42.999482 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Aug 13 01:01:42.999692 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Aug 13 01:01:42.999815 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Aug 13 01:01:42.999832 kernel: acpiphp: Slot [3] registered Aug 13 01:01:42.999845 kernel: acpiphp: Slot [4] registered Aug 13 01:01:42.999858 kernel: acpiphp: Slot [5] registered Aug 13 01:01:42.999870 kernel: acpiphp: Slot [6] registered Aug 13 01:01:42.999886 kernel: acpiphp: Slot [7] registered Aug 13 01:01:42.999899 kernel: acpiphp: Slot [8] registered Aug 13 01:01:42.999911 kernel: acpiphp: Slot [9] registered Aug 13 01:01:42.999925 kernel: acpiphp: Slot [10] registered Aug 13 01:01:42.999937 kernel: acpiphp: Slot [11] registered Aug 13 01:01:42.999950 kernel: acpiphp: Slot [12] registered Aug 13 01:01:42.999962 kernel: acpiphp: Slot [13] registered Aug 13 01:01:42.999974 kernel: acpiphp: Slot [14] registered Aug 13 01:01:42.999986 kernel: acpiphp: Slot [15] registered Aug 13 01:01:43.000002 kernel: acpiphp: Slot [16] registered Aug 13 01:01:43.000015 kernel: acpiphp: Slot [17] registered Aug 13 01:01:43.000027 kernel: acpiphp: Slot [18] registered Aug 13 01:01:43.000040 kernel: acpiphp: Slot [19] registered Aug 13 01:01:43.000052 kernel: acpiphp: Slot [20] registered Aug 13 01:01:43.000065 kernel: acpiphp: Slot [21] registered Aug 13 01:01:43.000077 kernel: acpiphp: Slot [22] registered Aug 13 01:01:43.000089 kernel: acpiphp: Slot [23] registered Aug 13 01:01:43.000101 kernel: acpiphp: Slot [24] registered Aug 13 01:01:43.000114 kernel: acpiphp: Slot [25] registered Aug 13 01:01:43.000129 kernel: acpiphp: Slot [26] registered Aug 13 01:01:43.000141 kernel: acpiphp: Slot [27] registered Aug 13 01:01:43.003852 kernel: acpiphp: Slot [28] registered Aug 13 01:01:43.003867 kernel: acpiphp: Slot [29] registered Aug 13 01:01:43.003881 kernel: acpiphp: Slot [30] registered Aug 13 01:01:43.003894 kernel: acpiphp: Slot [31] registered Aug 13 01:01:43.003907 kernel: PCI host bridge to bus 0000:00 Aug 13 01:01:43.004072 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Aug 13 01:01:43.004201 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Aug 13 01:01:43.004319 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Aug 13 01:01:43.004457 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Aug 13 01:01:43.004572 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x2000ffffffff window] Aug 13 01:01:43.004686 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Aug 13 01:01:43.004832 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Aug 13 01:01:43.004972 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Aug 13 01:01:43.005116 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Aug 13 01:01:43.005248 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Aug 13 01:01:43.005408 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Aug 13 01:01:43.005537 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Aug 13 01:01:43.005666 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Aug 13 01:01:43.005791 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Aug 13 01:01:43.005921 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Aug 13 01:01:43.006046 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Aug 13 01:01:43.006183 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Aug 13 01:01:43.006311 kernel: pci 0000:00:03.0: reg 0x10: [mem 0x80000000-0x803fffff pref] Aug 13 01:01:43.006455 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Aug 13 01:01:43.006581 kernel: pci 0000:00:03.0: BAR 0: assigned to efifb Aug 13 01:01:43.006701 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Aug 13 01:01:43.006844 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Aug 13 01:01:43.006982 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80404000-0x80407fff] Aug 13 01:01:43.007126 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Aug 13 01:01:43.007254 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80400000-0x80403fff] Aug 13 01:01:43.007272 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Aug 13 01:01:43.007288 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Aug 13 01:01:43.007303 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Aug 13 01:01:43.007317 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Aug 13 01:01:43.007335 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Aug 13 01:01:43.007350 kernel: iommu: Default domain type: Translated Aug 13 01:01:43.007365 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Aug 13 01:01:43.007514 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Aug 13 01:01:43.007640 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Aug 13 01:01:43.007765 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Aug 13 01:01:43.007783 kernel: vgaarb: loaded Aug 13 01:01:43.007798 kernel: pps_core: LinuxPPS API ver. 1 registered Aug 13 01:01:43.007816 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Aug 13 01:01:43.007831 kernel: PTP clock support registered Aug 13 01:01:43.007845 kernel: Registered efivars operations Aug 13 01:01:43.007860 kernel: PCI: Using ACPI for IRQ routing Aug 13 01:01:43.007874 kernel: PCI: pci_cache_line_size set to 64 bytes Aug 13 01:01:43.007889 kernel: e820: reserve RAM buffer [mem 0x76813018-0x77ffffff] Aug 13 01:01:43.007903 kernel: e820: reserve RAM buffer [mem 0x786ce000-0x7bffffff] Aug 13 01:01:43.007917 kernel: e820: reserve RAM buffer [mem 0x7c97c000-0x7fffffff] Aug 13 01:01:43.007931 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Aug 13 01:01:43.007948 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Aug 13 01:01:43.007962 kernel: clocksource: Switched to clocksource kvm-clock Aug 13 01:01:43.007977 kernel: VFS: Disk quotas dquot_6.6.0 Aug 13 01:01:43.007992 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Aug 13 01:01:43.008007 kernel: pnp: PnP ACPI init Aug 13 01:01:43.008021 kernel: pnp: PnP ACPI: found 5 devices Aug 13 01:01:43.008035 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Aug 13 01:01:43.008050 kernel: NET: Registered PF_INET protocol family Aug 13 01:01:43.008065 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Aug 13 01:01:43.008082 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Aug 13 01:01:43.008097 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Aug 13 01:01:43.008111 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Aug 13 01:01:43.008125 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Aug 13 01:01:43.008140 kernel: TCP: Hash tables configured (established 16384 bind 16384) Aug 13 01:01:43.008155 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Aug 13 01:01:43.008169 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Aug 13 01:01:43.008183 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Aug 13 01:01:43.008199 kernel: NET: Registered PF_XDP protocol family Aug 13 01:01:43.008318 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Aug 13 01:01:43.008444 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Aug 13 01:01:43.008558 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Aug 13 01:01:43.008672 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Aug 13 01:01:43.008785 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x2000ffffffff window] Aug 13 01:01:43.008914 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Aug 13 01:01:43.009042 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Aug 13 01:01:43.009063 kernel: PCI: CLS 0 bytes, default 64 Aug 13 01:01:43.009078 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Aug 13 01:01:43.009093 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Aug 13 01:01:43.009107 kernel: clocksource: Switched to clocksource tsc Aug 13 01:01:43.009122 kernel: Initialise system trusted keyrings Aug 13 01:01:43.009136 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Aug 13 01:01:43.009151 kernel: Key type asymmetric registered Aug 13 01:01:43.009165 kernel: Asymmetric key parser 'x509' registered Aug 13 01:01:43.009179 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Aug 13 01:01:43.009196 kernel: io scheduler mq-deadline registered Aug 13 01:01:43.009210 kernel: io scheduler kyber registered Aug 13 01:01:43.009225 kernel: io scheduler bfq registered Aug 13 01:01:43.009240 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Aug 13 01:01:43.009254 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Aug 13 01:01:43.009268 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Aug 13 01:01:43.009283 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Aug 13 01:01:43.009297 kernel: i8042: Warning: Keylock active Aug 13 01:01:43.009311 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Aug 13 01:01:43.009328 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Aug 13 01:01:43.009491 kernel: rtc_cmos 00:00: RTC can wake from S4 Aug 13 01:01:43.009613 kernel: rtc_cmos 00:00: registered as rtc0 Aug 13 01:01:43.009729 kernel: rtc_cmos 00:00: setting system clock to 2025-08-13T01:01:42 UTC (1755046902) Aug 13 01:01:43.009845 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Aug 13 01:01:43.009863 kernel: intel_pstate: CPU model not supported Aug 13 01:01:43.009877 kernel: efifb: probing for efifb Aug 13 01:01:43.009892 kernel: efifb: framebuffer at 0x80000000, using 1876k, total 1875k Aug 13 01:01:43.009910 kernel: efifb: mode is 800x600x32, linelength=3200, pages=1 Aug 13 01:01:43.009925 kernel: efifb: scrolling: redraw Aug 13 01:01:43.009939 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Aug 13 01:01:43.009954 kernel: Console: switching to colour frame buffer device 100x37 Aug 13 01:01:43.009968 kernel: fb0: EFI VGA frame buffer device Aug 13 01:01:43.009983 kernel: pstore: Registered efi as persistent store backend Aug 13 01:01:43.010020 kernel: NET: Registered PF_INET6 protocol family Aug 13 01:01:43.010037 kernel: Segment Routing with IPv6 Aug 13 01:01:43.010050 kernel: In-situ OAM (IOAM) with IPv6 Aug 13 01:01:43.010065 kernel: NET: Registered PF_PACKET protocol family Aug 13 01:01:43.010078 kernel: Key type dns_resolver registered Aug 13 01:01:43.010091 kernel: IPI shorthand broadcast: enabled Aug 13 01:01:43.010105 kernel: sched_clock: Marking stable (387534159, 160535789)->(632663878, -84593930) Aug 13 01:01:43.010120 kernel: registered taskstats version 1 Aug 13 01:01:43.010134 kernel: Loading compiled-in X.509 certificates Aug 13 01:01:43.010149 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.189-flatcar: 1d5a64b5798e654719a8bd91d683e7e9894bd433' Aug 13 01:01:43.010162 kernel: Key type .fscrypt registered Aug 13 01:01:43.010176 kernel: Key type fscrypt-provisioning registered Aug 13 01:01:43.010194 kernel: pstore: Using crash dump compression: deflate Aug 13 01:01:43.010209 kernel: ima: No TPM chip found, activating TPM-bypass! Aug 13 01:01:43.010225 kernel: ima: Allocated hash algorithm: sha1 Aug 13 01:01:43.010241 kernel: ima: No architecture policies found Aug 13 01:01:43.010256 kernel: clk: Disabling unused clocks Aug 13 01:01:43.010272 kernel: Freeing unused kernel image (initmem) memory: 47488K Aug 13 01:01:43.010288 kernel: Write protecting the kernel read-only data: 28672k Aug 13 01:01:43.010304 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Aug 13 01:01:43.010319 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Aug 13 01:01:43.010338 kernel: Run /init as init process Aug 13 01:01:43.010354 kernel: with arguments: Aug 13 01:01:43.010369 kernel: /init Aug 13 01:01:43.010445 kernel: with environment: Aug 13 01:01:43.010460 kernel: HOME=/ Aug 13 01:01:43.010476 kernel: TERM=linux Aug 13 01:01:43.010491 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Aug 13 01:01:43.010510 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 01:01:43.010532 systemd[1]: Detected virtualization amazon. Aug 13 01:01:43.010549 systemd[1]: Detected architecture x86-64. Aug 13 01:01:43.010564 systemd[1]: Running in initrd. Aug 13 01:01:43.010580 systemd[1]: No hostname configured, using default hostname. Aug 13 01:01:43.010596 systemd[1]: Hostname set to . Aug 13 01:01:43.010613 systemd[1]: Initializing machine ID from VM UUID. Aug 13 01:01:43.010630 systemd[1]: Queued start job for default target initrd.target. Aug 13 01:01:43.010647 systemd[1]: Started systemd-ask-password-console.path. Aug 13 01:01:43.010664 systemd[1]: Reached target cryptsetup.target. Aug 13 01:01:43.010679 systemd[1]: Reached target paths.target. Aug 13 01:01:43.010693 systemd[1]: Reached target slices.target. Aug 13 01:01:43.010709 systemd[1]: Reached target swap.target. Aug 13 01:01:43.010725 systemd[1]: Reached target timers.target. Aug 13 01:01:43.010746 systemd[1]: Listening on iscsid.socket. Aug 13 01:01:43.010763 systemd[1]: Listening on iscsiuio.socket. Aug 13 01:01:43.010779 systemd[1]: Listening on systemd-journald-audit.socket. Aug 13 01:01:43.010796 systemd[1]: Listening on systemd-journald-dev-log.socket. Aug 13 01:01:43.010813 systemd[1]: Listening on systemd-journald.socket. Aug 13 01:01:43.010830 systemd[1]: Listening on systemd-networkd.socket. Aug 13 01:01:43.010846 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 01:01:43.010863 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 01:01:43.010885 systemd[1]: Reached target sockets.target. Aug 13 01:01:43.010902 systemd[1]: Starting kmod-static-nodes.service... Aug 13 01:01:43.010918 systemd[1]: Finished network-cleanup.service. Aug 13 01:01:43.010935 systemd[1]: Starting systemd-fsck-usr.service... Aug 13 01:01:43.010952 systemd[1]: Starting systemd-journald.service... Aug 13 01:01:43.010968 systemd[1]: Starting systemd-modules-load.service... Aug 13 01:01:43.010986 systemd[1]: Starting systemd-resolved.service... Aug 13 01:01:43.011003 systemd[1]: Starting systemd-vconsole-setup.service... Aug 13 01:01:43.011019 systemd[1]: Finished kmod-static-nodes.service. Aug 13 01:01:43.011038 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Aug 13 01:01:43.011061 systemd-journald[185]: Journal started Aug 13 01:01:43.011138 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2cf3ad944be60a3163c03cb4088b0a) is 4.8M, max 38.3M, 33.5M free. Aug 13 01:01:43.032702 systemd[1]: Started systemd-journald.service. Aug 13 01:01:43.032772 kernel: audit: type=1130 audit(1755046903.014:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.032801 kernel: audit: type=1130 audit(1755046903.027:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.032821 kernel: audit: type=1130 audit(1755046903.029:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.032840 kernel: audit: type=1130 audit(1755046903.030:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.023495 systemd-modules-load[186]: Inserted module 'overlay' Aug 13 01:01:43.028478 systemd[1]: Finished systemd-fsck-usr.service. Aug 13 01:01:43.029686 systemd[1]: Finished systemd-vconsole-setup.service. Aug 13 01:01:43.031738 systemd[1]: Starting dracut-cmdline-ask.service... Aug 13 01:01:43.045369 systemd-resolved[187]: Positive Trust Anchors: Aug 13 01:01:43.052637 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 01:01:43.052706 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 01:01:43.057039 systemd-resolved[187]: Defaulting to hostname 'linux'. Aug 13 01:01:43.074272 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 01:01:43.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.082803 systemd[1]: Started systemd-resolved.service. Aug 13 01:01:43.100788 kernel: audit: type=1130 audit(1755046903.083:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.100822 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Aug 13 01:01:43.084078 systemd[1]: Reached target nss-lookup.target. Aug 13 01:01:43.103571 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 01:01:43.127552 kernel: audit: type=1130 audit(1755046903.104:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.127588 kernel: Bridge firewalling registered Aug 13 01:01:43.127609 kernel: audit: type=1130 audit(1755046903.117:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.112718 systemd-modules-load[186]: Inserted module 'br_netfilter' Aug 13 01:01:43.116764 systemd[1]: Finished dracut-cmdline-ask.service. Aug 13 01:01:43.119197 systemd[1]: Starting dracut-cmdline.service... Aug 13 01:01:43.139029 dracut-cmdline[203]: dracut-dracut-053 Aug 13 01:01:43.143278 dracut-cmdline[203]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=8f8aacd9fbcdd713563d390e899e90bedf5577e4b1b261b4e57687d87edd6b57 Aug 13 01:01:43.153431 kernel: SCSI subsystem initialized Aug 13 01:01:43.170803 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Aug 13 01:01:43.170881 kernel: device-mapper: uevent: version 1.0.3 Aug 13 01:01:43.173949 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Aug 13 01:01:43.178462 systemd-modules-load[186]: Inserted module 'dm_multipath' Aug 13 01:01:43.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.180670 systemd[1]: Finished systemd-modules-load.service. Aug 13 01:01:43.189607 kernel: audit: type=1130 audit(1755046903.181:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.189836 systemd[1]: Starting systemd-sysctl.service... Aug 13 01:01:43.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.199652 systemd[1]: Finished systemd-sysctl.service. Aug 13 01:01:43.208187 kernel: audit: type=1130 audit(1755046903.200:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.241405 kernel: Loading iSCSI transport class v2.0-870. Aug 13 01:01:43.260410 kernel: iscsi: registered transport (tcp) Aug 13 01:01:43.285417 kernel: iscsi: registered transport (qla4xxx) Aug 13 01:01:43.285502 kernel: QLogic iSCSI HBA Driver Aug 13 01:01:43.317594 systemd[1]: Finished dracut-cmdline.service. Aug 13 01:01:43.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.319546 systemd[1]: Starting dracut-pre-udev.service... Aug 13 01:01:43.371406 kernel: raid6: avx512x4 gen() 18146 MB/s Aug 13 01:01:43.389413 kernel: raid6: avx512x4 xor() 7927 MB/s Aug 13 01:01:43.407406 kernel: raid6: avx512x2 gen() 17956 MB/s Aug 13 01:01:43.425416 kernel: raid6: avx512x2 xor() 24052 MB/s Aug 13 01:01:43.443406 kernel: raid6: avx512x1 gen() 17667 MB/s Aug 13 01:01:43.461412 kernel: raid6: avx512x1 xor() 21565 MB/s Aug 13 01:01:43.479408 kernel: raid6: avx2x4 gen() 17673 MB/s Aug 13 01:01:43.497423 kernel: raid6: avx2x4 xor() 7513 MB/s Aug 13 01:01:43.515406 kernel: raid6: avx2x2 gen() 17701 MB/s Aug 13 01:01:43.533417 kernel: raid6: avx2x2 xor() 17896 MB/s Aug 13 01:01:43.551419 kernel: raid6: avx2x1 gen() 12804 MB/s Aug 13 01:01:43.569429 kernel: raid6: avx2x1 xor() 15364 MB/s Aug 13 01:01:43.587404 kernel: raid6: sse2x4 gen() 9511 MB/s Aug 13 01:01:43.605416 kernel: raid6: sse2x4 xor() 6030 MB/s Aug 13 01:01:43.623406 kernel: raid6: sse2x2 gen() 10456 MB/s Aug 13 01:01:43.641411 kernel: raid6: sse2x2 xor() 6090 MB/s Aug 13 01:01:43.659401 kernel: raid6: sse2x1 gen() 9413 MB/s Aug 13 01:01:43.677964 kernel: raid6: sse2x1 xor() 4801 MB/s Aug 13 01:01:43.678019 kernel: raid6: using algorithm avx512x4 gen() 18146 MB/s Aug 13 01:01:43.678039 kernel: raid6: .... xor() 7927 MB/s, rmw enabled Aug 13 01:01:43.679230 kernel: raid6: using avx512x2 recovery algorithm Aug 13 01:01:43.694410 kernel: xor: automatically using best checksumming function avx Aug 13 01:01:43.796409 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Aug 13 01:01:43.805867 systemd[1]: Finished dracut-pre-udev.service. Aug 13 01:01:43.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.806000 audit: BPF prog-id=7 op=LOAD Aug 13 01:01:43.806000 audit: BPF prog-id=8 op=LOAD Aug 13 01:01:43.807438 systemd[1]: Starting systemd-udevd.service... Aug 13 01:01:43.820133 systemd-udevd[385]: Using default interface naming scheme 'v252'. Aug 13 01:01:43.825609 systemd[1]: Started systemd-udevd.service. Aug 13 01:01:43.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.828184 systemd[1]: Starting dracut-pre-trigger.service... Aug 13 01:01:43.848151 dracut-pre-trigger[390]: rd.md=0: removing MD RAID activation Aug 13 01:01:43.879709 systemd[1]: Finished dracut-pre-trigger.service. Aug 13 01:01:43.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.881207 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 01:01:43.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:43.923119 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 01:01:43.987422 kernel: cryptd: max_cpu_qlen set to 1000 Aug 13 01:01:43.996431 kernel: ena 0000:00:05.0: ENA device version: 0.10 Aug 13 01:01:44.026572 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Aug 13 01:01:44.026745 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Aug 13 01:01:44.026888 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80400000, mac addr 06:e4:94:f2:1e:6f Aug 13 01:01:44.027029 kernel: nvme nvme0: pci function 0000:00:04.0 Aug 13 01:01:44.027201 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Aug 13 01:01:44.032291 (udev-worker)[443]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:01:44.036920 kernel: AVX2 version of gcm_enc/dec engaged. Aug 13 01:01:44.036951 kernel: AES CTR mode by8 optimization enabled Aug 13 01:01:44.042534 kernel: nvme nvme0: 2/0/0 default/read/poll queues Aug 13 01:01:44.054702 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Aug 13 01:01:44.054767 kernel: GPT:9289727 != 16777215 Aug 13 01:01:44.054788 kernel: GPT:Alternate GPT header not at the end of the disk. Aug 13 01:01:44.058691 kernel: GPT:9289727 != 16777215 Aug 13 01:01:44.058755 kernel: GPT: Use GNU Parted to correct GPT errors. Aug 13 01:01:44.063105 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 01:01:44.125501 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (435) Aug 13 01:01:44.161959 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Aug 13 01:01:44.169881 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Aug 13 01:01:44.180823 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Aug 13 01:01:44.181781 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Aug 13 01:01:44.191924 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 01:01:44.193615 systemd[1]: Starting disk-uuid.service... Aug 13 01:01:44.199800 disk-uuid[592]: Primary Header is updated. Aug 13 01:01:44.199800 disk-uuid[592]: Secondary Entries is updated. Aug 13 01:01:44.199800 disk-uuid[592]: Secondary Header is updated. Aug 13 01:01:44.206415 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 01:01:44.214428 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 01:01:44.219412 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 01:01:45.223413 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 01:01:45.223983 disk-uuid[593]: The operation has completed successfully. Aug 13 01:01:45.365446 systemd[1]: disk-uuid.service: Deactivated successfully. Aug 13 01:01:45.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.365569 systemd[1]: Finished disk-uuid.service. Aug 13 01:01:45.372618 systemd[1]: Starting verity-setup.service... Aug 13 01:01:45.392404 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Aug 13 01:01:45.498471 systemd[1]: Found device dev-mapper-usr.device. Aug 13 01:01:45.500477 systemd[1]: Mounting sysusr-usr.mount... Aug 13 01:01:45.504306 systemd[1]: Finished verity-setup.service. Aug 13 01:01:45.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.601723 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Aug 13 01:01:45.601051 systemd[1]: Mounted sysusr-usr.mount. Aug 13 01:01:45.601955 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Aug 13 01:01:45.603068 systemd[1]: Starting ignition-setup.service... Aug 13 01:01:45.607969 systemd[1]: Starting parse-ip-for-networkd.service... Aug 13 01:01:45.637355 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Aug 13 01:01:45.637440 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 01:01:45.637463 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 01:01:45.648408 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 01:01:45.662914 systemd[1]: mnt-oem.mount: Deactivated successfully. Aug 13 01:01:45.676493 systemd[1]: Finished ignition-setup.service. Aug 13 01:01:45.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.678497 systemd[1]: Starting ignition-fetch-offline.service... Aug 13 01:01:45.703615 systemd[1]: Finished parse-ip-for-networkd.service. Aug 13 01:01:45.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.705000 audit: BPF prog-id=9 op=LOAD Aug 13 01:01:45.706233 systemd[1]: Starting systemd-networkd.service... Aug 13 01:01:45.732996 systemd-networkd[1105]: lo: Link UP Aug 13 01:01:45.733008 systemd-networkd[1105]: lo: Gained carrier Aug 13 01:01:45.733748 systemd-networkd[1105]: Enumeration completed Aug 13 01:01:45.734044 systemd-networkd[1105]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 01:01:45.735421 systemd[1]: Started systemd-networkd.service. Aug 13 01:01:45.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.738602 systemd[1]: Reached target network.target. Aug 13 01:01:45.740561 systemd[1]: Starting iscsiuio.service... Aug 13 01:01:45.748196 systemd[1]: Started iscsiuio.service. Aug 13 01:01:45.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.748812 systemd-networkd[1105]: eth0: Link UP Aug 13 01:01:45.748820 systemd-networkd[1105]: eth0: Gained carrier Aug 13 01:01:45.751609 systemd[1]: Starting iscsid.service... Aug 13 01:01:45.758419 iscsid[1110]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Aug 13 01:01:45.758419 iscsid[1110]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Aug 13 01:01:45.758419 iscsid[1110]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Aug 13 01:01:45.758419 iscsid[1110]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Aug 13 01:01:45.758419 iscsid[1110]: If using hardware iscsi like qla4xxx this message can be ignored. Aug 13 01:01:45.758419 iscsid[1110]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Aug 13 01:01:45.758419 iscsid[1110]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Aug 13 01:01:45.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.760744 systemd[1]: Started iscsid.service. Aug 13 01:01:45.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.764412 systemd[1]: Starting dracut-initqueue.service... Aug 13 01:01:45.764530 systemd-networkd[1105]: eth0: DHCPv4 address 172.31.21.64/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 01:01:45.779723 systemd[1]: Finished dracut-initqueue.service. Aug 13 01:01:45.781569 systemd[1]: Reached target remote-fs-pre.target. Aug 13 01:01:45.783075 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 01:01:45.784500 systemd[1]: Reached target remote-fs.target. Aug 13 01:01:45.787519 systemd[1]: Starting dracut-pre-mount.service... Aug 13 01:01:45.800828 systemd[1]: Finished dracut-pre-mount.service. Aug 13 01:01:45.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.971761 ignition[1081]: Ignition 2.14.0 Aug 13 01:01:45.971774 ignition[1081]: Stage: fetch-offline Aug 13 01:01:45.971890 ignition[1081]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 01:01:45.971920 ignition[1081]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 01:01:45.991086 ignition[1081]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 01:01:45.991622 ignition[1081]: Ignition finished successfully Aug 13 01:01:45.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:45.993239 systemd[1]: Finished ignition-fetch-offline.service. Aug 13 01:01:45.994900 systemd[1]: Starting ignition-fetch.service... Aug 13 01:01:46.003166 ignition[1129]: Ignition 2.14.0 Aug 13 01:01:46.003177 ignition[1129]: Stage: fetch Aug 13 01:01:46.003321 ignition[1129]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 01:01:46.003345 ignition[1129]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 01:01:46.009494 ignition[1129]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 01:01:46.010138 ignition[1129]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 01:01:46.019322 ignition[1129]: INFO : PUT result: OK Aug 13 01:01:46.021272 ignition[1129]: DEBUG : parsed url from cmdline: "" Aug 13 01:01:46.021272 ignition[1129]: INFO : no config URL provided Aug 13 01:01:46.021272 ignition[1129]: INFO : reading system config file "/usr/lib/ignition/user.ign" Aug 13 01:01:46.021272 ignition[1129]: INFO : no config at "/usr/lib/ignition/user.ign" Aug 13 01:01:46.023603 ignition[1129]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 01:01:46.023603 ignition[1129]: INFO : PUT result: OK Aug 13 01:01:46.023603 ignition[1129]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Aug 13 01:01:46.023603 ignition[1129]: INFO : GET result: OK Aug 13 01:01:46.023603 ignition[1129]: DEBUG : parsing config with SHA512: 56a340203c7d70578531c52f7cff316befd8e223bb2f86ca6194b17e9a869579df4661f3f7c1d2f4c625d3b35293c3df24709b108d704039e51a2aaf1b50eb5a Aug 13 01:01:46.028808 unknown[1129]: fetched base config from "system" Aug 13 01:01:46.028823 unknown[1129]: fetched base config from "system" Aug 13 01:01:46.029599 ignition[1129]: fetch: fetch complete Aug 13 01:01:46.028829 unknown[1129]: fetched user config from "aws" Aug 13 01:01:46.029605 ignition[1129]: fetch: fetch passed Aug 13 01:01:46.031350 systemd[1]: Finished ignition-fetch.service. Aug 13 01:01:46.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:46.029647 ignition[1129]: Ignition finished successfully Aug 13 01:01:46.032963 systemd[1]: Starting ignition-kargs.service... Aug 13 01:01:46.043555 ignition[1135]: Ignition 2.14.0 Aug 13 01:01:46.043567 ignition[1135]: Stage: kargs Aug 13 01:01:46.043716 ignition[1135]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 01:01:46.043738 ignition[1135]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 01:01:46.049265 ignition[1135]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 01:01:46.050149 ignition[1135]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 01:01:46.050709 ignition[1135]: INFO : PUT result: OK Aug 13 01:01:46.052598 ignition[1135]: kargs: kargs passed Aug 13 01:01:46.052653 ignition[1135]: Ignition finished successfully Aug 13 01:01:46.053876 systemd[1]: Finished ignition-kargs.service. Aug 13 01:01:46.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:46.055316 systemd[1]: Starting ignition-disks.service... Aug 13 01:01:46.064214 ignition[1141]: Ignition 2.14.0 Aug 13 01:01:46.064227 ignition[1141]: Stage: disks Aug 13 01:01:46.064459 ignition[1141]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 01:01:46.064492 ignition[1141]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 01:01:46.072447 ignition[1141]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 01:01:46.073190 ignition[1141]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 01:01:46.074059 ignition[1141]: INFO : PUT result: OK Aug 13 01:01:46.076476 ignition[1141]: disks: disks passed Aug 13 01:01:46.076545 ignition[1141]: Ignition finished successfully Aug 13 01:01:46.078590 systemd[1]: Finished ignition-disks.service. Aug 13 01:01:46.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:46.079282 systemd[1]: Reached target initrd-root-device.target. Aug 13 01:01:46.080200 systemd[1]: Reached target local-fs-pre.target. Aug 13 01:01:46.081141 systemd[1]: Reached target local-fs.target. Aug 13 01:01:46.082131 systemd[1]: Reached target sysinit.target. Aug 13 01:01:46.083067 systemd[1]: Reached target basic.target. Aug 13 01:01:46.085163 systemd[1]: Starting systemd-fsck-root.service... Aug 13 01:01:46.108517 systemd-fsck[1149]: ROOT: clean, 629/553520 files, 56027/553472 blocks Aug 13 01:01:46.112362 systemd[1]: Finished systemd-fsck-root.service. Aug 13 01:01:46.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:46.114128 systemd[1]: Mounting sysroot.mount... Aug 13 01:01:46.132393 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Aug 13 01:01:46.133197 systemd[1]: Mounted sysroot.mount. Aug 13 01:01:46.134561 systemd[1]: Reached target initrd-root-fs.target. Aug 13 01:01:46.151257 systemd[1]: Mounting sysroot-usr.mount... Aug 13 01:01:46.153055 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Aug 13 01:01:46.153117 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Aug 13 01:01:46.153156 systemd[1]: Reached target ignition-diskful.target. Aug 13 01:01:46.157466 systemd[1]: Mounted sysroot-usr.mount. Aug 13 01:01:46.161962 systemd[1]: Starting initrd-setup-root.service... Aug 13 01:01:46.168197 initrd-setup-root[1170]: cut: /sysroot/etc/passwd: No such file or directory Aug 13 01:01:46.184543 initrd-setup-root[1178]: cut: /sysroot/etc/group: No such file or directory Aug 13 01:01:46.189292 initrd-setup-root[1186]: cut: /sysroot/etc/shadow: No such file or directory Aug 13 01:01:46.194831 initrd-setup-root[1194]: cut: /sysroot/etc/gshadow: No such file or directory Aug 13 01:01:46.243649 systemd[1]: Finished initrd-setup-root.service. Aug 13 01:01:46.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:46.245086 systemd[1]: Starting ignition-mount.service... Aug 13 01:01:46.246530 systemd[1]: Starting sysroot-boot.service... Aug 13 01:01:46.253864 bash[1211]: umount: /sysroot/usr/share/oem: not mounted. Aug 13 01:01:46.264643 ignition[1212]: INFO : Ignition 2.14.0 Aug 13 01:01:46.265615 ignition[1212]: INFO : Stage: mount Aug 13 01:01:46.266360 ignition[1212]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 01:01:46.267490 ignition[1212]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 01:01:46.278389 ignition[1212]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 01:01:46.279786 ignition[1212]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 01:01:46.281115 ignition[1212]: INFO : PUT result: OK Aug 13 01:01:46.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:46.282189 systemd[1]: Finished sysroot-boot.service. Aug 13 01:01:46.284745 ignition[1212]: INFO : mount: mount passed Aug 13 01:01:46.285627 ignition[1212]: INFO : Ignition finished successfully Aug 13 01:01:46.286911 systemd[1]: Finished ignition-mount.service. Aug 13 01:01:46.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:46.535361 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 01:01:46.554428 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1221) Aug 13 01:01:46.559175 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Aug 13 01:01:46.559237 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 01:01:46.559251 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 01:01:46.579416 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 01:01:46.583144 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 01:01:46.585130 systemd[1]: Starting ignition-files.service... Aug 13 01:01:46.603218 ignition[1241]: INFO : Ignition 2.14.0 Aug 13 01:01:46.603218 ignition[1241]: INFO : Stage: files Aug 13 01:01:46.605570 ignition[1241]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 01:01:46.605570 ignition[1241]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 01:01:46.614197 ignition[1241]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 01:01:46.615077 ignition[1241]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 01:01:46.615864 ignition[1241]: INFO : PUT result: OK Aug 13 01:01:46.618773 ignition[1241]: DEBUG : files: compiled without relabeling support, skipping Aug 13 01:01:46.624107 ignition[1241]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Aug 13 01:01:46.624107 ignition[1241]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Aug 13 01:01:46.627783 ignition[1241]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Aug 13 01:01:46.629154 ignition[1241]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Aug 13 01:01:46.630974 ignition[1241]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Aug 13 01:01:46.630974 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Aug 13 01:01:46.630974 ignition[1241]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Aug 13 01:01:46.629171 unknown[1241]: wrote ssh authorized keys file for user: core Aug 13 01:01:47.081773 ignition[1241]: INFO : GET result: OK Aug 13 01:01:47.265404 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Aug 13 01:01:47.266768 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 01:01:47.266768 ignition[1241]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 01:01:47.272444 ignition[1241]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3136056572" Aug 13 01:01:47.272444 ignition[1241]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3136056572": device or resource busy Aug 13 01:01:47.272444 ignition[1241]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3136056572", trying btrfs: device or resource busy Aug 13 01:01:47.272444 ignition[1241]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3136056572" Aug 13 01:01:47.282705 ignition[1241]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3136056572" Aug 13 01:01:47.282705 ignition[1241]: INFO : op(3): [started] unmounting "/mnt/oem3136056572" Aug 13 01:01:47.282705 ignition[1241]: INFO : op(3): [finished] unmounting "/mnt/oem3136056572" Aug 13 01:01:47.282705 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 01:01:47.282705 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Aug 13 01:01:47.279099 systemd[1]: mnt-oem3136056572.mount: Deactivated successfully. Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Aug 13 01:01:47.296500 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 01:01:47.296500 ignition[1241]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 01:01:47.296500 ignition[1241]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2616835349" Aug 13 01:01:47.296500 ignition[1241]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2616835349": device or resource busy Aug 13 01:01:47.296500 ignition[1241]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2616835349", trying btrfs: device or resource busy Aug 13 01:01:47.338793 ignition[1241]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2616835349" Aug 13 01:01:47.338793 ignition[1241]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2616835349" Aug 13 01:01:47.338793 ignition[1241]: INFO : op(6): [started] unmounting "/mnt/oem2616835349" Aug 13 01:01:47.338793 ignition[1241]: INFO : op(6): [finished] unmounting "/mnt/oem2616835349" Aug 13 01:01:47.338793 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 01:01:47.338793 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 01:01:47.338793 ignition[1241]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 01:01:47.338793 ignition[1241]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307936192" Aug 13 01:01:47.338793 ignition[1241]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307936192": device or resource busy Aug 13 01:01:47.338793 ignition[1241]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2307936192", trying btrfs: device or resource busy Aug 13 01:01:47.338793 ignition[1241]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307936192" Aug 13 01:01:47.338793 ignition[1241]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307936192" Aug 13 01:01:47.338793 ignition[1241]: INFO : op(9): [started] unmounting "/mnt/oem2307936192" Aug 13 01:01:47.338793 ignition[1241]: INFO : op(9): [finished] unmounting "/mnt/oem2307936192" Aug 13 01:01:47.338793 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 01:01:47.338793 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 01:01:47.338793 ignition[1241]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 01:01:47.338793 ignition[1241]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4109978652" Aug 13 01:01:47.338793 ignition[1241]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4109978652": device or resource busy Aug 13 01:01:47.338793 ignition[1241]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4109978652", trying btrfs: device or resource busy Aug 13 01:01:47.338793 ignition[1241]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4109978652" Aug 13 01:01:47.319620 systemd-networkd[1105]: eth0: Gained IPv6LL Aug 13 01:01:47.367004 ignition[1241]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4109978652" Aug 13 01:01:47.367004 ignition[1241]: INFO : op(c): [started] unmounting "/mnt/oem4109978652" Aug 13 01:01:47.367004 ignition[1241]: INFO : op(c): [finished] unmounting "/mnt/oem4109978652" Aug 13 01:01:47.367004 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 01:01:47.367004 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Aug 13 01:01:47.367004 ignition[1241]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Aug 13 01:01:47.534046 systemd[1]: mnt-oem2616835349.mount: Deactivated successfully. Aug 13 01:01:47.766809 ignition[1241]: INFO : GET result: OK Aug 13 01:01:48.212443 ignition[1241]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Aug 13 01:01:48.212443 ignition[1241]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Aug 13 01:01:48.212443 ignition[1241]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(12): [started] processing unit "nvidia.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(12): [finished] processing unit "nvidia.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Aug 13 01:01:48.219674 ignition[1241]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Aug 13 01:01:48.292298 kernel: kauditd_printk_skb: 26 callbacks suppressed Aug 13 01:01:48.292333 kernel: audit: type=1130 audit(1755046908.224:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.292355 kernel: audit: type=1130 audit(1755046908.253:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.292388 kernel: audit: type=1131 audit(1755046908.253:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.292415 kernel: audit: type=1130 audit(1755046908.266:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.292633 ignition[1241]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Aug 13 01:01:48.292633 ignition[1241]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Aug 13 01:01:48.292633 ignition[1241]: INFO : files: files passed Aug 13 01:01:48.292633 ignition[1241]: INFO : Ignition finished successfully Aug 13 01:01:48.311525 kernel: audit: type=1130 audit(1755046908.299:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.311564 kernel: audit: type=1131 audit(1755046908.299:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.223742 systemd[1]: Finished ignition-files.service. Aug 13 01:01:48.233900 systemd[1]: Starting initrd-setup-root-after-ignition.service... Aug 13 01:01:48.315246 initrd-setup-root-after-ignition[1265]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Aug 13 01:01:48.245231 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Aug 13 01:01:48.246616 systemd[1]: Starting ignition-quench.service... Aug 13 01:01:48.251447 systemd[1]: ignition-quench.service: Deactivated successfully. Aug 13 01:01:48.251576 systemd[1]: Finished ignition-quench.service. Aug 13 01:01:48.254055 systemd[1]: Finished initrd-setup-root-after-ignition.service. Aug 13 01:01:48.266911 systemd[1]: Reached target ignition-complete.target. Aug 13 01:01:48.275604 systemd[1]: Starting initrd-parse-etc.service... Aug 13 01:01:48.298404 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Aug 13 01:01:48.298527 systemd[1]: Finished initrd-parse-etc.service. Aug 13 01:01:48.341798 kernel: audit: type=1130 audit(1755046908.333:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.299563 systemd[1]: Reached target initrd-fs.target. Aug 13 01:01:48.312563 systemd[1]: Reached target initrd.target. Aug 13 01:01:48.314216 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Aug 13 01:01:48.315545 systemd[1]: Starting dracut-pre-pivot.service... Aug 13 01:01:48.332283 systemd[1]: Finished dracut-pre-pivot.service. Aug 13 01:01:48.334740 systemd[1]: Starting initrd-cleanup.service... Aug 13 01:01:48.350992 systemd[1]: Stopped target nss-lookup.target. Aug 13 01:01:48.352513 systemd[1]: Stopped target remote-cryptsetup.target. Aug 13 01:01:48.353680 systemd[1]: Stopped target timers.target. Aug 13 01:01:48.354847 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Aug 13 01:01:48.361271 kernel: audit: type=1131 audit(1755046908.355:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.355021 systemd[1]: Stopped dracut-pre-pivot.service. Aug 13 01:01:48.356279 systemd[1]: Stopped target initrd.target. Aug 13 01:01:48.362209 systemd[1]: Stopped target basic.target. Aug 13 01:01:48.363389 systemd[1]: Stopped target ignition-complete.target. Aug 13 01:01:48.364575 systemd[1]: Stopped target ignition-diskful.target. Aug 13 01:01:48.365764 systemd[1]: Stopped target initrd-root-device.target. Aug 13 01:01:48.366895 systemd[1]: Stopped target remote-fs.target. Aug 13 01:01:48.368014 systemd[1]: Stopped target remote-fs-pre.target. Aug 13 01:01:48.369162 systemd[1]: Stopped target sysinit.target. Aug 13 01:01:48.370394 systemd[1]: Stopped target local-fs.target. Aug 13 01:01:48.371503 systemd[1]: Stopped target local-fs-pre.target. Aug 13 01:01:48.372597 systemd[1]: Stopped target swap.target. Aug 13 01:01:48.380130 kernel: audit: type=1131 audit(1755046908.374:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.373760 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Aug 13 01:01:48.373963 systemd[1]: Stopped dracut-pre-mount.service. Aug 13 01:01:48.387512 kernel: audit: type=1131 audit(1755046908.381:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.375098 systemd[1]: Stopped target cryptsetup.target. Aug 13 01:01:48.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.380877 systemd[1]: dracut-initqueue.service: Deactivated successfully. Aug 13 01:01:48.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.381083 systemd[1]: Stopped dracut-initqueue.service. Aug 13 01:01:48.382437 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Aug 13 01:01:48.382653 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Aug 13 01:01:48.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.388408 systemd[1]: ignition-files.service: Deactivated successfully. Aug 13 01:01:48.388626 systemd[1]: Stopped ignition-files.service. Aug 13 01:01:48.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.391053 systemd[1]: Stopping ignition-mount.service... Aug 13 01:01:48.393656 systemd[1]: Stopping sysroot-boot.service... Aug 13 01:01:48.394672 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Aug 13 01:01:48.394903 systemd[1]: Stopped systemd-udev-trigger.service. Aug 13 01:01:48.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.398372 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Aug 13 01:01:48.399781 systemd[1]: Stopped dracut-pre-trigger.service. Aug 13 01:01:48.407917 systemd[1]: initrd-cleanup.service: Deactivated successfully. Aug 13 01:01:48.408044 systemd[1]: Finished initrd-cleanup.service. Aug 13 01:01:48.418409 ignition[1279]: INFO : Ignition 2.14.0 Aug 13 01:01:48.418409 ignition[1279]: INFO : Stage: umount Aug 13 01:01:48.418409 ignition[1279]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 01:01:48.418409 ignition[1279]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 01:01:48.429420 systemd[1]: sysroot-boot.mount: Deactivated successfully. Aug 13 01:01:48.432449 ignition[1279]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 01:01:48.433564 ignition[1279]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 01:01:48.434311 ignition[1279]: INFO : PUT result: OK Aug 13 01:01:48.438371 ignition[1279]: INFO : umount: umount passed Aug 13 01:01:48.438371 ignition[1279]: INFO : Ignition finished successfully Aug 13 01:01:48.439709 systemd[1]: ignition-mount.service: Deactivated successfully. Aug 13 01:01:48.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.439855 systemd[1]: Stopped ignition-mount.service. Aug 13 01:01:48.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.441015 systemd[1]: ignition-disks.service: Deactivated successfully. Aug 13 01:01:48.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.441083 systemd[1]: Stopped ignition-disks.service. Aug 13 01:01:48.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.442396 systemd[1]: ignition-kargs.service: Deactivated successfully. Aug 13 01:01:48.442490 systemd[1]: Stopped ignition-kargs.service. Aug 13 01:01:48.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.443573 systemd[1]: ignition-fetch.service: Deactivated successfully. Aug 13 01:01:48.443658 systemd[1]: Stopped ignition-fetch.service. Aug 13 01:01:48.444756 systemd[1]: Stopped target network.target. Aug 13 01:01:48.446173 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Aug 13 01:01:48.446241 systemd[1]: Stopped ignition-fetch-offline.service. Aug 13 01:01:48.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.447345 systemd[1]: Stopped target paths.target. Aug 13 01:01:48.448455 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Aug 13 01:01:48.450437 systemd[1]: Stopped systemd-ask-password-console.path. Aug 13 01:01:48.451449 systemd[1]: Stopped target slices.target. Aug 13 01:01:48.453064 systemd[1]: Stopped target sockets.target. Aug 13 01:01:48.454456 systemd[1]: iscsid.socket: Deactivated successfully. Aug 13 01:01:48.454490 systemd[1]: Closed iscsid.socket. Aug 13 01:01:48.455234 systemd[1]: iscsiuio.socket: Deactivated successfully. Aug 13 01:01:48.455271 systemd[1]: Closed iscsiuio.socket. Aug 13 01:01:48.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.455891 systemd[1]: ignition-setup.service: Deactivated successfully. Aug 13 01:01:48.455942 systemd[1]: Stopped ignition-setup.service. Aug 13 01:01:48.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.456660 systemd[1]: Stopping systemd-networkd.service... Aug 13 01:01:48.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.457321 systemd[1]: Stopping systemd-resolved.service... Aug 13 01:01:48.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.461451 systemd-networkd[1105]: eth0: DHCPv6 lease lost Aug 13 01:01:48.474000 audit: BPF prog-id=9 op=UNLOAD Aug 13 01:01:48.462741 systemd[1]: systemd-networkd.service: Deactivated successfully. Aug 13 01:01:48.462843 systemd[1]: Stopped systemd-networkd.service. Aug 13 01:01:48.464141 systemd[1]: systemd-networkd.socket: Deactivated successfully. Aug 13 01:01:48.464190 systemd[1]: Closed systemd-networkd.socket. Aug 13 01:01:48.467096 systemd[1]: Stopping network-cleanup.service... Aug 13 01:01:48.468352 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Aug 13 01:01:48.468448 systemd[1]: Stopped parse-ip-for-networkd.service. Aug 13 01:01:48.469211 systemd[1]: systemd-sysctl.service: Deactivated successfully. Aug 13 01:01:48.469257 systemd[1]: Stopped systemd-sysctl.service. Aug 13 01:01:48.470168 systemd[1]: systemd-modules-load.service: Deactivated successfully. Aug 13 01:01:48.470228 systemd[1]: Stopped systemd-modules-load.service. Aug 13 01:01:48.476300 systemd[1]: Stopping systemd-udevd.service... Aug 13 01:01:48.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.481500 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Aug 13 01:01:48.484754 systemd[1]: systemd-resolved.service: Deactivated successfully. Aug 13 01:01:48.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.484902 systemd[1]: Stopped systemd-resolved.service. Aug 13 01:01:48.486677 systemd[1]: systemd-udevd.service: Deactivated successfully. Aug 13 01:01:48.490000 audit: BPF prog-id=6 op=UNLOAD Aug 13 01:01:48.486853 systemd[1]: Stopped systemd-udevd.service. Aug 13 01:01:48.490119 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Aug 13 01:01:48.490184 systemd[1]: Closed systemd-udevd-control.socket. Aug 13 01:01:48.492528 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Aug 13 01:01:48.492580 systemd[1]: Closed systemd-udevd-kernel.socket. Aug 13 01:01:48.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.495023 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Aug 13 01:01:48.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.495094 systemd[1]: Stopped dracut-pre-udev.service. Aug 13 01:01:48.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.496195 systemd[1]: dracut-cmdline.service: Deactivated successfully. Aug 13 01:01:48.496257 systemd[1]: Stopped dracut-cmdline.service. Aug 13 01:01:48.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.497501 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Aug 13 01:01:48.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.497573 systemd[1]: Stopped dracut-cmdline-ask.service. Aug 13 01:01:48.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.499731 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Aug 13 01:01:48.502574 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Aug 13 01:01:48.502670 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Aug 13 01:01:48.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.503784 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Aug 13 01:01:48.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.503841 systemd[1]: Stopped kmod-static-nodes.service. Aug 13 01:01:48.506065 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Aug 13 01:01:48.506127 systemd[1]: Stopped systemd-vconsole-setup.service. Aug 13 01:01:48.510854 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Aug 13 01:01:48.511945 systemd[1]: network-cleanup.service: Deactivated successfully. Aug 13 01:01:48.512072 systemd[1]: Stopped network-cleanup.service. Aug 13 01:01:48.513156 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Aug 13 01:01:48.513268 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Aug 13 01:01:48.578035 systemd[1]: sysroot-boot.service: Deactivated successfully. Aug 13 01:01:48.578155 systemd[1]: Stopped sysroot-boot.service. Aug 13 01:01:48.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.579626 systemd[1]: Reached target initrd-switch-root.target. Aug 13 01:01:48.580779 systemd[1]: initrd-setup-root.service: Deactivated successfully. Aug 13 01:01:48.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.580861 systemd[1]: Stopped initrd-setup-root.service. Aug 13 01:01:48.583238 systemd[1]: Starting initrd-switch-root.service... Aug 13 01:01:48.596205 systemd[1]: Switching root. Aug 13 01:01:48.619800 iscsid[1110]: iscsid shutting down. Aug 13 01:01:48.622683 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). Aug 13 01:01:48.622742 systemd-journald[185]: Journal stopped Aug 13 01:01:52.148676 kernel: SELinux: Class mctp_socket not defined in policy. Aug 13 01:01:52.148763 kernel: SELinux: Class anon_inode not defined in policy. Aug 13 01:01:52.148783 kernel: SELinux: the above unknown classes and permissions will be allowed Aug 13 01:01:52.148806 kernel: SELinux: policy capability network_peer_controls=1 Aug 13 01:01:52.148823 kernel: SELinux: policy capability open_perms=1 Aug 13 01:01:52.148844 kernel: SELinux: policy capability extended_socket_class=1 Aug 13 01:01:52.148862 kernel: SELinux: policy capability always_check_network=0 Aug 13 01:01:52.148889 kernel: SELinux: policy capability cgroup_seclabel=1 Aug 13 01:01:52.148911 kernel: SELinux: policy capability nnp_nosuid_transition=1 Aug 13 01:01:52.148937 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Aug 13 01:01:52.148954 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Aug 13 01:01:52.148975 systemd[1]: Successfully loaded SELinux policy in 55.773ms. Aug 13 01:01:52.149008 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.268ms. Aug 13 01:01:52.149029 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 01:01:52.149052 systemd[1]: Detected virtualization amazon. Aug 13 01:01:52.149070 systemd[1]: Detected architecture x86-64. Aug 13 01:01:52.149087 systemd[1]: Detected first boot. Aug 13 01:01:52.149112 systemd[1]: Initializing machine ID from VM UUID. Aug 13 01:01:52.149133 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Aug 13 01:01:52.149154 systemd[1]: Populated /etc with preset unit settings. Aug 13 01:01:52.149177 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 01:01:52.149207 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 01:01:52.149231 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 01:01:52.149262 systemd[1]: iscsiuio.service: Deactivated successfully. Aug 13 01:01:52.149285 systemd[1]: Stopped iscsiuio.service. Aug 13 01:01:52.149305 systemd[1]: iscsid.service: Deactivated successfully. Aug 13 01:01:52.149326 systemd[1]: Stopped iscsid.service. Aug 13 01:01:52.149347 systemd[1]: initrd-switch-root.service: Deactivated successfully. Aug 13 01:01:52.149367 systemd[1]: Stopped initrd-switch-root.service. Aug 13 01:01:52.149423 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Aug 13 01:01:52.149445 systemd[1]: Created slice system-addon\x2dconfig.slice. Aug 13 01:01:52.149466 systemd[1]: Created slice system-addon\x2drun.slice. Aug 13 01:01:52.149488 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Aug 13 01:01:52.149509 systemd[1]: Created slice system-getty.slice. Aug 13 01:01:52.149530 systemd[1]: Created slice system-modprobe.slice. Aug 13 01:01:52.149551 systemd[1]: Created slice system-serial\x2dgetty.slice. Aug 13 01:01:52.149572 systemd[1]: Created slice system-system\x2dcloudinit.slice. Aug 13 01:01:52.149593 systemd[1]: Created slice system-systemd\x2dfsck.slice. Aug 13 01:01:52.149617 systemd[1]: Created slice user.slice. Aug 13 01:01:52.149639 systemd[1]: Started systemd-ask-password-console.path. Aug 13 01:01:52.149660 systemd[1]: Started systemd-ask-password-wall.path. Aug 13 01:01:52.149682 systemd[1]: Set up automount boot.automount. Aug 13 01:01:52.149703 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Aug 13 01:01:52.149724 systemd[1]: Stopped target initrd-switch-root.target. Aug 13 01:01:52.149745 systemd[1]: Stopped target initrd-fs.target. Aug 13 01:01:52.149769 systemd[1]: Stopped target initrd-root-fs.target. Aug 13 01:01:52.149792 systemd[1]: Reached target integritysetup.target. Aug 13 01:01:52.149814 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 01:01:52.149835 systemd[1]: Reached target remote-fs.target. Aug 13 01:01:52.149856 systemd[1]: Reached target slices.target. Aug 13 01:01:52.149876 systemd[1]: Reached target swap.target. Aug 13 01:01:52.149897 systemd[1]: Reached target torcx.target. Aug 13 01:01:52.149918 systemd[1]: Reached target veritysetup.target. Aug 13 01:01:52.149939 systemd[1]: Listening on systemd-coredump.socket. Aug 13 01:01:52.149960 systemd[1]: Listening on systemd-initctl.socket. Aug 13 01:01:52.149984 systemd[1]: Listening on systemd-networkd.socket. Aug 13 01:01:52.150005 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 01:01:52.150023 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 01:01:52.150041 systemd[1]: Listening on systemd-userdbd.socket. Aug 13 01:01:52.150058 systemd[1]: Mounting dev-hugepages.mount... Aug 13 01:01:52.150076 systemd[1]: Mounting dev-mqueue.mount... Aug 13 01:01:52.150094 systemd[1]: Mounting media.mount... Aug 13 01:01:52.150113 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:01:52.150130 systemd[1]: Mounting sys-kernel-debug.mount... Aug 13 01:01:52.150158 systemd[1]: Mounting sys-kernel-tracing.mount... Aug 13 01:01:52.150179 systemd[1]: Mounting tmp.mount... Aug 13 01:01:52.150200 systemd[1]: Starting flatcar-tmpfiles.service... Aug 13 01:01:52.150219 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 01:01:52.150236 systemd[1]: Starting kmod-static-nodes.service... Aug 13 01:01:52.150256 systemd[1]: Starting modprobe@configfs.service... Aug 13 01:01:52.150274 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 01:01:52.150294 systemd[1]: Starting modprobe@drm.service... Aug 13 01:01:52.150315 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:01:52.150335 systemd[1]: Starting modprobe@fuse.service... Aug 13 01:01:52.150356 systemd[1]: Starting modprobe@loop.service... Aug 13 01:01:52.150550 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Aug 13 01:01:52.150576 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Aug 13 01:01:52.150595 systemd[1]: Stopped systemd-fsck-root.service. Aug 13 01:01:52.150621 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Aug 13 01:01:52.150642 systemd[1]: Stopped systemd-fsck-usr.service. Aug 13 01:01:52.150662 systemd[1]: Stopped systemd-journald.service. Aug 13 01:01:52.150682 systemd[1]: Starting systemd-journald.service... Aug 13 01:01:52.150703 systemd[1]: Starting systemd-modules-load.service... Aug 13 01:01:52.150723 systemd[1]: Starting systemd-network-generator.service... Aug 13 01:01:52.150744 kernel: fuse: init (API version 7.34) Aug 13 01:01:52.150766 systemd[1]: Starting systemd-remount-fs.service... Aug 13 01:01:52.150787 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 01:01:52.150809 systemd[1]: verity-setup.service: Deactivated successfully. Aug 13 01:01:52.150828 systemd[1]: Stopped verity-setup.service. Aug 13 01:01:52.150846 kernel: loop: module loaded Aug 13 01:01:52.150866 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:01:52.150886 systemd[1]: Mounted dev-hugepages.mount. Aug 13 01:01:52.150908 systemd[1]: Mounted dev-mqueue.mount. Aug 13 01:01:52.150931 systemd[1]: Mounted media.mount. Aug 13 01:01:52.150951 systemd[1]: Mounted sys-kernel-debug.mount. Aug 13 01:01:52.150972 systemd[1]: Mounted sys-kernel-tracing.mount. Aug 13 01:01:52.150996 systemd[1]: Mounted tmp.mount. Aug 13 01:01:52.151019 systemd[1]: Finished kmod-static-nodes.service. Aug 13 01:01:52.151048 systemd-journald[1412]: Journal started Aug 13 01:01:52.151134 systemd-journald[1412]: Runtime Journal (/run/log/journal/ec2cf3ad944be60a3163c03cb4088b0a) is 4.8M, max 38.3M, 33.5M free. Aug 13 01:01:48.868000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Aug 13 01:01:48.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 01:01:48.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 01:01:48.940000 audit: BPF prog-id=10 op=LOAD Aug 13 01:01:48.940000 audit: BPF prog-id=10 op=UNLOAD Aug 13 01:01:48.940000 audit: BPF prog-id=11 op=LOAD Aug 13 01:01:48.940000 audit: BPF prog-id=11 op=UNLOAD Aug 13 01:01:49.095000 audit[1313]: AVC avc: denied { associate } for pid=1313 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Aug 13 01:01:49.095000 audit[1313]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001858e2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=1296 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:49.095000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 01:01:49.099000 audit[1313]: AVC avc: denied { associate } for pid=1313 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Aug 13 01:01:49.099000 audit[1313]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001859c9 a2=1ed a3=0 items=2 ppid=1296 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:49.099000 audit: CWD cwd="/" Aug 13 01:01:49.099000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:49.099000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:49.099000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 01:01:51.860000 audit: BPF prog-id=12 op=LOAD Aug 13 01:01:51.860000 audit: BPF prog-id=3 op=UNLOAD Aug 13 01:01:51.860000 audit: BPF prog-id=13 op=LOAD Aug 13 01:01:51.860000 audit: BPF prog-id=14 op=LOAD Aug 13 01:01:51.860000 audit: BPF prog-id=4 op=UNLOAD Aug 13 01:01:51.860000 audit: BPF prog-id=5 op=UNLOAD Aug 13 01:01:51.862000 audit: BPF prog-id=15 op=LOAD Aug 13 01:01:51.862000 audit: BPF prog-id=12 op=UNLOAD Aug 13 01:01:51.862000 audit: BPF prog-id=16 op=LOAD Aug 13 01:01:51.862000 audit: BPF prog-id=17 op=LOAD Aug 13 01:01:51.862000 audit: BPF prog-id=13 op=UNLOAD Aug 13 01:01:51.862000 audit: BPF prog-id=14 op=UNLOAD Aug 13 01:01:51.863000 audit: BPF prog-id=18 op=LOAD Aug 13 01:01:51.863000 audit: BPF prog-id=15 op=UNLOAD Aug 13 01:01:51.863000 audit: BPF prog-id=19 op=LOAD Aug 13 01:01:51.863000 audit: BPF prog-id=20 op=LOAD Aug 13 01:01:51.863000 audit: BPF prog-id=16 op=UNLOAD Aug 13 01:01:51.863000 audit: BPF prog-id=17 op=UNLOAD Aug 13 01:01:51.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:51.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:51.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:51.876000 audit: BPF prog-id=18 op=UNLOAD Aug 13 01:01:51.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:51.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.069000 audit: BPF prog-id=21 op=LOAD Aug 13 01:01:52.070000 audit: BPF prog-id=22 op=LOAD Aug 13 01:01:52.070000 audit: BPF prog-id=23 op=LOAD Aug 13 01:01:52.070000 audit: BPF prog-id=19 op=UNLOAD Aug 13 01:01:52.070000 audit: BPF prog-id=20 op=UNLOAD Aug 13 01:01:52.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.143000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Aug 13 01:01:52.143000 audit[1412]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fff86dbaac0 a2=4000 a3=7fff86dbab5c items=0 ppid=1 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:52.143000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Aug 13 01:01:52.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:49.090598 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 01:01:51.859087 systemd[1]: Queued start job for default target multi-user.target. Aug 13 01:01:49.091660 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 01:01:51.859100 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Aug 13 01:01:49.091680 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 01:01:51.864320 systemd[1]: systemd-journald.service: Deactivated successfully. Aug 13 01:01:49.091713 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Aug 13 01:01:49.091723 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="skipped missing lower profile" missing profile=oem Aug 13 01:01:49.091757 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Aug 13 01:01:49.091770 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Aug 13 01:01:49.091960 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Aug 13 01:01:49.092000 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 01:01:49.092013 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 01:01:49.094101 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Aug 13 01:01:49.094165 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Aug 13 01:01:49.094194 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Aug 13 01:01:49.094217 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Aug 13 01:01:49.094245 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Aug 13 01:01:49.094267 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Aug 13 01:01:51.391356 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:51Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 01:01:51.391755 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:51Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 01:01:51.391872 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:51Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 01:01:51.392061 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:51Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 01:01:51.392228 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:51Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Aug 13 01:01:51.392369 /usr/lib/systemd/system-generators/torcx-generator[1313]: time="2025-08-13T01:01:51Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Aug 13 01:01:52.164265 systemd[1]: modprobe@configfs.service: Deactivated successfully. Aug 13 01:01:52.164348 systemd[1]: Finished modprobe@configfs.service. Aug 13 01:01:52.164394 systemd[1]: Started systemd-journald.service. Aug 13 01:01:52.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.165651 systemd[1]: Finished flatcar-tmpfiles.service. Aug 13 01:01:52.167219 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:01:52.167426 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:01:52.169359 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 01:01:52.169570 systemd[1]: Finished modprobe@drm.service. Aug 13 01:01:52.171435 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:01:52.171626 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:01:52.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.174032 systemd[1]: modprobe@fuse.service: Deactivated successfully. Aug 13 01:01:52.174254 systemd[1]: Finished modprobe@fuse.service. Aug 13 01:01:52.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.176185 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:01:52.176826 systemd[1]: Finished modprobe@loop.service. Aug 13 01:01:52.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.178706 systemd[1]: Finished systemd-modules-load.service. Aug 13 01:01:52.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.180181 systemd[1]: Finished systemd-network-generator.service. Aug 13 01:01:52.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.181978 systemd[1]: Finished systemd-remount-fs.service. Aug 13 01:01:52.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.184090 systemd[1]: Reached target network-pre.target. Aug 13 01:01:52.187241 systemd[1]: Mounting sys-fs-fuse-connections.mount... Aug 13 01:01:52.194081 systemd[1]: Mounting sys-kernel-config.mount... Aug 13 01:01:52.195215 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Aug 13 01:01:52.200589 systemd[1]: Starting systemd-hwdb-update.service... Aug 13 01:01:52.203333 systemd[1]: Starting systemd-journal-flush.service... Aug 13 01:01:52.205145 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 01:01:52.206778 systemd[1]: Starting systemd-random-seed.service... Aug 13 01:01:52.208756 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 01:01:52.210911 systemd[1]: Starting systemd-sysctl.service... Aug 13 01:01:52.229529 systemd-journald[1412]: Time spent on flushing to /var/log/journal/ec2cf3ad944be60a3163c03cb4088b0a is 49.451ms for 1213 entries. Aug 13 01:01:52.229529 systemd-journald[1412]: System Journal (/var/log/journal/ec2cf3ad944be60a3163c03cb4088b0a) is 8.0M, max 195.6M, 187.6M free. Aug 13 01:01:52.302055 systemd-journald[1412]: Received client request to flush runtime journal. Aug 13 01:01:52.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.215172 systemd[1]: Starting systemd-sysusers.service... Aug 13 01:01:52.219824 systemd[1]: Mounted sys-fs-fuse-connections.mount. Aug 13 01:01:52.306558 udevadm[1431]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Aug 13 01:01:52.222610 systemd[1]: Mounted sys-kernel-config.mount. Aug 13 01:01:52.239410 systemd[1]: Finished systemd-random-seed.service. Aug 13 01:01:52.240470 systemd[1]: Reached target first-boot-complete.target. Aug 13 01:01:52.256138 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 01:01:52.258339 systemd[1]: Starting systemd-udev-settle.service... Aug 13 01:01:52.265146 systemd[1]: Finished systemd-sysctl.service. Aug 13 01:01:52.300406 systemd[1]: Finished systemd-sysusers.service. Aug 13 01:01:52.302775 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 01:01:52.306737 systemd[1]: Finished systemd-journal-flush.service. Aug 13 01:01:52.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.359228 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 01:01:52.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.845033 systemd[1]: Finished systemd-hwdb-update.service. Aug 13 01:01:52.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.845000 audit: BPF prog-id=24 op=LOAD Aug 13 01:01:52.845000 audit: BPF prog-id=25 op=LOAD Aug 13 01:01:52.845000 audit: BPF prog-id=7 op=UNLOAD Aug 13 01:01:52.845000 audit: BPF prog-id=8 op=UNLOAD Aug 13 01:01:52.846959 systemd[1]: Starting systemd-udevd.service... Aug 13 01:01:52.866446 systemd-udevd[1435]: Using default interface naming scheme 'v252'. Aug 13 01:01:52.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.918000 audit: BPF prog-id=26 op=LOAD Aug 13 01:01:52.917576 systemd[1]: Started systemd-udevd.service. Aug 13 01:01:52.920037 systemd[1]: Starting systemd-networkd.service... Aug 13 01:01:52.931000 audit: BPF prog-id=27 op=LOAD Aug 13 01:01:52.931000 audit: BPF prog-id=28 op=LOAD Aug 13 01:01:52.931000 audit: BPF prog-id=29 op=LOAD Aug 13 01:01:52.932893 systemd[1]: Starting systemd-userdbd.service... Aug 13 01:01:52.966349 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Aug 13 01:01:52.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:52.970961 systemd[1]: Started systemd-userdbd.service. Aug 13 01:01:52.993161 (udev-worker)[1446]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:01:53.039407 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Aug 13 01:01:53.046403 kernel: ACPI: button: Power Button [PWRF] Aug 13 01:01:53.055396 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Aug 13 01:01:53.059270 systemd-networkd[1444]: lo: Link UP Aug 13 01:01:53.059280 systemd-networkd[1444]: lo: Gained carrier Aug 13 01:01:53.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.060153 systemd-networkd[1444]: Enumeration completed Aug 13 01:01:53.060253 systemd[1]: Started systemd-networkd.service. Aug 13 01:01:53.062012 systemd[1]: Starting systemd-networkd-wait-online.service... Aug 13 01:01:53.063063 systemd-networkd[1444]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 01:01:53.067871 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:01:53.067568 systemd-networkd[1444]: eth0: Link UP Aug 13 01:01:53.067686 systemd-networkd[1444]: eth0: Gained carrier Aug 13 01:01:53.077519 systemd-networkd[1444]: eth0: DHCPv4 address 172.31.21.64/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 01:01:53.083489 kernel: ACPI: button: Sleep Button [SLPF] Aug 13 01:01:53.076000 audit[1445]: AVC avc: denied { confidentiality } for pid=1445 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Aug 13 01:01:53.076000 audit[1445]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55941dbddcf0 a1=338ac a2=7f0bd3edabc5 a3=5 items=110 ppid=1435 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:53.076000 audit: CWD cwd="/" Aug 13 01:01:53.076000 audit: PATH item=0 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=1 name=(null) inode=13854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=2 name=(null) inode=13854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=3 name=(null) inode=13855 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=4 name=(null) inode=13854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=5 name=(null) inode=13856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=6 name=(null) inode=13854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=7 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=8 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=9 name=(null) inode=13858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=10 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=11 name=(null) inode=13859 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=12 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=13 name=(null) inode=13860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=14 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=15 name=(null) inode=13861 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=16 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=17 name=(null) inode=13862 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=18 name=(null) inode=13854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=19 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=20 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=21 name=(null) inode=13864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=22 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=23 name=(null) inode=13865 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=24 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=25 name=(null) inode=13866 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=26 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=27 name=(null) inode=13867 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=28 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=29 name=(null) inode=13868 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=30 name=(null) inode=13854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=31 name=(null) inode=13869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=32 name=(null) inode=13869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=33 name=(null) inode=13870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=34 name=(null) inode=13869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=35 name=(null) inode=13871 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=36 name=(null) inode=13869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=37 name=(null) inode=13872 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=38 name=(null) inode=13869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=39 name=(null) inode=13873 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=40 name=(null) inode=13869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=41 name=(null) inode=13874 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=42 name=(null) inode=13854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=43 name=(null) inode=13875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=44 name=(null) inode=13875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=45 name=(null) inode=13876 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=46 name=(null) inode=13875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=47 name=(null) inode=13877 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=48 name=(null) inode=13875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=49 name=(null) inode=13878 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=50 name=(null) inode=13875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=51 name=(null) inode=13879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=52 name=(null) inode=13875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=53 name=(null) inode=13880 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=54 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=55 name=(null) inode=13881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=56 name=(null) inode=13881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=57 name=(null) inode=13882 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=58 name=(null) inode=13881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=59 name=(null) inode=13883 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=60 name=(null) inode=13881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=61 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=62 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=63 name=(null) inode=13885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=64 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=65 name=(null) inode=13886 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=66 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=67 name=(null) inode=13887 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=68 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=69 name=(null) inode=13888 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=70 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=71 name=(null) inode=13889 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=72 name=(null) inode=13881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=73 name=(null) inode=13890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=74 name=(null) inode=13890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=75 name=(null) inode=13891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=76 name=(null) inode=13890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=77 name=(null) inode=13892 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=78 name=(null) inode=13890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=79 name=(null) inode=13893 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=80 name=(null) inode=13890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=81 name=(null) inode=13894 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=82 name=(null) inode=13890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=83 name=(null) inode=13895 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=84 name=(null) inode=13881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=85 name=(null) inode=13896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=86 name=(null) inode=13896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=87 name=(null) inode=13897 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=88 name=(null) inode=13896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=89 name=(null) inode=13898 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=90 name=(null) inode=13896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=91 name=(null) inode=13899 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=92 name=(null) inode=13896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=93 name=(null) inode=13900 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=94 name=(null) inode=13896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=95 name=(null) inode=13901 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=96 name=(null) inode=13881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=97 name=(null) inode=13902 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=98 name=(null) inode=13902 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=99 name=(null) inode=13903 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=100 name=(null) inode=13902 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=101 name=(null) inode=13904 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=102 name=(null) inode=13902 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=103 name=(null) inode=13905 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=104 name=(null) inode=13902 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=105 name=(null) inode=13906 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=106 name=(null) inode=13902 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=107 name=(null) inode=13907 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PATH item=109 name=(null) inode=13908 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:53.076000 audit: PROCTITLE proctitle="(udev-worker)" Aug 13 01:01:53.103400 kernel: piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr Aug 13 01:01:53.119417 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Aug 13 01:01:53.139443 kernel: mousedev: PS/2 mouse device common for all mice Aug 13 01:01:53.214308 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 01:01:53.216796 systemd[1]: Finished systemd-udev-settle.service. Aug 13 01:01:53.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.218857 systemd[1]: Starting lvm2-activation-early.service... Aug 13 01:01:53.246707 lvm[1549]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 01:01:53.273757 systemd[1]: Finished lvm2-activation-early.service. Aug 13 01:01:53.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.274510 systemd[1]: Reached target cryptsetup.target. Aug 13 01:01:53.275833 kernel: kauditd_printk_skb: 235 callbacks suppressed Aug 13 01:01:53.275897 kernel: audit: type=1130 audit(1755046913.273:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.282915 systemd[1]: Starting lvm2-activation.service... Aug 13 01:01:53.288145 lvm[1550]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 01:01:53.311771 systemd[1]: Finished lvm2-activation.service. Aug 13 01:01:53.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.312492 systemd[1]: Reached target local-fs-pre.target. Aug 13 01:01:53.318164 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Aug 13 01:01:53.318204 systemd[1]: Reached target local-fs.target. Aug 13 01:01:53.318405 kernel: audit: type=1130 audit(1755046913.311:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.318925 systemd[1]: Reached target machines.target. Aug 13 01:01:53.320842 systemd[1]: Starting ldconfig.service... Aug 13 01:01:53.322506 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:01:53.322565 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:01:53.324440 systemd[1]: Starting systemd-boot-update.service... Aug 13 01:01:53.327161 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Aug 13 01:01:53.331902 systemd[1]: Starting systemd-machine-id-commit.service... Aug 13 01:01:53.337711 systemd[1]: Starting systemd-sysext.service... Aug 13 01:01:53.351455 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1552 (bootctl) Aug 13 01:01:53.355533 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Aug 13 01:01:53.359552 systemd[1]: Unmounting usr-share-oem.mount... Aug 13 01:01:53.363417 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Aug 13 01:01:53.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.372989 kernel: audit: type=1130 audit(1755046913.364:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.373071 systemd[1]: usr-share-oem.mount: Deactivated successfully. Aug 13 01:01:53.373324 systemd[1]: Unmounted usr-share-oem.mount. Aug 13 01:01:53.392407 kernel: loop0: detected capacity change from 0 to 229808 Aug 13 01:01:53.545033 systemd-fsck[1561]: fsck.fat 4.2 (2021-01-31) Aug 13 01:01:53.545033 systemd-fsck[1561]: /dev/nvme0n1p1: 789 files, 119324/258078 clusters Aug 13 01:01:53.545457 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Aug 13 01:01:53.547537 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Aug 13 01:01:53.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.550571 systemd[1]: Mounting boot.mount... Aug 13 01:01:53.556416 kernel: audit: type=1130 audit(1755046913.547:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.565722 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Aug 13 01:01:53.567677 systemd[1]: Finished systemd-machine-id-commit.service. Aug 13 01:01:53.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.586538 kernel: audit: type=1130 audit(1755046913.571:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.599216 kernel: loop1: detected capacity change from 0 to 229808 Aug 13 01:01:53.597622 systemd[1]: Mounted boot.mount. Aug 13 01:01:53.627866 systemd[1]: Finished systemd-boot-update.service. Aug 13 01:01:53.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.630640 (sd-sysext)[1565]: Using extensions 'kubernetes'. Aug 13 01:01:53.635901 kernel: audit: type=1130 audit(1755046913.628:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.632412 (sd-sysext)[1565]: Merged extensions into '/usr'. Aug 13 01:01:53.654746 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:01:53.656474 systemd[1]: Mounting usr-share-oem.mount... Aug 13 01:01:53.657366 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 01:01:53.658765 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 01:01:53.662148 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:01:53.663914 systemd[1]: Starting modprobe@loop.service... Aug 13 01:01:53.666135 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:01:53.666274 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:01:53.666418 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:01:53.667343 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:01:53.667497 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:01:53.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.674394 kernel: audit: type=1130 audit(1755046913.667:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.674505 kernel: audit: type=1131 audit(1755046913.673:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.683526 systemd[1]: Mounted usr-share-oem.mount. Aug 13 01:01:53.684876 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:01:53.685089 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:01:53.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.686642 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:01:53.686814 systemd[1]: Finished modprobe@loop.service. Aug 13 01:01:53.692421 kernel: audit: type=1130 audit(1755046913.685:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.692553 kernel: audit: type=1131 audit(1755046913.685:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.700539 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 01:01:53.700667 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 01:01:53.702367 systemd[1]: Finished systemd-sysext.service. Aug 13 01:01:53.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.704792 systemd[1]: Starting ensure-sysext.service... Aug 13 01:01:53.710472 systemd[1]: Starting systemd-tmpfiles-setup.service... Aug 13 01:01:53.716523 systemd[1]: Reloading. Aug 13 01:01:53.741098 systemd-tmpfiles[1583]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Aug 13 01:01:53.743199 systemd-tmpfiles[1583]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Aug 13 01:01:53.747661 systemd-tmpfiles[1583]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Aug 13 01:01:53.863871 /usr/lib/systemd/system-generators/torcx-generator[1605]: time="2025-08-13T01:01:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 01:01:53.865014 /usr/lib/systemd/system-generators/torcx-generator[1605]: time="2025-08-13T01:01:53Z" level=info msg="torcx already run" Aug 13 01:01:53.997657 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 01:01:53.997679 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 01:01:54.026264 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 01:01:54.110000 audit: BPF prog-id=30 op=LOAD Aug 13 01:01:54.110000 audit: BPF prog-id=27 op=UNLOAD Aug 13 01:01:54.110000 audit: BPF prog-id=31 op=LOAD Aug 13 01:01:54.110000 audit: BPF prog-id=32 op=LOAD Aug 13 01:01:54.110000 audit: BPF prog-id=28 op=UNLOAD Aug 13 01:01:54.110000 audit: BPF prog-id=29 op=UNLOAD Aug 13 01:01:54.111000 audit: BPF prog-id=33 op=LOAD Aug 13 01:01:54.111000 audit: BPF prog-id=21 op=UNLOAD Aug 13 01:01:54.111000 audit: BPF prog-id=34 op=LOAD Aug 13 01:01:54.111000 audit: BPF prog-id=35 op=LOAD Aug 13 01:01:54.111000 audit: BPF prog-id=22 op=UNLOAD Aug 13 01:01:54.111000 audit: BPF prog-id=23 op=UNLOAD Aug 13 01:01:54.113000 audit: BPF prog-id=36 op=LOAD Aug 13 01:01:54.113000 audit: BPF prog-id=26 op=UNLOAD Aug 13 01:01:54.116000 audit: BPF prog-id=37 op=LOAD Aug 13 01:01:54.116000 audit: BPF prog-id=38 op=LOAD Aug 13 01:01:54.116000 audit: BPF prog-id=24 op=UNLOAD Aug 13 01:01:54.116000 audit: BPF prog-id=25 op=UNLOAD Aug 13 01:01:54.120759 systemd[1]: Finished systemd-tmpfiles-setup.service. Aug 13 01:01:54.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.128217 systemd[1]: Starting audit-rules.service... Aug 13 01:01:54.131248 systemd[1]: Starting clean-ca-certificates.service... Aug 13 01:01:54.135156 systemd[1]: Starting systemd-journal-catalog-update.service... Aug 13 01:01:54.141000 audit: BPF prog-id=39 op=LOAD Aug 13 01:01:54.147000 audit: BPF prog-id=40 op=LOAD Aug 13 01:01:54.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.166679 ldconfig[1551]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Aug 13 01:01:54.145556 systemd[1]: Starting systemd-resolved.service... Aug 13 01:01:54.149045 systemd[1]: Starting systemd-timesyncd.service... Aug 13 01:01:54.153808 systemd[1]: Starting systemd-update-utmp.service... Aug 13 01:01:54.162532 systemd[1]: Finished ldconfig.service. Aug 13 01:01:54.166999 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.167660 systemd-networkd[1444]: eth0: Gained IPv6LL Aug 13 01:01:54.170805 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 01:01:54.175823 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:01:54.178790 systemd[1]: Starting modprobe@loop.service... Aug 13 01:01:54.179886 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.180108 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:01:54.181904 systemd[1]: Finished systemd-networkd-wait-online.service. Aug 13 01:01:54.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.183000 audit[1670]: SYSTEM_BOOT pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.184117 systemd[1]: Finished clean-ca-certificates.service. Aug 13 01:01:54.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.186164 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:01:54.186355 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:01:54.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.192919 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:01:54.193103 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:01:54.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.195207 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:01:54.195891 systemd[1]: Finished modprobe@loop.service. Aug 13 01:01:54.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.199477 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 01:01:54.199750 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.199951 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 01:01:54.203815 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.206861 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 01:01:54.210192 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:01:54.213627 systemd[1]: Starting modprobe@loop.service... Aug 13 01:01:54.215175 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.215393 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:01:54.215552 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 01:01:54.217026 systemd[1]: Finished systemd-update-utmp.service. Aug 13 01:01:54.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.221063 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:01:54.221253 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:01:54.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.222828 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:01:54.223002 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:01:54.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.224563 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:01:54.224730 systemd[1]: Finished modprobe@loop.service. Aug 13 01:01:54.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.229452 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 01:01:54.229620 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.233963 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.238091 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 01:01:54.240700 systemd[1]: Starting modprobe@drm.service... Aug 13 01:01:54.245821 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:01:54.248651 systemd[1]: Starting modprobe@loop.service... Aug 13 01:01:54.249559 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.249763 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:01:54.249974 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 01:01:54.251408 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:01:54.253496 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:01:54.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.258075 systemd[1]: Finished ensure-sysext.service. Aug 13 01:01:54.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.259784 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 01:01:54.259953 systemd[1]: Finished modprobe@drm.service. Aug 13 01:01:54.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.270825 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:01:54.271003 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:01:54.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.272087 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:01:54.272269 systemd[1]: Finished modprobe@loop.service. Aug 13 01:01:54.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.273128 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 01:01:54.273189 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.278841 systemd[1]: Finished systemd-journal-catalog-update.service. Aug 13 01:01:54.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:54.283301 systemd[1]: Starting systemd-update-done.service... Aug 13 01:01:54.285000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Aug 13 01:01:54.285000 audit[1689]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc0bd1e050 a2=420 a3=0 items=0 ppid=1659 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:54.285000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Aug 13 01:01:54.286562 augenrules[1689]: No rules Aug 13 01:01:54.286778 systemd[1]: Finished audit-rules.service. Aug 13 01:01:54.304864 systemd[1]: Finished systemd-update-done.service. Aug 13 01:01:54.328233 systemd[1]: Started systemd-timesyncd.service. Aug 13 01:01:54.328804 systemd[1]: Reached target time-set.target. Aug 13 01:01:54.338127 systemd-resolved[1666]: Positive Trust Anchors: Aug 13 01:01:54.338449 systemd-resolved[1666]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 01:01:54.338506 systemd-resolved[1666]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 01:01:54.370123 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:01:54.370147 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:01:54.370877 systemd-resolved[1666]: Defaulting to hostname 'linux'. Aug 13 01:01:54.372524 systemd[1]: Started systemd-resolved.service. Aug 13 01:01:54.372984 systemd[1]: Reached target network.target. Aug 13 01:01:54.373485 systemd[1]: Reached target network-online.target. Aug 13 01:01:54.373796 systemd[1]: Reached target nss-lookup.target. Aug 13 01:01:54.374108 systemd[1]: Reached target sysinit.target. Aug 13 01:01:54.374524 systemd[1]: Started motdgen.path. Aug 13 01:01:54.374858 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Aug 13 01:01:54.375318 systemd[1]: Started logrotate.timer. Aug 13 01:01:54.375744 systemd[1]: Started mdadm.timer. Aug 13 01:01:54.376046 systemd[1]: Started systemd-tmpfiles-clean.timer. Aug 13 01:01:54.376338 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Aug 13 01:01:54.376370 systemd[1]: Reached target paths.target. Aug 13 01:01:54.376674 systemd[1]: Reached target timers.target. Aug 13 01:01:54.377350 systemd[1]: Listening on dbus.socket. Aug 13 01:01:54.378966 systemd[1]: Starting docker.socket... Aug 13 01:01:54.382926 systemd[1]: Listening on sshd.socket. Aug 13 01:01:54.383502 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:01:54.384167 systemd[1]: Listening on docker.socket. Aug 13 01:01:54.384673 systemd[1]: Reached target sockets.target. Aug 13 01:01:54.385048 systemd[1]: Reached target basic.target. Aug 13 01:01:54.385599 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.385639 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 01:01:54.386912 systemd[1]: Started amazon-ssm-agent.service. Aug 13 01:01:54.388941 systemd[1]: Starting containerd.service... Aug 13 01:01:54.392441 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Aug 13 01:01:54.394661 systemd[1]: Starting dbus.service... Aug 13 01:01:54.405775 systemd[1]: Starting enable-oem-cloudinit.service... Aug 13 01:01:54.417819 systemd[1]: Starting extend-filesystems.service... Aug 13 01:01:54.418515 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Aug 13 01:01:54.423811 systemd[1]: Starting kubelet.service... Aug 13 01:01:54.428735 systemd[1]: Starting motdgen.service... Aug 13 01:01:54.433616 systemd[1]: Started nvidia.service. Aug 13 01:01:54.436484 systemd[1]: Starting prepare-helm.service... Aug 13 01:01:54.439587 systemd[1]: Starting ssh-key-proc-cmdline.service... Aug 13 01:01:54.444143 systemd[1]: Starting sshd-keygen.service... Aug 13 01:01:54.450521 systemd[1]: Starting systemd-logind.service... Aug 13 01:01:54.451499 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:01:54.451580 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Aug 13 01:01:54.452609 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Aug 13 01:01:54.456331 systemd[1]: Starting update-engine.service... Aug 13 01:01:54.461186 systemd[1]: Starting update-ssh-keys-after-ignition.service... Aug 13 01:01:54.506475 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Aug 13 01:01:54.507350 jq[1702]: false Aug 13 01:01:54.506696 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Aug 13 01:01:54.538598 jq[1714]: true Aug 13 01:01:54.561463 tar[1718]: linux-amd64/LICENSE Aug 13 01:01:54.561792 tar[1718]: linux-amd64/helm Aug 13 01:01:55.181739 systemd-resolved[1666]: Clock change detected. Flushing caches. Aug 13 01:01:55.181978 systemd-timesyncd[1667]: Contacted time server 23.160.16.36:123 (0.flatcar.pool.ntp.org). Aug 13 01:01:55.182063 systemd-timesyncd[1667]: Initial clock synchronization to Wed 2025-08-13 01:01:55.181679 UTC. Aug 13 01:01:55.202856 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Aug 13 01:01:55.203091 systemd[1]: Finished ssh-key-proc-cmdline.service. Aug 13 01:01:55.265331 jq[1724]: true Aug 13 01:01:55.282415 dbus-daemon[1701]: [system] SELinux support is enabled Aug 13 01:01:55.282617 systemd[1]: Started dbus.service. Aug 13 01:01:55.286292 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Aug 13 01:01:55.286328 systemd[1]: Reached target system-config.target. Aug 13 01:01:55.286997 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Aug 13 01:01:55.287023 systemd[1]: Reached target user-config.target. Aug 13 01:01:55.296878 systemd[1]: motdgen.service: Deactivated successfully. Aug 13 01:01:55.297104 systemd[1]: Finished motdgen.service. Aug 13 01:01:55.308705 dbus-daemon[1701]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1444 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Aug 13 01:01:55.311913 amazon-ssm-agent[1698]: 2025/08/13 01:01:55 Failed to load instance info from vault. RegistrationKey does not exist. Aug 13 01:01:55.313544 systemd[1]: Starting systemd-hostnamed.service... Aug 13 01:01:55.319065 amazon-ssm-agent[1698]: Initializing new seelog logger Aug 13 01:01:55.319994 amazon-ssm-agent[1698]: New Seelog Logger Creation Complete Aug 13 01:01:55.320484 amazon-ssm-agent[1698]: 2025/08/13 01:01:55 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 01:01:55.320583 amazon-ssm-agent[1698]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 01:01:55.323588 amazon-ssm-agent[1698]: 2025/08/13 01:01:55 processing appconfig overrides Aug 13 01:01:55.332101 extend-filesystems[1703]: Found loop1 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1p1 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1p2 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1p3 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found usr Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1p4 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1p6 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1p7 Aug 13 01:01:55.333838 extend-filesystems[1703]: Found nvme0n1p9 Aug 13 01:01:55.333838 extend-filesystems[1703]: Checking size of /dev/nvme0n1p9 Aug 13 01:01:55.393611 extend-filesystems[1703]: Resized partition /dev/nvme0n1p9 Aug 13 01:01:55.405286 extend-filesystems[1772]: resize2fs 1.46.5 (30-Dec-2021) Aug 13 01:01:55.426436 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Aug 13 01:01:55.438440 update_engine[1713]: I0813 01:01:55.437350 1713 main.cc:92] Flatcar Update Engine starting Aug 13 01:01:55.444419 systemd[1]: Started update-engine.service. Aug 13 01:01:55.447534 systemd[1]: Started locksmithd.service. Aug 13 01:01:55.494611 update_engine[1713]: I0813 01:01:55.448565 1713 update_check_scheduler.cc:74] Next update check in 4m6s Aug 13 01:01:55.495486 env[1719]: time="2025-08-13T01:01:55.495430536Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Aug 13 01:01:55.499791 bash[1767]: Updated "/home/core/.ssh/authorized_keys" Aug 13 01:01:55.500253 systemd[1]: Finished update-ssh-keys-after-ignition.service. Aug 13 01:01:55.505878 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Aug 13 01:01:55.514564 systemd[1]: nvidia.service: Deactivated successfully. Aug 13 01:01:55.525587 extend-filesystems[1772]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Aug 13 01:01:55.525587 extend-filesystems[1772]: old_desc_blocks = 1, new_desc_blocks = 1 Aug 13 01:01:55.525587 extend-filesystems[1772]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Aug 13 01:01:55.529996 extend-filesystems[1703]: Resized filesystem in /dev/nvme0n1p9 Aug 13 01:01:55.526512 systemd[1]: extend-filesystems.service: Deactivated successfully. Aug 13 01:01:55.526731 systemd[1]: Finished extend-filesystems.service. Aug 13 01:01:55.586258 env[1719]: time="2025-08-13T01:01:55.586206529Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Aug 13 01:01:55.586724 env[1719]: time="2025-08-13T01:01:55.586696849Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:01:55.588592 env[1719]: time="2025-08-13T01:01:55.588550726Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.189-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Aug 13 01:01:55.588707 env[1719]: time="2025-08-13T01:01:55.588691058Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:01:55.589074 env[1719]: time="2025-08-13T01:01:55.589047029Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 01:01:55.589197 env[1719]: time="2025-08-13T01:01:55.589180130Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Aug 13 01:01:55.589278 env[1719]: time="2025-08-13T01:01:55.589262177Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Aug 13 01:01:55.589351 env[1719]: time="2025-08-13T01:01:55.589339191Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Aug 13 01:01:55.589504 env[1719]: time="2025-08-13T01:01:55.589487931Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:01:55.592179 env[1719]: time="2025-08-13T01:01:55.592150184Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:01:55.592521 env[1719]: time="2025-08-13T01:01:55.592493724Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 01:01:55.592612 env[1719]: time="2025-08-13T01:01:55.592597590Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Aug 13 01:01:55.592741 env[1719]: time="2025-08-13T01:01:55.592721679Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Aug 13 01:01:55.592829 env[1719]: time="2025-08-13T01:01:55.592815528Z" level=info msg="metadata content store policy set" policy=shared Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.602996968Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603102520Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603176892Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603241169Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603264417Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603285151Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603330563Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603352240Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603430580Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603471063Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603491115Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603526669Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603709539Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Aug 13 01:01:55.605054 env[1719]: time="2025-08-13T01:01:55.603857114Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604394167Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604435421Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604473155Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604552022Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604573800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604665054Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604683977Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604703135Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604737004Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604756067Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604777444Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.604799134Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.605008178Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.605030796Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606099 env[1719]: time="2025-08-13T01:01:55.605178691Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.606679 env[1719]: time="2025-08-13T01:01:55.605199765Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Aug 13 01:01:55.606679 env[1719]: time="2025-08-13T01:01:55.605238168Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Aug 13 01:01:55.606679 env[1719]: time="2025-08-13T01:01:55.605255985Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Aug 13 01:01:55.606679 env[1719]: time="2025-08-13T01:01:55.605280894Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Aug 13 01:01:55.608509 env[1719]: time="2025-08-13T01:01:55.606904872Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Aug 13 01:01:55.608626 env[1719]: time="2025-08-13T01:01:55.607308776Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Aug 13 01:01:55.608626 env[1719]: time="2025-08-13T01:01:55.607426593Z" level=info msg="Connect containerd service" Aug 13 01:01:55.608626 env[1719]: time="2025-08-13T01:01:55.607489963Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Aug 13 01:01:55.613066 env[1719]: time="2025-08-13T01:01:55.610047665Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 01:01:55.613066 env[1719]: time="2025-08-13T01:01:55.610186802Z" level=info msg="Start subscribing containerd event" Aug 13 01:01:55.613066 env[1719]: time="2025-08-13T01:01:55.610241964Z" level=info msg="Start recovering state" Aug 13 01:01:55.613066 env[1719]: time="2025-08-13T01:01:55.611333597Z" level=info msg="Start event monitor" Aug 13 01:01:55.613066 env[1719]: time="2025-08-13T01:01:55.611379006Z" level=info msg="Start snapshots syncer" Aug 13 01:01:55.613066 env[1719]: time="2025-08-13T01:01:55.611396297Z" level=info msg="Start cni network conf syncer for default" Aug 13 01:01:55.613066 env[1719]: time="2025-08-13T01:01:55.611408478Z" level=info msg="Start streaming server" Aug 13 01:01:55.614345 env[1719]: time="2025-08-13T01:01:55.614316331Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Aug 13 01:01:55.614780 env[1719]: time="2025-08-13T01:01:55.614761861Z" level=info msg=serving... address=/run/containerd/containerd.sock Aug 13 01:01:55.615046 systemd[1]: Started containerd.service. Aug 13 01:01:55.652601 env[1719]: time="2025-08-13T01:01:55.652492536Z" level=info msg="containerd successfully booted in 0.167693s" Aug 13 01:01:55.667133 systemd-logind[1711]: Watching system buttons on /dev/input/event1 (Power Button) Aug 13 01:01:55.667169 systemd-logind[1711]: Watching system buttons on /dev/input/event2 (Sleep Button) Aug 13 01:01:55.667194 systemd-logind[1711]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Aug 13 01:01:55.677343 systemd-logind[1711]: New seat seat0. Aug 13 01:01:55.683898 systemd[1]: Started systemd-logind.service. Aug 13 01:01:55.817151 dbus-daemon[1701]: [system] Successfully activated service 'org.freedesktop.hostname1' Aug 13 01:01:55.817330 systemd[1]: Started systemd-hostnamed.service. Aug 13 01:01:55.821022 dbus-daemon[1701]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1749 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Aug 13 01:01:55.825165 systemd[1]: Starting polkit.service... Aug 13 01:01:55.877093 polkitd[1841]: Started polkitd version 121 Aug 13 01:01:55.904662 polkitd[1841]: Loading rules from directory /etc/polkit-1/rules.d Aug 13 01:01:55.906072 polkitd[1841]: Loading rules from directory /usr/share/polkit-1/rules.d Aug 13 01:01:55.914364 polkitd[1841]: Finished loading, compiling and executing 2 rules Aug 13 01:01:55.915598 dbus-daemon[1701]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Aug 13 01:01:55.915793 systemd[1]: Started polkit.service. Aug 13 01:01:55.917068 polkitd[1841]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Aug 13 01:01:55.963743 systemd-hostnamed[1749]: Hostname set to (transient) Aug 13 01:01:55.963863 systemd-resolved[1666]: System hostname changed to 'ip-172-31-21-64'. Aug 13 01:01:56.035537 coreos-metadata[1700]: Aug 13 01:01:56.032 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Aug 13 01:01:56.041235 coreos-metadata[1700]: Aug 13 01:01:56.041 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Aug 13 01:01:56.041958 coreos-metadata[1700]: Aug 13 01:01:56.041 INFO Fetch successful Aug 13 01:01:56.041958 coreos-metadata[1700]: Aug 13 01:01:56.041 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Aug 13 01:01:56.042990 coreos-metadata[1700]: Aug 13 01:01:56.042 INFO Fetch successful Aug 13 01:01:56.048997 unknown[1700]: wrote ssh authorized keys file for user: core Aug 13 01:01:56.071756 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Create new startup processor Aug 13 01:01:56.072200 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [LongRunningPluginsManager] registered plugins: {} Aug 13 01:01:56.072331 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing bookkeeping folders Aug 13 01:01:56.072427 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO removing the completed state files Aug 13 01:01:56.072508 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing bookkeeping folders for long running plugins Aug 13 01:01:56.072593 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Aug 13 01:01:56.072685 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing healthcheck folders for long running plugins Aug 13 01:01:56.072778 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing locations for inventory plugin Aug 13 01:01:56.072873 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing default location for custom inventory Aug 13 01:01:56.072987 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing default location for file inventory Aug 13 01:01:56.073195 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Initializing default location for role inventory Aug 13 01:01:56.073303 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Init the cloudwatchlogs publisher Aug 13 01:01:56.073393 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:runPowerShellScript Aug 13 01:01:56.073481 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:configureDocker Aug 13 01:01:56.073563 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:softwareInventory Aug 13 01:01:56.073653 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:updateSsmAgent Aug 13 01:01:56.073736 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:runDockerAction Aug 13 01:01:56.073827 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:refreshAssociation Aug 13 01:01:56.073913 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:configurePackage Aug 13 01:01:56.074000 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:downloadContent Aug 13 01:01:56.074080 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform independent plugin aws:runDocument Aug 13 01:01:56.074210 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Successfully loaded platform dependent plugin aws:runShellScript Aug 13 01:01:56.074297 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Aug 13 01:01:56.074375 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO OS: linux, Arch: amd64 Aug 13 01:01:56.076873 amazon-ssm-agent[1698]: datastore file /var/lib/amazon/ssm/i-06a0228475cf38835/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Aug 13 01:01:56.078788 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] Starting document processing engine... Aug 13 01:01:56.090078 update-ssh-keys[1876]: Updated "/home/core/.ssh/authorized_keys" Aug 13 01:01:56.090513 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Aug 13 01:01:56.175151 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [EngineProcessor] Starting Aug 13 01:01:56.269986 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Aug 13 01:01:56.364573 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [OfflineService] Starting document processing engine... Aug 13 01:01:56.460327 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [OfflineService] [EngineProcessor] Starting Aug 13 01:01:56.554959 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [OfflineService] [EngineProcessor] Initial processing Aug 13 01:01:56.642694 tar[1718]: linux-amd64/README.md Aug 13 01:01:56.650303 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [OfflineService] Starting message polling Aug 13 01:01:56.650806 systemd[1]: Finished prepare-helm.service. Aug 13 01:01:56.745387 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [OfflineService] Starting send replies to MDS Aug 13 01:01:56.770628 locksmithd[1776]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Aug 13 01:01:56.840678 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [LongRunningPluginsManager] starting long running plugin manager Aug 13 01:01:56.936164 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Aug 13 01:01:57.031914 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [HealthCheck] HealthCheck reporting agent health. Aug 13 01:01:57.127857 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] Starting session document processing engine... Aug 13 01:01:57.223934 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] [EngineProcessor] Starting Aug 13 01:01:57.292732 sshd_keygen[1746]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Aug 13 01:01:57.320160 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Aug 13 01:01:57.321933 systemd[1]: Finished sshd-keygen.service. Aug 13 01:01:57.324498 systemd[1]: Starting issuegen.service... Aug 13 01:01:57.330397 systemd[1]: issuegen.service: Deactivated successfully. Aug 13 01:01:57.330571 systemd[1]: Finished issuegen.service. Aug 13 01:01:57.332883 systemd[1]: Starting systemd-user-sessions.service... Aug 13 01:01:57.341164 systemd[1]: Finished systemd-user-sessions.service. Aug 13 01:01:57.343376 systemd[1]: Started getty@tty1.service. Aug 13 01:01:57.345512 systemd[1]: Started serial-getty@ttyS0.service. Aug 13 01:01:57.346300 systemd[1]: Reached target getty.target. Aug 13 01:01:57.416634 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-06a0228475cf38835, requestId: f4e6b4e8-683d-4345-835b-e797d5144d6e Aug 13 01:01:57.474673 systemd[1]: Created slice system-sshd.slice. Aug 13 01:01:57.476551 systemd[1]: Started sshd@0-172.31.21.64:22-147.75.109.163:39868.service. Aug 13 01:01:57.513341 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] listening reply. Aug 13 01:01:57.610921 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Aug 13 01:01:57.654721 sshd[1909]: Accepted publickey for core from 147.75.109.163 port 39868 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:57.658758 sshd[1909]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:57.676235 systemd[1]: Created slice user-500.slice. Aug 13 01:01:57.679508 systemd[1]: Starting user-runtime-dir@500.service... Aug 13 01:01:57.687995 systemd-logind[1711]: New session 1 of user core. Aug 13 01:01:57.695378 systemd[1]: Finished user-runtime-dir@500.service. Aug 13 01:01:57.698550 systemd[1]: Starting user@500.service... Aug 13 01:01:57.704254 (systemd)[1912]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:57.707275 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] Starting message polling Aug 13 01:01:57.802576 systemd[1912]: Queued start job for default target default.target. Aug 13 01:01:57.803824 systemd[1912]: Reached target paths.target. Aug 13 01:01:57.803856 systemd[1912]: Reached target sockets.target. Aug 13 01:01:57.803876 systemd[1912]: Reached target timers.target. Aug 13 01:01:57.803894 systemd[1912]: Reached target basic.target. Aug 13 01:01:57.804023 systemd[1]: Started user@500.service. Aug 13 01:01:57.804516 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] Starting send replies to MDS Aug 13 01:01:57.805269 systemd[1912]: Reached target default.target. Aug 13 01:01:57.805327 systemd[1912]: Startup finished in 89ms. Aug 13 01:01:57.806023 systemd[1]: Started session-1.scope. Aug 13 01:01:57.842982 systemd[1]: Started kubelet.service. Aug 13 01:01:57.843912 systemd[1]: Reached target multi-user.target. Aug 13 01:01:57.845978 systemd[1]: Starting systemd-update-utmp-runlevel.service... Aug 13 01:01:57.855361 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Aug 13 01:01:57.855534 systemd[1]: Finished systemd-update-utmp-runlevel.service. Aug 13 01:01:57.856714 systemd[1]: Startup finished in 629ms (kernel) + 6.037s (initrd) + 8.439s (userspace) = 15.106s. Aug 13 01:01:57.902052 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [instanceID=i-06a0228475cf38835] Starting association polling Aug 13 01:01:57.953270 systemd[1]: Started sshd@1-172.31.21.64:22-147.75.109.163:39876.service. Aug 13 01:01:57.999730 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Aug 13 01:01:58.097553 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [Association] Launching response handler Aug 13 01:01:58.114144 sshd[1926]: Accepted publickey for core from 147.75.109.163 port 39876 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:58.114811 sshd[1926]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:58.119907 systemd-logind[1711]: New session 2 of user core. Aug 13 01:01:58.120391 systemd[1]: Started session-2.scope. Aug 13 01:01:58.195704 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Aug 13 01:01:58.245617 sshd[1926]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:58.248265 systemd[1]: sshd@1-172.31.21.64:22-147.75.109.163:39876.service: Deactivated successfully. Aug 13 01:01:58.249054 systemd[1]: session-2.scope: Deactivated successfully. Aug 13 01:01:58.249979 systemd-logind[1711]: Session 2 logged out. Waiting for processes to exit. Aug 13 01:01:58.251183 systemd-logind[1711]: Removed session 2. Aug 13 01:01:58.271949 systemd[1]: Started sshd@2-172.31.21.64:22-147.75.109.163:59686.service. Aug 13 01:01:58.294012 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Aug 13 01:01:58.392419 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Aug 13 01:01:58.434147 sshd[1937]: Accepted publickey for core from 147.75.109.163 port 59686 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:58.435681 sshd[1937]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:58.442135 systemd[1]: Started session-3.scope. Aug 13 01:01:58.442952 systemd-logind[1711]: New session 3 of user core. Aug 13 01:01:58.491100 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [StartupProcessor] Executing startup processor tasks Aug 13 01:01:58.563096 sshd[1937]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:58.565814 systemd[1]: sshd@2-172.31.21.64:22-147.75.109.163:59686.service: Deactivated successfully. Aug 13 01:01:58.566561 systemd[1]: session-3.scope: Deactivated successfully. Aug 13 01:01:58.567159 systemd-logind[1711]: Session 3 logged out. Waiting for processes to exit. Aug 13 01:01:58.568358 systemd-logind[1711]: Removed session 3. Aug 13 01:01:58.587995 systemd[1]: Started sshd@3-172.31.21.64:22-147.75.109.163:59694.service. Aug 13 01:01:58.590439 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Aug 13 01:01:58.689443 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Aug 13 01:01:58.749704 sshd[1943]: Accepted publickey for core from 147.75.109.163 port 59694 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:58.751408 sshd[1943]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:58.757388 systemd[1]: Started session-4.scope. Aug 13 01:01:58.757869 systemd-logind[1711]: New session 4 of user core. Aug 13 01:01:58.788662 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Aug 13 01:01:58.887231 sshd[1943]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:58.888703 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-06a0228475cf38835?role=subscribe&stream=input Aug 13 01:01:58.890348 systemd[1]: sshd@3-172.31.21.64:22-147.75.109.163:59694.service: Deactivated successfully. Aug 13 01:01:58.891159 systemd[1]: session-4.scope: Deactivated successfully. Aug 13 01:01:58.892271 systemd-logind[1711]: Session 4 logged out. Waiting for processes to exit. Aug 13 01:01:58.893605 systemd-logind[1711]: Removed session 4. Aug 13 01:01:58.912663 systemd[1]: Started sshd@4-172.31.21.64:22-147.75.109.163:59702.service. Aug 13 01:01:58.987239 kubelet[1921]: E0813 01:01:58.987152 1921 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 01:01:58.988273 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-06a0228475cf38835?role=subscribe&stream=input Aug 13 01:01:58.989444 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 01:01:58.989582 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 01:01:58.989837 systemd[1]: kubelet.service: Consumed 1.226s CPU time. Aug 13 01:01:59.077425 sshd[1949]: Accepted publickey for core from 147.75.109.163 port 59702 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:59.078211 sshd[1949]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:59.082801 systemd-logind[1711]: New session 5 of user core. Aug 13 01:01:59.083244 systemd[1]: Started session-5.scope. Aug 13 01:01:59.088051 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] Starting receiving message from control channel Aug 13 01:01:59.188025 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessageGatewayService] [EngineProcessor] Initial processing Aug 13 01:01:59.206127 sudo[1952]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Aug 13 01:01:59.206464 sudo[1952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:01:59.214385 dbus-daemon[1701]: \xd0m\xef\xad\xd3U: received setenforce notice (enforcing=-1558686128) Aug 13 01:01:59.217523 sudo[1952]: pam_unix(sudo:session): session closed for user root Aug 13 01:01:59.242734 sshd[1949]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:59.245607 systemd[1]: sshd@4-172.31.21.64:22-147.75.109.163:59702.service: Deactivated successfully. Aug 13 01:01:59.246341 systemd[1]: session-5.scope: Deactivated successfully. Aug 13 01:01:59.247008 systemd-logind[1711]: Session 5 logged out. Waiting for processes to exit. Aug 13 01:01:59.248055 systemd-logind[1711]: Removed session 5. Aug 13 01:01:59.269801 systemd[1]: Started sshd@5-172.31.21.64:22-147.75.109.163:59708.service. Aug 13 01:01:59.288227 amazon-ssm-agent[1698]: 2025-08-13 01:01:56 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Aug 13 01:01:59.437487 sshd[1956]: Accepted publickey for core from 147.75.109.163 port 59708 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:59.438410 sshd[1956]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:59.443639 systemd[1]: Started session-6.scope. Aug 13 01:01:59.444214 systemd-logind[1711]: New session 6 of user core. Aug 13 01:01:59.551424 sudo[1960]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Aug 13 01:01:59.551751 sudo[1960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:01:59.555020 sudo[1960]: pam_unix(sudo:session): session closed for user root Aug 13 01:01:59.560471 sudo[1959]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Aug 13 01:01:59.560788 sudo[1959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:01:59.571638 systemd[1]: Stopping audit-rules.service... Aug 13 01:01:59.572000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 01:01:59.574637 kernel: kauditd_printk_skb: 54 callbacks suppressed Aug 13 01:01:59.574683 kernel: audit: type=1305 audit(1755046919.572:222): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 01:01:59.572000 audit[1963]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff958cf430 a2=420 a3=0 items=0 ppid=1 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:59.582065 kernel: audit: type=1300 audit(1755046919.572:222): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff958cf430 a2=420 a3=0 items=0 ppid=1 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:59.582173 kernel: audit: type=1327 audit(1755046919.572:222): proctitle=2F7362696E2F617564697463746C002D44 Aug 13 01:01:59.572000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Aug 13 01:01:59.582242 auditctl[1963]: No rules Aug 13 01:01:59.589136 kernel: audit: type=1131 audit(1755046919.582:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.583088 systemd[1]: audit-rules.service: Deactivated successfully. Aug 13 01:01:59.583317 systemd[1]: Stopped audit-rules.service. Aug 13 01:01:59.588647 systemd[1]: Starting audit-rules.service... Aug 13 01:01:59.609028 augenrules[1980]: No rules Aug 13 01:01:59.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.609687 systemd[1]: Finished audit-rules.service. Aug 13 01:01:59.614135 kernel: audit: type=1130 audit(1755046919.608:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.614299 sudo[1959]: pam_unix(sudo:session): session closed for user root Aug 13 01:01:59.613000 audit[1959]: USER_END pid=1959 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.619136 kernel: audit: type=1106 audit(1755046919.613:225): pid=1959 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.619199 kernel: audit: type=1104 audit(1755046919.613:226): pid=1959 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.613000 audit[1959]: CRED_DISP pid=1959 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.638144 sshd[1956]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:59.638000 audit[1956]: USER_END pid=1956 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.642311 systemd[1]: sshd@5-172.31.21.64:22-147.75.109.163:59708.service: Deactivated successfully. Aug 13 01:01:59.643385 systemd[1]: session-6.scope: Deactivated successfully. Aug 13 01:01:59.645062 systemd-logind[1711]: Session 6 logged out. Waiting for processes to exit. Aug 13 01:01:59.646411 systemd-logind[1711]: Removed session 6. Aug 13 01:01:59.639000 audit[1956]: CRED_DISP pid=1956 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.650776 kernel: audit: type=1106 audit(1755046919.638:227): pid=1956 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.650845 kernel: audit: type=1104 audit(1755046919.639:228): pid=1956 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.650903 kernel: audit: type=1131 audit(1755046919.639:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.21.64:22-147.75.109.163:59708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.21.64:22-147.75.109.163:59708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.663194 systemd[1]: Started sshd@6-172.31.21.64:22-147.75.109.163:59720.service. Aug 13 01:01:59.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.64:22-147.75.109.163:59720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.818000 audit[1986]: USER_ACCT pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.819762 sshd[1986]: Accepted publickey for core from 147.75.109.163 port 59720 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:59.819000 audit[1986]: CRED_ACQ pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.819000 audit[1986]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5554f110 a2=3 a3=0 items=0 ppid=1 pid=1986 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:59.819000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:59.821264 sshd[1986]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:59.826988 systemd[1]: Started session-7.scope. Aug 13 01:01:59.827546 systemd-logind[1711]: New session 7 of user core. Aug 13 01:01:59.832000 audit[1986]: USER_START pid=1986 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.834000 audit[1988]: CRED_ACQ pid=1988 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:59.927000 audit[1989]: USER_ACCT pid=1989 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.927000 audit[1989]: CRED_REFR pid=1989 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.928723 sudo[1989]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Aug 13 01:01:59.929065 sudo[1989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:01:59.929000 audit[1989]: USER_START pid=1989 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.955953 systemd[1]: Starting docker.service... Aug 13 01:01:59.995996 env[1999]: time="2025-08-13T01:01:59.995940620Z" level=info msg="Starting up" Aug 13 01:01:59.997527 env[1999]: time="2025-08-13T01:01:59.997489306Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 01:01:59.997527 env[1999]: time="2025-08-13T01:01:59.997510066Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 01:01:59.997694 env[1999]: time="2025-08-13T01:01:59.997532966Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 01:01:59.997694 env[1999]: time="2025-08-13T01:01:59.997546625Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 01:01:59.999568 env[1999]: time="2025-08-13T01:01:59.999536330Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 01:01:59.999568 env[1999]: time="2025-08-13T01:01:59.999556908Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 01:01:59.999719 env[1999]: time="2025-08-13T01:01:59.999579932Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 01:01:59.999719 env[1999]: time="2025-08-13T01:01:59.999592914Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 01:02:00.007037 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3289886462-merged.mount: Deactivated successfully. Aug 13 01:02:00.246517 env[1999]: time="2025-08-13T01:02:00.246482513Z" level=info msg="Loading containers: start." Aug 13 01:02:00.325000 audit[2030]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.325000 audit[2030]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffced21d740 a2=0 a3=7ffced21d72c items=0 ppid=1999 pid=2030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.325000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Aug 13 01:02:00.327000 audit[2032]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.327000 audit[2032]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fffcfd429c0 a2=0 a3=7fffcfd429ac items=0 ppid=1999 pid=2032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.327000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Aug 13 01:02:00.329000 audit[2034]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.329000 audit[2034]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff72b13940 a2=0 a3=7fff72b1392c items=0 ppid=1999 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.329000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 01:02:00.332000 audit[2036]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.332000 audit[2036]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc081e4580 a2=0 a3=7ffc081e456c items=0 ppid=1999 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 01:02:00.335000 audit[2038]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.335000 audit[2038]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcd5535200 a2=0 a3=7ffcd55351ec items=0 ppid=1999 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Aug 13 01:02:00.354000 audit[2043]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.354000 audit[2043]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd491564d0 a2=0 a3=7ffd491564bc items=0 ppid=1999 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Aug 13 01:02:00.362000 audit[2045]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.362000 audit[2045]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffeb0e09ca0 a2=0 a3=7ffeb0e09c8c items=0 ppid=1999 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.362000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Aug 13 01:02:00.364000 audit[2047]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.364000 audit[2047]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd52f24a20 a2=0 a3=7ffd52f24a0c items=0 ppid=1999 pid=2047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.364000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Aug 13 01:02:00.366000 audit[2049]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.366000 audit[2049]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffc30d3c80 a2=0 a3=7fffc30d3c6c items=0 ppid=1999 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.366000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:02:00.376000 audit[2053]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.376000 audit[2053]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffb3f61900 a2=0 a3=7fffb3f618ec items=0 ppid=1999 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.376000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:02:00.381000 audit[2054]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.381000 audit[2054]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc31775500 a2=0 a3=7ffc317754ec items=0 ppid=1999 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.381000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:02:00.394142 kernel: Initializing XFRM netlink socket Aug 13 01:02:00.433182 env[1999]: time="2025-08-13T01:02:00.433141809Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Aug 13 01:02:00.434397 (udev-worker)[2010]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:02:00.460000 audit[2062]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.460000 audit[2062]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdf2493db0 a2=0 a3=7ffdf2493d9c items=0 ppid=1999 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.460000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Aug 13 01:02:00.471000 audit[2065]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.471000 audit[2065]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff3988e6a0 a2=0 a3=7fff3988e68c items=0 ppid=1999 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.471000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Aug 13 01:02:00.475000 audit[2068]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.475000 audit[2068]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffffbdc5dc0 a2=0 a3=7ffffbdc5dac items=0 ppid=1999 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.475000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Aug 13 01:02:00.477000 audit[2070]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.477000 audit[2070]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcb7356050 a2=0 a3=7ffcb735603c items=0 ppid=1999 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Aug 13 01:02:00.480000 audit[2072]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.480000 audit[2072]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd56964530 a2=0 a3=7ffd5696451c items=0 ppid=1999 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.480000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Aug 13 01:02:00.482000 audit[2074]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.482000 audit[2074]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe537045c0 a2=0 a3=7ffe537045ac items=0 ppid=1999 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.482000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Aug 13 01:02:00.485000 audit[2076]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.485000 audit[2076]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc3bdecfb0 a2=0 a3=7ffc3bdecf9c items=0 ppid=1999 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Aug 13 01:02:00.496000 audit[2079]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.496000 audit[2079]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd7610d260 a2=0 a3=7ffd7610d24c items=0 ppid=1999 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.496000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Aug 13 01:02:00.499000 audit[2081]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.499000 audit[2081]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc3407aa40 a2=0 a3=7ffc3407aa2c items=0 ppid=1999 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.499000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 01:02:00.501000 audit[2083]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.501000 audit[2083]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff8c6cb160 a2=0 a3=7fff8c6cb14c items=0 ppid=1999 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.501000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 01:02:00.504000 audit[2085]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.504000 audit[2085]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe947f7fe0 a2=0 a3=7ffe947f7fcc items=0 ppid=1999 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.504000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Aug 13 01:02:00.506261 systemd-networkd[1444]: docker0: Link UP Aug 13 01:02:00.516000 audit[2089]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.516000 audit[2089]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff56548020 a2=0 a3=7fff5654800c items=0 ppid=1999 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.516000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:02:00.521000 audit[2090]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:00.521000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffeef161400 a2=0 a3=7ffeef1613ec items=0 ppid=1999 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.521000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:02:00.522758 env[1999]: time="2025-08-13T01:02:00.522723928Z" level=info msg="Loading containers: done." Aug 13 01:02:00.542861 env[1999]: time="2025-08-13T01:02:00.542818508Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Aug 13 01:02:00.543065 env[1999]: time="2025-08-13T01:02:00.543030697Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Aug 13 01:02:00.543214 env[1999]: time="2025-08-13T01:02:00.543162900Z" level=info msg="Daemon has completed initialization" Aug 13 01:02:00.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:00.560845 systemd[1]: Started docker.service. Aug 13 01:02:00.573081 env[1999]: time="2025-08-13T01:02:00.572723831Z" level=info msg="API listen on /run/docker.sock" Aug 13 01:02:02.392418 env[1719]: time="2025-08-13T01:02:02.392366987Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\"" Aug 13 01:02:03.089084 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1134212519.mount: Deactivated successfully. Aug 13 01:02:05.011637 env[1719]: time="2025-08-13T01:02:05.011518883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:05.014031 env[1719]: time="2025-08-13T01:02:05.013991884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a92b4b92a991677d355596cc4aa9b0b12cbc38e8cbdc1e476548518ae045bc4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:05.016158 env[1719]: time="2025-08-13T01:02:05.016086812Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:05.018719 env[1719]: time="2025-08-13T01:02:05.018664296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:125a8b488def5ea24e2de5682ab1abf063163aae4d89ce21811a45f3ecf23816,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:05.019672 env[1719]: time="2025-08-13T01:02:05.019630052Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\" returns image reference \"sha256:a92b4b92a991677d355596cc4aa9b0b12cbc38e8cbdc1e476548518ae045bc4a\"" Aug 13 01:02:05.020441 env[1719]: time="2025-08-13T01:02:05.020413191Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\"" Aug 13 01:02:06.804438 env[1719]: time="2025-08-13T01:02:06.804295567Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:06.809576 env[1719]: time="2025-08-13T01:02:06.809524891Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bf97fadcef43049604abcf0caf4f35229fbee25bd0cdb6fdc1d2bbb4f03d9660,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:06.811565 env[1719]: time="2025-08-13T01:02:06.811530029Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:06.813229 env[1719]: time="2025-08-13T01:02:06.813196871Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:96091626e37c5d5920ee6c3203b783cc01a08f287ec0713aeb7809bb62ccea90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:06.814030 env[1719]: time="2025-08-13T01:02:06.813995374Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\" returns image reference \"sha256:bf97fadcef43049604abcf0caf4f35229fbee25bd0cdb6fdc1d2bbb4f03d9660\"" Aug 13 01:02:06.814819 env[1719]: time="2025-08-13T01:02:06.814746578Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\"" Aug 13 01:02:08.276007 env[1719]: time="2025-08-13T01:02:08.275932808Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:08.278743 env[1719]: time="2025-08-13T01:02:08.278693587Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:41376797d5122e388663ab6d0ad583e58cff63e1a0f1eebfb31d615d8f1c1c87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:08.280950 env[1719]: time="2025-08-13T01:02:08.280731636Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:08.282674 env[1719]: time="2025-08-13T01:02:08.282632905Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:f3a2ffdd7483168205236f7762e9a1933f17dd733bc0188b52bddab9c0762868,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:08.283373 env[1719]: time="2025-08-13T01:02:08.283335204Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\" returns image reference \"sha256:41376797d5122e388663ab6d0ad583e58cff63e1a0f1eebfb31d615d8f1c1c87\"" Aug 13 01:02:08.284619 env[1719]: time="2025-08-13T01:02:08.284587659Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\"" Aug 13 01:02:09.228800 kernel: kauditd_printk_skb: 84 callbacks suppressed Aug 13 01:02:09.228955 kernel: audit: type=1130 audit(1755046929.215:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:09.228998 kernel: audit: type=1131 audit(1755046929.215:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:09.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:09.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:09.215842 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Aug 13 01:02:09.216134 systemd[1]: Stopped kubelet.service. Aug 13 01:02:09.216210 systemd[1]: kubelet.service: Consumed 1.226s CPU time. Aug 13 01:02:09.223967 systemd[1]: Starting kubelet.service... Aug 13 01:02:09.414906 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3978140171.mount: Deactivated successfully. Aug 13 01:02:09.542608 kernel: audit: type=1130 audit(1755046929.536:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:09.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:09.536708 systemd[1]: Started kubelet.service. Aug 13 01:02:09.613465 kubelet[2129]: E0813 01:02:09.613416 2129 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 01:02:09.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 01:02:09.617981 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 01:02:09.618136 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 01:02:09.623130 kernel: audit: type=1131 audit(1755046929.617:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 01:02:10.277245 env[1719]: time="2025-08-13T01:02:10.277190837Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:10.279607 env[1719]: time="2025-08-13T01:02:10.279563955Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:af855adae796077ff822e22c0102f686b2ca7b7c51948889b1825388eaac9234,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:10.281551 env[1719]: time="2025-08-13T01:02:10.281514238Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:10.283210 env[1719]: time="2025-08-13T01:02:10.283177033Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:c69929cfba9e38305eb1e20ca859aeb90e0d2a7326eab9bb1e8298882fe626cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:10.283788 env[1719]: time="2025-08-13T01:02:10.283750607Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\" returns image reference \"sha256:af855adae796077ff822e22c0102f686b2ca7b7c51948889b1825388eaac9234\"" Aug 13 01:02:10.284525 env[1719]: time="2025-08-13T01:02:10.284493335Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Aug 13 01:02:10.864672 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount529955467.mount: Deactivated successfully. Aug 13 01:02:12.035233 env[1719]: time="2025-08-13T01:02:12.035185353Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.040073 env[1719]: time="2025-08-13T01:02:12.040022932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.043936 env[1719]: time="2025-08-13T01:02:12.043886169Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.047215 env[1719]: time="2025-08-13T01:02:12.047179477Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.048080 env[1719]: time="2025-08-13T01:02:12.048043726Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Aug 13 01:02:12.048669 env[1719]: time="2025-08-13T01:02:12.048563804Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Aug 13 01:02:12.519323 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3077249403.mount: Deactivated successfully. Aug 13 01:02:12.533230 env[1719]: time="2025-08-13T01:02:12.533176807Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.537538 env[1719]: time="2025-08-13T01:02:12.537488719Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.540665 env[1719]: time="2025-08-13T01:02:12.540624488Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.543556 env[1719]: time="2025-08-13T01:02:12.543518233Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:12.544216 env[1719]: time="2025-08-13T01:02:12.544184849Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Aug 13 01:02:12.544676 env[1719]: time="2025-08-13T01:02:12.544654611Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Aug 13 01:02:13.047304 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1997383331.mount: Deactivated successfully. Aug 13 01:02:15.581132 env[1719]: time="2025-08-13T01:02:15.581054954Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:15.583998 env[1719]: time="2025-08-13T01:02:15.583952711Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:15.586621 env[1719]: time="2025-08-13T01:02:15.586579279Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:15.588874 env[1719]: time="2025-08-13T01:02:15.588658471Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:15.589606 env[1719]: time="2025-08-13T01:02:15.589578126Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Aug 13 01:02:18.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:18.506607 systemd[1]: Stopped kubelet.service. Aug 13 01:02:18.514276 kernel: audit: type=1130 audit(1755046938.505:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:18.514399 kernel: audit: type=1131 audit(1755046938.509:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:18.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:18.513269 systemd[1]: Starting kubelet.service... Aug 13 01:02:18.548922 systemd[1]: Reloading. Aug 13 01:02:18.643608 /usr/lib/systemd/system-generators/torcx-generator[2181]: time="2025-08-13T01:02:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 01:02:18.643638 /usr/lib/systemd/system-generators/torcx-generator[2181]: time="2025-08-13T01:02:18Z" level=info msg="torcx already run" Aug 13 01:02:18.754357 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 01:02:18.754377 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 01:02:18.781611 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 01:02:18.900481 kernel: audit: type=1400 audit(1755046938.888:270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.900631 kernel: audit: type=1400 audit(1755046938.888:271): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.900683 kernel: audit: type=1400 audit(1755046938.888:272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.907247 kernel: audit: type=1400 audit(1755046938.888:273): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.914121 kernel: audit: type=1400 audit(1755046938.888:274): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921231 kernel: audit: type=1400 audit(1755046938.888:275): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921367 kernel: audit: type=1400 audit(1755046938.888:276): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935331 kernel: audit: type=1400 audit(1755046938.888:277): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.895000 audit: BPF prog-id=49 op=LOAD Aug 13 01:02:18.896000 audit: BPF prog-id=41 op=UNLOAD Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit: BPF prog-id=50 op=LOAD Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.913000 audit: BPF prog-id=51 op=LOAD Aug 13 01:02:18.913000 audit: BPF prog-id=42 op=UNLOAD Aug 13 01:02:18.913000 audit: BPF prog-id=43 op=UNLOAD Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.927000 audit: BPF prog-id=52 op=LOAD Aug 13 01:02:18.927000 audit: BPF prog-id=40 op=UNLOAD Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit: BPF prog-id=53 op=LOAD Aug 13 01:02:18.937000 audit: BPF prog-id=44 op=UNLOAD Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit: BPF prog-id=54 op=LOAD Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit: BPF prog-id=55 op=LOAD Aug 13 01:02:18.937000 audit: BPF prog-id=45 op=UNLOAD Aug 13 01:02:18.937000 audit: BPF prog-id=46 op=UNLOAD Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.937000 audit: BPF prog-id=56 op=LOAD Aug 13 01:02:18.937000 audit: BPF prog-id=30 op=UNLOAD Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit: BPF prog-id=57 op=LOAD Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit: BPF prog-id=58 op=LOAD Aug 13 01:02:18.938000 audit: BPF prog-id=31 op=UNLOAD Aug 13 01:02:18.938000 audit: BPF prog-id=32 op=UNLOAD Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit: BPF prog-id=60 op=LOAD Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.939000 audit: BPF prog-id=61 op=LOAD Aug 13 01:02:18.939000 audit: BPF prog-id=34 op=UNLOAD Aug 13 01:02:18.939000 audit: BPF prog-id=35 op=UNLOAD Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.941000 audit: BPF prog-id=62 op=LOAD Aug 13 01:02:18.941000 audit: BPF prog-id=47 op=UNLOAD Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.942000 audit: BPF prog-id=63 op=LOAD Aug 13 01:02:18.942000 audit: BPF prog-id=36 op=UNLOAD Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.945000 audit: BPF prog-id=64 op=LOAD Aug 13 01:02:18.945000 audit: BPF prog-id=39 op=UNLOAD Aug 13 01:02:18.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit: BPF prog-id=65 op=LOAD Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:18.948000 audit: BPF prog-id=66 op=LOAD Aug 13 01:02:18.948000 audit: BPF prog-id=37 op=UNLOAD Aug 13 01:02:18.948000 audit: BPF prog-id=38 op=UNLOAD Aug 13 01:02:18.981136 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Aug 13 01:02:18.981230 systemd[1]: kubelet.service: Failed with result 'signal'. Aug 13 01:02:18.981586 systemd[1]: Stopped kubelet.service. Aug 13 01:02:18.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 01:02:18.984043 systemd[1]: Starting kubelet.service... Aug 13 01:02:19.398444 systemd[1]: Started kubelet.service. Aug 13 01:02:19.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:19.509542 kubelet[2241]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:02:19.509945 kubelet[2241]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Aug 13 01:02:19.509945 kubelet[2241]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:02:19.510052 kubelet[2241]: I0813 01:02:19.510012 2241 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 01:02:20.052786 kubelet[2241]: I0813 01:02:20.052746 2241 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Aug 13 01:02:20.052786 kubelet[2241]: I0813 01:02:20.052781 2241 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 01:02:20.053299 kubelet[2241]: I0813 01:02:20.053278 2241 server.go:956] "Client rotation is on, will bootstrap in background" Aug 13 01:02:20.131330 kubelet[2241]: I0813 01:02:20.131281 2241 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 01:02:20.132142 kubelet[2241]: E0813 01:02:20.132082 2241 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.21.64:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Aug 13 01:02:20.147790 kubelet[2241]: E0813 01:02:20.147712 2241 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 01:02:20.147790 kubelet[2241]: I0813 01:02:20.147744 2241 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 01:02:20.151897 kubelet[2241]: I0813 01:02:20.151852 2241 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 01:02:20.152228 kubelet[2241]: I0813 01:02:20.152188 2241 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 01:02:20.152431 kubelet[2241]: I0813 01:02:20.152223 2241 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-21-64","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 01:02:20.152601 kubelet[2241]: I0813 01:02:20.152441 2241 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 01:02:20.152601 kubelet[2241]: I0813 01:02:20.152456 2241 container_manager_linux.go:303] "Creating device plugin manager" Aug 13 01:02:20.152811 kubelet[2241]: I0813 01:02:20.152609 2241 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:02:20.156965 kubelet[2241]: I0813 01:02:20.156930 2241 kubelet.go:480] "Attempting to sync node with API server" Aug 13 01:02:20.156965 kubelet[2241]: I0813 01:02:20.156967 2241 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 01:02:20.157175 kubelet[2241]: I0813 01:02:20.156995 2241 kubelet.go:386] "Adding apiserver pod source" Aug 13 01:02:20.165446 kubelet[2241]: I0813 01:02:20.165401 2241 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 01:02:20.198108 kubelet[2241]: E0813 01:02:20.198058 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.21.64:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Aug 13 01:02:20.198532 kubelet[2241]: E0813 01:02:20.198510 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.21.64:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-64&limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Aug 13 01:02:20.199334 kubelet[2241]: I0813 01:02:20.199310 2241 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 01:02:20.199925 kubelet[2241]: I0813 01:02:20.199910 2241 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Aug 13 01:02:20.201255 kubelet[2241]: W0813 01:02:20.201235 2241 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Aug 13 01:02:20.208492 kubelet[2241]: I0813 01:02:20.208463 2241 watchdog_linux.go:99] "Systemd watchdog is not enabled" Aug 13 01:02:20.208814 kubelet[2241]: I0813 01:02:20.208558 2241 server.go:1289] "Started kubelet" Aug 13 01:02:20.220000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:20.220000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:02:20.220000 audit[2241]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bde870 a1=c000af92d8 a2=c000bde840 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.220000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:02:20.220000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:20.220000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:02:20.220000 audit[2241]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000af3640 a1=c000af92f0 a2=c000bde900 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.220000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:02:20.222184 kubelet[2241]: I0813 01:02:20.221435 2241 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 01:02:20.222184 kubelet[2241]: I0813 01:02:20.221511 2241 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Aug 13 01:02:20.222633 kubelet[2241]: I0813 01:02:20.222552 2241 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 01:02:20.227584 kubelet[2241]: I0813 01:02:20.227532 2241 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 01:02:20.229285 kubelet[2241]: I0813 01:02:20.229258 2241 server.go:317] "Adding debug handlers to kubelet server" Aug 13 01:02:20.230469 kubelet[2241]: E0813 01:02:20.224454 2241 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.21.64:6443/api/v1/namespaces/default/events\": dial tcp 172.31.21.64:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-21-64.185b2de4bb438bce default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-21-64,UID:ip-172-31-21-64,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-21-64,},FirstTimestamp:2025-08-13 01:02:20.208499662 +0000 UTC m=+0.804138153,LastTimestamp:2025-08-13 01:02:20.208499662 +0000 UTC m=+0.804138153,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-21-64,}" Aug 13 01:02:20.233657 kubelet[2241]: I0813 01:02:20.233588 2241 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 01:02:20.233899 kubelet[2241]: I0813 01:02:20.233877 2241 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 01:02:20.234207 kubelet[2241]: I0813 01:02:20.234186 2241 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 01:02:20.235000 audit[2257]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.235000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffde94c5610 a2=0 a3=7ffde94c55fc items=0 ppid=2241 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.235000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 01:02:20.237415 kubelet[2241]: I0813 01:02:20.237396 2241 volume_manager.go:297] "Starting Kubelet Volume Manager" Aug 13 01:02:20.236000 audit[2258]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.236000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2d747cd0 a2=0 a3=7ffe2d747cbc items=0 ppid=2241 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.236000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 01:02:20.238253 kubelet[2241]: E0813 01:02:20.238221 2241 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-21-64\" not found" Aug 13 01:02:20.239048 kubelet[2241]: I0813 01:02:20.239024 2241 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Aug 13 01:02:20.239157 kubelet[2241]: I0813 01:02:20.239091 2241 reconciler.go:26] "Reconciler: start to sync state" Aug 13 01:02:20.241529 kubelet[2241]: I0813 01:02:20.241506 2241 factory.go:223] Registration of the systemd container factory successfully Aug 13 01:02:20.241634 kubelet[2241]: I0813 01:02:20.241597 2241 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 01:02:20.242160 kubelet[2241]: E0813 01:02:20.242138 2241 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 01:02:20.242345 kubelet[2241]: E0813 01:02:20.242317 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.21.64:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Aug 13 01:02:20.242447 kubelet[2241]: E0813 01:02:20.242418 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.64:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-64?timeout=10s\": dial tcp 172.31.21.64:6443: connect: connection refused" interval="200ms" Aug 13 01:02:20.241000 audit[2260]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.241000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffc8c5e780 a2=0 a3=7fffc8c5e76c items=0 ppid=2241 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.241000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:02:20.245000 audit[2262]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.245000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffce4eb14b0 a2=0 a3=7ffce4eb149c items=0 ppid=2241 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.245000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:02:20.252167 kubelet[2241]: I0813 01:02:20.252136 2241 factory.go:223] Registration of the containerd container factory successfully Aug 13 01:02:20.269000 audit[2266]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.269000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffff5203da0 a2=0 a3=7ffff5203d8c items=0 ppid=2241 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.269000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Aug 13 01:02:20.271814 kubelet[2241]: I0813 01:02:20.271763 2241 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Aug 13 01:02:20.274022 kubelet[2241]: I0813 01:02:20.273996 2241 cpu_manager.go:221] "Starting CPU manager" policy="none" Aug 13 01:02:20.274022 kubelet[2241]: I0813 01:02:20.274019 2241 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Aug 13 01:02:20.274220 kubelet[2241]: I0813 01:02:20.274039 2241 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:02:20.272000 audit[2270]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:20.272000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe103fd160 a2=0 a3=7ffe103fd14c items=0 ppid=2241 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 01:02:20.274686 kubelet[2241]: I0813 01:02:20.274653 2241 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Aug 13 01:02:20.274686 kubelet[2241]: I0813 01:02:20.274678 2241 status_manager.go:230] "Starting to sync pod status with apiserver" Aug 13 01:02:20.274799 kubelet[2241]: I0813 01:02:20.274704 2241 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Aug 13 01:02:20.274799 kubelet[2241]: I0813 01:02:20.274713 2241 kubelet.go:2436] "Starting kubelet main sync loop" Aug 13 01:02:20.274799 kubelet[2241]: E0813 01:02:20.274758 2241 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 01:02:20.275868 kubelet[2241]: E0813 01:02:20.275835 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.21.64:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Aug 13 01:02:20.275000 audit[2272]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:20.275000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff63a72670 a2=0 a3=7fff63a7265c items=0 ppid=2241 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 01:02:20.276000 audit[2271]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=2271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.276000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6052bd30 a2=0 a3=7ffe6052bd1c items=0 ppid=2241 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.276000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 01:02:20.277000 audit[2273]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=2273 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:20.277000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff62123a30 a2=0 a3=7fff62123a1c items=0 ppid=2241 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.277000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 01:02:20.279347 kubelet[2241]: I0813 01:02:20.279272 2241 policy_none.go:49] "None policy: Start" Aug 13 01:02:20.279347 kubelet[2241]: I0813 01:02:20.279295 2241 memory_manager.go:186] "Starting memorymanager" policy="None" Aug 13 01:02:20.279347 kubelet[2241]: I0813 01:02:20.279312 2241 state_mem.go:35] "Initializing new in-memory state store" Aug 13 01:02:20.279000 audit[2274]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.279000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde75cf280 a2=0 a3=7ffde75cf26c items=0 ppid=2241 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.279000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 01:02:20.280000 audit[2275]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:20.280000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc39158950 a2=0 a3=7ffc3915893c items=0 ppid=2241 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.280000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 01:02:20.281000 audit[2276]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:20.281000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdbe518310 a2=0 a3=7ffdbe5182fc items=0 ppid=2241 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.281000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 01:02:20.286751 systemd[1]: Created slice kubepods.slice. Aug 13 01:02:20.292380 systemd[1]: Created slice kubepods-besteffort.slice. Aug 13 01:02:20.299682 systemd[1]: Created slice kubepods-burstable.slice. Aug 13 01:02:20.301724 kubelet[2241]: E0813 01:02:20.301701 2241 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Aug 13 01:02:20.300000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:20.300000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:02:20.300000 audit[2241]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000db2210 a1=c000dacdf8 a2=c000db21e0 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:20.300000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:02:20.305162 kubelet[2241]: E0813 01:02:20.302866 2241 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Aug 13 01:02:20.305448 kubelet[2241]: I0813 01:02:20.305430 2241 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 01:02:20.305691 kubelet[2241]: I0813 01:02:20.305645 2241 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 01:02:20.306106 kubelet[2241]: I0813 01:02:20.306091 2241 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 01:02:20.309272 kubelet[2241]: E0813 01:02:20.309255 2241 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Aug 13 01:02:20.309403 kubelet[2241]: E0813 01:02:20.309389 2241 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-21-64\" not found" Aug 13 01:02:20.387738 systemd[1]: Created slice kubepods-burstable-pod8d4b0c50c2c999fa0ddef2a3ad001a92.slice. Aug 13 01:02:20.396496 kubelet[2241]: E0813 01:02:20.396448 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:20.400019 systemd[1]: Created slice kubepods-burstable-pod6b16b300812f2a9a3f54d3fbc3b32206.slice. Aug 13 01:02:20.407873 kubelet[2241]: I0813 01:02:20.407847 2241 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-21-64" Aug 13 01:02:20.408509 kubelet[2241]: E0813 01:02:20.408456 2241 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.21.64:6443/api/v1/nodes\": dial tcp 172.31.21.64:6443: connect: connection refused" node="ip-172-31-21-64" Aug 13 01:02:20.409069 kubelet[2241]: E0813 01:02:20.409000 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:20.411995 systemd[1]: Created slice kubepods-burstable-pod0e58c80d590e1231c14fc5ec192c0b92.slice. Aug 13 01:02:20.414666 kubelet[2241]: E0813 01:02:20.414640 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:20.443490 kubelet[2241]: E0813 01:02:20.443345 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.64:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-64?timeout=10s\": dial tcp 172.31.21.64:6443: connect: connection refused" interval="400ms" Aug 13 01:02:20.540850 kubelet[2241]: I0813 01:02:20.540581 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-k8s-certs\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:20.540850 kubelet[2241]: I0813 01:02:20.540746 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-kubeconfig\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:20.540850 kubelet[2241]: I0813 01:02:20.540773 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:20.540850 kubelet[2241]: I0813 01:02:20.540802 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8d4b0c50c2c999fa0ddef2a3ad001a92-ca-certs\") pod \"kube-apiserver-ip-172-31-21-64\" (UID: \"8d4b0c50c2c999fa0ddef2a3ad001a92\") " pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:20.540850 kubelet[2241]: I0813 01:02:20.540824 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8d4b0c50c2c999fa0ddef2a3ad001a92-k8s-certs\") pod \"kube-apiserver-ip-172-31-21-64\" (UID: \"8d4b0c50c2c999fa0ddef2a3ad001a92\") " pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:20.542326 kubelet[2241]: I0813 01:02:20.540849 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8d4b0c50c2c999fa0ddef2a3ad001a92-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-21-64\" (UID: \"8d4b0c50c2c999fa0ddef2a3ad001a92\") " pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:20.542326 kubelet[2241]: I0813 01:02:20.540868 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-ca-certs\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:20.542326 kubelet[2241]: I0813 01:02:20.540890 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:20.542326 kubelet[2241]: I0813 01:02:20.540933 2241 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0e58c80d590e1231c14fc5ec192c0b92-kubeconfig\") pod \"kube-scheduler-ip-172-31-21-64\" (UID: \"0e58c80d590e1231c14fc5ec192c0b92\") " pod="kube-system/kube-scheduler-ip-172-31-21-64" Aug 13 01:02:20.610946 kubelet[2241]: I0813 01:02:20.610820 2241 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-21-64" Aug 13 01:02:20.612487 kubelet[2241]: E0813 01:02:20.612444 2241 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.21.64:6443/api/v1/nodes\": dial tcp 172.31.21.64:6443: connect: connection refused" node="ip-172-31-21-64" Aug 13 01:02:20.699336 env[1719]: time="2025-08-13T01:02:20.699264993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-21-64,Uid:8d4b0c50c2c999fa0ddef2a3ad001a92,Namespace:kube-system,Attempt:0,}" Aug 13 01:02:20.710352 env[1719]: time="2025-08-13T01:02:20.710305970Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-21-64,Uid:6b16b300812f2a9a3f54d3fbc3b32206,Namespace:kube-system,Attempt:0,}" Aug 13 01:02:20.716021 env[1719]: time="2025-08-13T01:02:20.715980471Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-21-64,Uid:0e58c80d590e1231c14fc5ec192c0b92,Namespace:kube-system,Attempt:0,}" Aug 13 01:02:20.844007 kubelet[2241]: E0813 01:02:20.843968 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.64:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-64?timeout=10s\": dial tcp 172.31.21.64:6443: connect: connection refused" interval="800ms" Aug 13 01:02:21.014502 kubelet[2241]: I0813 01:02:21.014473 2241 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-21-64" Aug 13 01:02:21.014864 kubelet[2241]: E0813 01:02:21.014831 2241 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.21.64:6443/api/v1/nodes\": dial tcp 172.31.21.64:6443: connect: connection refused" node="ip-172-31-21-64" Aug 13 01:02:21.093211 kubelet[2241]: E0813 01:02:21.093172 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.21.64:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Aug 13 01:02:21.242818 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3101732223.mount: Deactivated successfully. Aug 13 01:02:21.258702 env[1719]: time="2025-08-13T01:02:21.258651440Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.261155 env[1719]: time="2025-08-13T01:02:21.261095470Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.267528 env[1719]: time="2025-08-13T01:02:21.267091959Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.269273 env[1719]: time="2025-08-13T01:02:21.269230512Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.271707 env[1719]: time="2025-08-13T01:02:21.271662922Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.275772 env[1719]: time="2025-08-13T01:02:21.275727559Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.278227 env[1719]: time="2025-08-13T01:02:21.278003788Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.280021 env[1719]: time="2025-08-13T01:02:21.279990057Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.282510 env[1719]: time="2025-08-13T01:02:21.282476930Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.290055 env[1719]: time="2025-08-13T01:02:21.289993972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.292101 env[1719]: time="2025-08-13T01:02:21.292059033Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.294366 env[1719]: time="2025-08-13T01:02:21.294325664Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:21.341896 env[1719]: time="2025-08-13T01:02:21.338254444Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:02:21.341896 env[1719]: time="2025-08-13T01:02:21.338298486Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:02:21.341896 env[1719]: time="2025-08-13T01:02:21.338309521Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:02:21.342916 env[1719]: time="2025-08-13T01:02:21.338509623Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/22a7b363fe0a0cb16e77522f251eb343aea4240b8ec8d14bd04cf7705ef7cb66 pid=2283 runtime=io.containerd.runc.v2 Aug 13 01:02:21.368450 env[1719]: time="2025-08-13T01:02:21.368366583Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:02:21.368450 env[1719]: time="2025-08-13T01:02:21.368417646Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:02:21.368790 env[1719]: time="2025-08-13T01:02:21.368434559Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:02:21.369128 env[1719]: time="2025-08-13T01:02:21.369008257Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7da03e5657bc69cc1515e613570849de78bbda8531ec88919bcf73d6fca706ba pid=2306 runtime=io.containerd.runc.v2 Aug 13 01:02:21.386268 systemd[1]: Started cri-containerd-22a7b363fe0a0cb16e77522f251eb343aea4240b8ec8d14bd04cf7705ef7cb66.scope. Aug 13 01:02:21.401397 env[1719]: time="2025-08-13T01:02:21.399904501Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:02:21.401397 env[1719]: time="2025-08-13T01:02:21.400017521Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:02:21.401397 env[1719]: time="2025-08-13T01:02:21.400055808Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:02:21.401397 env[1719]: time="2025-08-13T01:02:21.400299278Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f75be048c30e774fa5c779ea064fff9344cd832af8df325ea857fd97d186c6b4 pid=2330 runtime=io.containerd.runc.v2 Aug 13 01:02:21.415405 systemd[1]: Started cri-containerd-7da03e5657bc69cc1515e613570849de78bbda8531ec88919bcf73d6fca706ba.scope. Aug 13 01:02:21.417763 kubelet[2241]: E0813 01:02:21.417723 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.21.64:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-64&limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.421000 audit: BPF prog-id=67 op=LOAD Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2283 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232613762333633666530613063623136653737353232663235316562 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2283 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232613762333633666530613063623136653737353232663235316562 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit: BPF prog-id=68 op=LOAD Aug 13 01:02:21.422000 audit[2301]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002298a0 items=0 ppid=2283 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232613762333633666530613063623136653737353232663235316562 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit: BPF prog-id=69 op=LOAD Aug 13 01:02:21.422000 audit[2301]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002298e8 items=0 ppid=2283 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232613762333633666530613063623136653737353232663235316562 Aug 13 01:02:21.422000 audit: BPF prog-id=69 op=UNLOAD Aug 13 01:02:21.422000 audit: BPF prog-id=68 op=UNLOAD Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.422000 audit: BPF prog-id=70 op=LOAD Aug 13 01:02:21.422000 audit[2301]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000229cf8 items=0 ppid=2283 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232613762333633666530613063623136653737353232663235316562 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.446000 audit: BPF prog-id=71 op=LOAD Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2306 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764613033653536353762633639636331353135653631333537303834 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2306 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764613033653536353762633639636331353135653631333537303834 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit: BPF prog-id=72 op=LOAD Aug 13 01:02:21.447000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000301050 items=0 ppid=2306 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764613033653536353762633639636331353135653631333537303834 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.447000 audit: BPF prog-id=73 op=LOAD Aug 13 01:02:21.447000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000301098 items=0 ppid=2306 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764613033653536353762633639636331353135653631333537303834 Aug 13 01:02:21.447000 audit: BPF prog-id=73 op=UNLOAD Aug 13 01:02:21.447000 audit: BPF prog-id=72 op=UNLOAD Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.448000 audit: BPF prog-id=74 op=LOAD Aug 13 01:02:21.448000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003014a8 items=0 ppid=2306 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764613033653536353762633639636331353135653631333537303834 Aug 13 01:02:21.456484 systemd[1]: Started cri-containerd-f75be048c30e774fa5c779ea064fff9344cd832af8df325ea857fd97d186c6b4.scope. Aug 13 01:02:21.508560 env[1719]: time="2025-08-13T01:02:21.508511822Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-21-64,Uid:6b16b300812f2a9a3f54d3fbc3b32206,Namespace:kube-system,Attempt:0,} returns sandbox id \"22a7b363fe0a0cb16e77522f251eb343aea4240b8ec8d14bd04cf7705ef7cb66\"" Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.511000 audit: BPF prog-id=75 op=LOAD Aug 13 01:02:21.512000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.512000 audit[2349]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2330 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356265303438633330653737346661356337373965613036346666 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2330 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356265303438633330653737346661356337373965613036346666 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.513000 audit: BPF prog-id=76 op=LOAD Aug 13 01:02:21.513000 audit[2349]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000388720 items=0 ppid=2330 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356265303438633330653737346661356337373965613036346666 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.514000 audit: BPF prog-id=77 op=LOAD Aug 13 01:02:21.514000 audit[2349]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000388768 items=0 ppid=2330 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356265303438633330653737346661356337373965613036346666 Aug 13 01:02:21.515000 audit: BPF prog-id=77 op=UNLOAD Aug 13 01:02:21.515000 audit: BPF prog-id=76 op=UNLOAD Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.516000 audit: BPF prog-id=78 op=LOAD Aug 13 01:02:21.516000 audit[2349]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000388b78 items=0 ppid=2330 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356265303438633330653737346661356337373965613036346666 Aug 13 01:02:21.529792 env[1719]: time="2025-08-13T01:02:21.529741464Z" level=info msg="CreateContainer within sandbox \"22a7b363fe0a0cb16e77522f251eb343aea4240b8ec8d14bd04cf7705ef7cb66\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Aug 13 01:02:21.539957 env[1719]: time="2025-08-13T01:02:21.539900882Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-21-64,Uid:8d4b0c50c2c999fa0ddef2a3ad001a92,Namespace:kube-system,Attempt:0,} returns sandbox id \"7da03e5657bc69cc1515e613570849de78bbda8531ec88919bcf73d6fca706ba\"" Aug 13 01:02:21.546679 env[1719]: time="2025-08-13T01:02:21.546630973Z" level=info msg="CreateContainer within sandbox \"7da03e5657bc69cc1515e613570849de78bbda8531ec88919bcf73d6fca706ba\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Aug 13 01:02:21.564688 env[1719]: time="2025-08-13T01:02:21.564577944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-21-64,Uid:0e58c80d590e1231c14fc5ec192c0b92,Namespace:kube-system,Attempt:0,} returns sandbox id \"f75be048c30e774fa5c779ea064fff9344cd832af8df325ea857fd97d186c6b4\"" Aug 13 01:02:21.571847 env[1719]: time="2025-08-13T01:02:21.571806178Z" level=info msg="CreateContainer within sandbox \"f75be048c30e774fa5c779ea064fff9344cd832af8df325ea857fd97d186c6b4\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Aug 13 01:02:21.591138 env[1719]: time="2025-08-13T01:02:21.591077533Z" level=info msg="CreateContainer within sandbox \"7da03e5657bc69cc1515e613570849de78bbda8531ec88919bcf73d6fca706ba\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"246673083652f297484c09f3be45904ce4edf578d1824cc8f23f17245207620c\"" Aug 13 01:02:21.591828 env[1719]: time="2025-08-13T01:02:21.591804032Z" level=info msg="StartContainer for \"246673083652f297484c09f3be45904ce4edf578d1824cc8f23f17245207620c\"" Aug 13 01:02:21.604302 env[1719]: time="2025-08-13T01:02:21.604260500Z" level=info msg="CreateContainer within sandbox \"22a7b363fe0a0cb16e77522f251eb343aea4240b8ec8d14bd04cf7705ef7cb66\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6\"" Aug 13 01:02:21.605183 env[1719]: time="2025-08-13T01:02:21.605157077Z" level=info msg="StartContainer for \"c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6\"" Aug 13 01:02:21.610098 systemd[1]: Started cri-containerd-246673083652f297484c09f3be45904ce4edf578d1824cc8f23f17245207620c.scope. Aug 13 01:02:21.611724 env[1719]: time="2025-08-13T01:02:21.611686942Z" level=info msg="CreateContainer within sandbox \"f75be048c30e774fa5c779ea064fff9344cd832af8df325ea857fd97d186c6b4\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94\"" Aug 13 01:02:21.613151 env[1719]: time="2025-08-13T01:02:21.613125700Z" level=info msg="StartContainer for \"816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94\"" Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit: BPF prog-id=79 op=LOAD Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2306 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363637333038333635326632393734383463303966336265343539 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2306 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363637333038333635326632393734383463303966336265343539 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.630000 audit: BPF prog-id=80 op=LOAD Aug 13 01:02:21.630000 audit[2414]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003d8b10 items=0 ppid=2306 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363637333038333635326632393734383463303966336265343539 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit: BPF prog-id=81 op=LOAD Aug 13 01:02:21.631000 audit[2414]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003d8b58 items=0 ppid=2306 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363637333038333635326632393734383463303966336265343539 Aug 13 01:02:21.631000 audit: BPF prog-id=81 op=UNLOAD Aug 13 01:02:21.631000 audit: BPF prog-id=80 op=UNLOAD Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { perfmon } for pid=2414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit[2414]: AVC avc: denied { bpf } for pid=2414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.631000 audit: BPF prog-id=82 op=LOAD Aug 13 01:02:21.631000 audit[2414]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d8f68 items=0 ppid=2306 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363637333038333635326632393734383463303966336265343539 Aug 13 01:02:21.640325 systemd[1]: Started cri-containerd-816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94.scope. Aug 13 01:02:21.645757 kubelet[2241]: E0813 01:02:21.645694 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.64:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-64?timeout=10s\": dial tcp 172.31.21.64:6443: connect: connection refused" interval="1.6s" Aug 13 01:02:21.655413 systemd[1]: Started cri-containerd-c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6.scope. Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.660000 audit: BPF prog-id=83 op=LOAD Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2330 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831366335303262393166386163663737623336323162386463366336 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2330 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831366335303262393166386163663737623336323162386463366336 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit: BPF prog-id=84 op=LOAD Aug 13 01:02:21.661000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000380ec0 items=0 ppid=2330 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831366335303262393166386163663737623336323162386463366336 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit: BPF prog-id=85 op=LOAD Aug 13 01:02:21.661000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000380f08 items=0 ppid=2330 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831366335303262393166386163663737623336323162386463366336 Aug 13 01:02:21.661000 audit: BPF prog-id=85 op=UNLOAD Aug 13 01:02:21.661000 audit: BPF prog-id=84 op=UNLOAD Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.661000 audit: BPF prog-id=86 op=LOAD Aug 13 01:02:21.661000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000381318 items=0 ppid=2330 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831366335303262393166386163663737623336323162386463366336 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.683000 audit: BPF prog-id=87 op=LOAD Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2283 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333326362663932663866633763303732343764363639643732653832 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2283 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333326362663932663866633763303732343764363639643732653832 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.684000 audit: BPF prog-id=88 op=LOAD Aug 13 01:02:21.684000 audit[2445]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002c7aa0 items=0 ppid=2283 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333326362663932663866633763303732343764363639643732653832 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit: BPF prog-id=89 op=LOAD Aug 13 01:02:21.685000 audit[2445]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002c7ae8 items=0 ppid=2283 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333326362663932663866633763303732343764363639643732653832 Aug 13 01:02:21.685000 audit: BPF prog-id=89 op=UNLOAD Aug 13 01:02:21.685000 audit: BPF prog-id=88 op=UNLOAD Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:21.685000 audit: BPF prog-id=90 op=LOAD Aug 13 01:02:21.685000 audit[2445]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002c7ef8 items=0 ppid=2283 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:21.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333326362663932663866633763303732343764363639643732653832 Aug 13 01:02:21.693575 env[1719]: time="2025-08-13T01:02:21.693524348Z" level=info msg="StartContainer for \"246673083652f297484c09f3be45904ce4edf578d1824cc8f23f17245207620c\" returns successfully" Aug 13 01:02:21.720019 env[1719]: time="2025-08-13T01:02:21.719971932Z" level=info msg="StartContainer for \"816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94\" returns successfully" Aug 13 01:02:21.725722 kubelet[2241]: E0813 01:02:21.725681 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.21.64:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Aug 13 01:02:21.737983 env[1719]: time="2025-08-13T01:02:21.737924041Z" level=info msg="StartContainer for \"c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6\" returns successfully" Aug 13 01:02:21.776002 kubelet[2241]: E0813 01:02:21.775854 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.21.64:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Aug 13 01:02:21.816909 kubelet[2241]: I0813 01:02:21.816875 2241 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-21-64" Aug 13 01:02:21.817555 kubelet[2241]: E0813 01:02:21.817519 2241 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.21.64:6443/api/v1/nodes\": dial tcp 172.31.21.64:6443: connect: connection refused" node="ip-172-31-21-64" Aug 13 01:02:22.241479 kubelet[2241]: E0813 01:02:22.241441 2241 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.21.64:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Aug 13 01:02:22.283746 kubelet[2241]: E0813 01:02:22.283714 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:22.289760 kubelet[2241]: E0813 01:02:22.289734 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:22.292071 kubelet[2241]: E0813 01:02:22.292047 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:23.026454 kubelet[2241]: E0813 01:02:23.026408 2241 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.21.64:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.21.64:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Aug 13 01:02:23.247001 kubelet[2241]: E0813 01:02:23.246959 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.64:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-64?timeout=10s\": dial tcp 172.31.21.64:6443: connect: connection refused" interval="3.2s" Aug 13 01:02:23.294762 kubelet[2241]: E0813 01:02:23.294669 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:23.295533 kubelet[2241]: E0813 01:02:23.295512 2241 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-21-64\" not found" node="ip-172-31-21-64" Aug 13 01:02:23.419877 kubelet[2241]: I0813 01:02:23.419845 2241 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-21-64" Aug 13 01:02:25.991014 kernel: kauditd_printk_skb: 602 callbacks suppressed Aug 13 01:02:25.991211 kernel: audit: type=1400 audit(1755046945.984:595): avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:25.984000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.000331 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Aug 13 01:02:25.984000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.021144 kernel: audit: type=1400 audit(1755046945.984:596): avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.021297 kernel: audit: type=1300 audit(1755046945.984:596): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c003abfce0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:25.984000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c003abfce0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:26.035970 kernel: audit: type=1327 audit(1755046945.984:596): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:25.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:25.996000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:25.996000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c003abfe60 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:26.057332 kernel: audit: type=1400 audit(1755046945.996:597): avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.057438 kernel: audit: type=1300 audit(1755046945.996:597): arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c003abfe60 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:25.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:26.066497 kernel: audit: type=1327 audit(1755046945.996:597): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:25.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:26.075751 kernel: audit: type=1131 audit(1755046945.999:598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:26.001000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.101141 kernel: audit: type=1400 audit(1755046946.001:599): avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.001000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c004a1f6a0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:26.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:25.984000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c006ca7500 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:25.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:26.035000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.035000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004a9220 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:26.116198 kernel: audit: type=1300 audit(1755046946.001:599): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c004a1f6a0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:26.035000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:26.035000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.035000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00092ba40 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:26.035000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:26.079000 audit: BPF prog-id=55 op=UNLOAD Aug 13 01:02:26.079000 audit: BPF prog-id=54 op=UNLOAD Aug 13 01:02:26.079000 audit: BPF prog-id=53 op=UNLOAD Aug 13 01:02:26.103000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.103000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0061ca080 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:26.103000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:26.103000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:26.103000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003b44ed0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:02:26.103000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:02:26.197056 kubelet[2241]: I0813 01:02:26.196886 2241 apiserver.go:52] "Watching apiserver" Aug 13 01:02:26.239547 kubelet[2241]: I0813 01:02:26.239506 2241 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Aug 13 01:02:26.247800 kubelet[2241]: I0813 01:02:26.247684 2241 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-21-64" Aug 13 01:02:26.247800 kubelet[2241]: E0813 01:02:26.247744 2241 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ip-172-31-21-64\": node \"ip-172-31-21-64\" not found" Aug 13 01:02:26.339230 kubelet[2241]: I0813 01:02:26.339186 2241 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-21-64" Aug 13 01:02:26.346229 kubelet[2241]: E0813 01:02:26.346194 2241 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-21-64\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-21-64" Aug 13 01:02:26.346440 kubelet[2241]: I0813 01:02:26.346428 2241 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:26.348062 kubelet[2241]: E0813 01:02:26.348037 2241 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-21-64\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:26.348257 kubelet[2241]: I0813 01:02:26.348244 2241 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:26.351599 kubelet[2241]: E0813 01:02:26.351574 2241 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-21-64\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:26.446389 amazon-ssm-agent[1698]: 2025-08-13 01:02:26 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Aug 13 01:02:26.980784 kubelet[2241]: I0813 01:02:26.980728 2241 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:26.983000 kubelet[2241]: E0813 01:02:26.982923 2241 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-21-64\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:28.453492 systemd[1]: Reloading. Aug 13 01:02:28.541654 /usr/lib/systemd/system-generators/torcx-generator[2547]: time="2025-08-13T01:02:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 01:02:28.541999 /usr/lib/systemd/system-generators/torcx-generator[2547]: time="2025-08-13T01:02:28Z" level=info msg="torcx already run" Aug 13 01:02:28.640987 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 01:02:28.641012 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 01:02:28.660391 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 01:02:28.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.751000 audit: BPF prog-id=91 op=LOAD Aug 13 01:02:28.751000 audit: BPF prog-id=49 op=UNLOAD Aug 13 01:02:28.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit: BPF prog-id=92 op=LOAD Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit: BPF prog-id=93 op=LOAD Aug 13 01:02:28.752000 audit: BPF prog-id=50 op=UNLOAD Aug 13 01:02:28.752000 audit: BPF prog-id=51 op=UNLOAD Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.752000 audit: BPF prog-id=94 op=LOAD Aug 13 01:02:28.752000 audit: BPF prog-id=79 op=UNLOAD Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.754000 audit: BPF prog-id=95 op=LOAD Aug 13 01:02:28.754000 audit: BPF prog-id=52 op=UNLOAD Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.755000 audit: BPF prog-id=96 op=LOAD Aug 13 01:02:28.755000 audit: BPF prog-id=67 op=UNLOAD Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.756000 audit: BPF prog-id=97 op=LOAD Aug 13 01:02:28.756000 audit: BPF prog-id=56 op=UNLOAD Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit: BPF prog-id=98 op=LOAD Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.757000 audit: BPF prog-id=99 op=LOAD Aug 13 01:02:28.757000 audit: BPF prog-id=57 op=UNLOAD Aug 13 01:02:28.757000 audit: BPF prog-id=58 op=UNLOAD Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit: BPF prog-id=100 op=LOAD Aug 13 01:02:28.758000 audit: BPF prog-id=59 op=UNLOAD Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit: BPF prog-id=101 op=LOAD Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.758000 audit: BPF prog-id=102 op=LOAD Aug 13 01:02:28.758000 audit: BPF prog-id=60 op=UNLOAD Aug 13 01:02:28.758000 audit: BPF prog-id=61 op=UNLOAD Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.761000 audit: BPF prog-id=103 op=LOAD Aug 13 01:02:28.761000 audit: BPF prog-id=62 op=UNLOAD Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.762000 audit: BPF prog-id=104 op=LOAD Aug 13 01:02:28.762000 audit: BPF prog-id=63 op=UNLOAD Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.764000 audit: BPF prog-id=105 op=LOAD Aug 13 01:02:28.764000 audit: BPF prog-id=83 op=UNLOAD Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.765000 audit: BPF prog-id=106 op=LOAD Aug 13 01:02:28.765000 audit: BPF prog-id=64 op=UNLOAD Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.766000 audit: BPF prog-id=107 op=LOAD Aug 13 01:02:28.766000 audit: BPF prog-id=75 op=UNLOAD Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.767000 audit: BPF prog-id=108 op=LOAD Aug 13 01:02:28.768000 audit: BPF prog-id=71 op=UNLOAD Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit: BPF prog-id=109 op=LOAD Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.769000 audit: BPF prog-id=110 op=LOAD Aug 13 01:02:28.769000 audit: BPF prog-id=65 op=UNLOAD Aug 13 01:02:28.769000 audit: BPF prog-id=66 op=UNLOAD Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:28.771000 audit: BPF prog-id=111 op=LOAD Aug 13 01:02:28.771000 audit: BPF prog-id=87 op=UNLOAD Aug 13 01:02:28.789438 systemd[1]: Stopping kubelet.service... Aug 13 01:02:28.812790 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 01:02:28.813052 systemd[1]: Stopped kubelet.service. Aug 13 01:02:28.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:28.813158 systemd[1]: kubelet.service: Consumed 1.213s CPU time. Aug 13 01:02:28.815279 systemd[1]: Starting kubelet.service... Aug 13 01:02:29.960000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Aug 13 01:02:29.960000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0007c0bc0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:29.960000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:30.158623 systemd[1]: Started kubelet.service. Aug 13 01:02:30.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:30.250420 kubelet[2607]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:02:30.250420 kubelet[2607]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Aug 13 01:02:30.250420 kubelet[2607]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:02:30.250420 kubelet[2607]: I0813 01:02:30.249333 2607 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 01:02:30.262647 kubelet[2607]: I0813 01:02:30.262607 2607 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Aug 13 01:02:30.262647 kubelet[2607]: I0813 01:02:30.262638 2607 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 01:02:30.262962 kubelet[2607]: I0813 01:02:30.262940 2607 server.go:956] "Client rotation is on, will bootstrap in background" Aug 13 01:02:30.265548 kubelet[2607]: I0813 01:02:30.265515 2607 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Aug 13 01:02:30.272244 kubelet[2607]: I0813 01:02:30.272205 2607 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 01:02:30.278471 kubelet[2607]: E0813 01:02:30.278431 2607 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 01:02:30.278471 kubelet[2607]: I0813 01:02:30.278464 2607 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 01:02:30.280881 kubelet[2607]: I0813 01:02:30.280845 2607 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 01:02:30.281106 kubelet[2607]: I0813 01:02:30.281069 2607 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 01:02:30.281329 kubelet[2607]: I0813 01:02:30.281104 2607 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-21-64","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 01:02:30.281474 kubelet[2607]: I0813 01:02:30.281338 2607 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 01:02:30.281474 kubelet[2607]: I0813 01:02:30.281352 2607 container_manager_linux.go:303] "Creating device plugin manager" Aug 13 01:02:30.281474 kubelet[2607]: I0813 01:02:30.281414 2607 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:02:30.281616 kubelet[2607]: I0813 01:02:30.281570 2607 kubelet.go:480] "Attempting to sync node with API server" Aug 13 01:02:30.281616 kubelet[2607]: I0813 01:02:30.281586 2607 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 01:02:30.281616 kubelet[2607]: I0813 01:02:30.281612 2607 kubelet.go:386] "Adding apiserver pod source" Aug 13 01:02:30.281746 kubelet[2607]: I0813 01:02:30.281630 2607 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 01:02:30.293012 kubelet[2607]: I0813 01:02:30.290091 2607 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 01:02:30.293012 kubelet[2607]: I0813 01:02:30.290718 2607 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Aug 13 01:02:30.293416 kubelet[2607]: I0813 01:02:30.293380 2607 watchdog_linux.go:99] "Systemd watchdog is not enabled" Aug 13 01:02:30.293501 kubelet[2607]: I0813 01:02:30.293431 2607 server.go:1289] "Started kubelet" Aug 13 01:02:30.299000 audit[2607]: AVC avc: denied { mac_admin } for pid=2607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:30.299000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:02:30.299000 audit[2607]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000932cc0 a1=c0009a5ae8 a2=c000932c90 a3=25 items=0 ppid=1 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:30.299000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:02:30.299000 audit[2607]: AVC avc: denied { mac_admin } for pid=2607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:30.299000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:02:30.299000 audit[2607]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00094e0a0 a1=c0009a5b00 a2=c000932d50 a3=25 items=0 ppid=1 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:30.299000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:02:30.301359 kubelet[2607]: I0813 01:02:30.300700 2607 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 01:02:30.301359 kubelet[2607]: I0813 01:02:30.300756 2607 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Aug 13 01:02:30.301359 kubelet[2607]: I0813 01:02:30.300800 2607 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 01:02:30.313588 kubelet[2607]: I0813 01:02:30.313530 2607 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 01:02:30.314746 kubelet[2607]: I0813 01:02:30.314712 2607 server.go:317] "Adding debug handlers to kubelet server" Aug 13 01:02:30.318220 kubelet[2607]: I0813 01:02:30.318157 2607 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 01:02:30.318433 kubelet[2607]: I0813 01:02:30.318405 2607 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 01:02:30.318940 kubelet[2607]: I0813 01:02:30.318913 2607 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 01:02:30.323518 kubelet[2607]: I0813 01:02:30.323495 2607 volume_manager.go:297] "Starting Kubelet Volume Manager" Aug 13 01:02:30.324007 kubelet[2607]: E0813 01:02:30.323966 2607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-21-64\" not found" Aug 13 01:02:30.326674 kubelet[2607]: I0813 01:02:30.326651 2607 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Aug 13 01:02:30.327014 kubelet[2607]: I0813 01:02:30.326952 2607 reconciler.go:26] "Reconciler: start to sync state" Aug 13 01:02:30.345927 kubelet[2607]: I0813 01:02:30.344921 2607 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Aug 13 01:02:30.347379 kubelet[2607]: I0813 01:02:30.346427 2607 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Aug 13 01:02:30.347379 kubelet[2607]: I0813 01:02:30.346461 2607 status_manager.go:230] "Starting to sync pod status with apiserver" Aug 13 01:02:30.347379 kubelet[2607]: I0813 01:02:30.346488 2607 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Aug 13 01:02:30.347379 kubelet[2607]: I0813 01:02:30.346497 2607 kubelet.go:2436] "Starting kubelet main sync loop" Aug 13 01:02:30.347379 kubelet[2607]: E0813 01:02:30.346556 2607 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 01:02:30.363608 kubelet[2607]: I0813 01:02:30.363575 2607 factory.go:223] Registration of the systemd container factory successfully Aug 13 01:02:30.363777 kubelet[2607]: I0813 01:02:30.363706 2607 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 01:02:30.367803 kubelet[2607]: I0813 01:02:30.367767 2607 factory.go:223] Registration of the containerd container factory successfully Aug 13 01:02:30.431698 kubelet[2607]: I0813 01:02:30.431669 2607 apiserver.go:52] "Watching apiserver" Aug 13 01:02:30.438907 kubelet[2607]: E0813 01:02:30.438884 2607 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 01:02:30.447190 kubelet[2607]: E0813 01:02:30.447080 2607 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469628 2607 cpu_manager.go:221] "Starting CPU manager" policy="none" Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469643 2607 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469663 2607 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469816 2607 state_mem.go:88] "Updated default CPUSet" cpuSet="" Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469842 2607 state_mem.go:96] "Updated CPUSet assignments" assignments={} Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469858 2607 policy_none.go:49] "None policy: Start" Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469885 2607 memory_manager.go:186] "Starting memorymanager" policy="None" Aug 13 01:02:30.469932 kubelet[2607]: I0813 01:02:30.469896 2607 state_mem.go:35] "Initializing new in-memory state store" Aug 13 01:02:30.470278 kubelet[2607]: I0813 01:02:30.470010 2607 state_mem.go:75] "Updated machine memory state" Aug 13 01:02:30.476493 kubelet[2607]: E0813 01:02:30.476472 2607 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Aug 13 01:02:30.475000 audit[2607]: AVC avc: denied { mac_admin } for pid=2607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:30.475000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:02:30.475000 audit[2607]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bebb00 a1=c000d33b48 a2=c000bebad0 a3=25 items=0 ppid=1 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:30.475000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:02:30.477462 kubelet[2607]: E0813 01:02:30.477445 2607 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Aug 13 01:02:30.477669 kubelet[2607]: I0813 01:02:30.477658 2607 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 01:02:30.477813 kubelet[2607]: I0813 01:02:30.477787 2607 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 01:02:30.478190 kubelet[2607]: I0813 01:02:30.478180 2607 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 01:02:30.487620 kubelet[2607]: E0813 01:02:30.487465 2607 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Aug 13 01:02:30.603809 kubelet[2607]: I0813 01:02:30.603699 2607 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-21-64" Aug 13 01:02:30.613313 kubelet[2607]: I0813 01:02:30.613270 2607 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-21-64" Aug 13 01:02:30.613482 kubelet[2607]: I0813 01:02:30.613358 2607 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-21-64" Aug 13 01:02:30.648218 kubelet[2607]: I0813 01:02:30.648180 2607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-21-64" Aug 13 01:02:30.648729 kubelet[2607]: I0813 01:02:30.648535 2607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:30.649006 kubelet[2607]: I0813 01:02:30.648980 2607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:30.727726 kubelet[2607]: I0813 01:02:30.727688 2607 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Aug 13 01:02:30.795498 kubelet[2607]: I0813 01:02:30.795446 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0e58c80d590e1231c14fc5ec192c0b92-kubeconfig\") pod \"kube-scheduler-ip-172-31-21-64\" (UID: \"0e58c80d590e1231c14fc5ec192c0b92\") " pod="kube-system/kube-scheduler-ip-172-31-21-64" Aug 13 01:02:30.795498 kubelet[2607]: I0813 01:02:30.795503 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8d4b0c50c2c999fa0ddef2a3ad001a92-ca-certs\") pod \"kube-apiserver-ip-172-31-21-64\" (UID: \"8d4b0c50c2c999fa0ddef2a3ad001a92\") " pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:30.795695 kubelet[2607]: I0813 01:02:30.795523 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-ca-certs\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:30.795695 kubelet[2607]: I0813 01:02:30.795539 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8d4b0c50c2c999fa0ddef2a3ad001a92-k8s-certs\") pod \"kube-apiserver-ip-172-31-21-64\" (UID: \"8d4b0c50c2c999fa0ddef2a3ad001a92\") " pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:30.795695 kubelet[2607]: I0813 01:02:30.795557 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8d4b0c50c2c999fa0ddef2a3ad001a92-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-21-64\" (UID: \"8d4b0c50c2c999fa0ddef2a3ad001a92\") " pod="kube-system/kube-apiserver-ip-172-31-21-64" Aug 13 01:02:30.795695 kubelet[2607]: I0813 01:02:30.795574 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:30.795695 kubelet[2607]: I0813 01:02:30.795588 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-k8s-certs\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:30.795866 kubelet[2607]: I0813 01:02:30.795604 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-kubeconfig\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:30.795866 kubelet[2607]: I0813 01:02:30.795619 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6b16b300812f2a9a3f54d3fbc3b32206-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-21-64\" (UID: \"6b16b300812f2a9a3f54d3fbc3b32206\") " pod="kube-system/kube-controller-manager-ip-172-31-21-64" Aug 13 01:02:31.487994 kubelet[2607]: I0813 01:02:31.487917 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-21-64" podStartSLOduration=1.487897371 podStartE2EDuration="1.487897371s" podCreationTimestamp="2025-08-13 01:02:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:02:31.486849799 +0000 UTC m=+1.311117807" watchObservedRunningTime="2025-08-13 01:02:31.487897371 +0000 UTC m=+1.312165344" Aug 13 01:02:31.498900 kubelet[2607]: I0813 01:02:31.498838 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-21-64" podStartSLOduration=1.498809455 podStartE2EDuration="1.498809455s" podCreationTimestamp="2025-08-13 01:02:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:02:31.498393053 +0000 UTC m=+1.322661026" watchObservedRunningTime="2025-08-13 01:02:31.498809455 +0000 UTC m=+1.323077423" Aug 13 01:02:31.511184 kubelet[2607]: I0813 01:02:31.511130 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-21-64" podStartSLOduration=1.51109921 podStartE2EDuration="1.51109921s" podCreationTimestamp="2025-08-13 01:02:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:02:31.50978936 +0000 UTC m=+1.334057330" watchObservedRunningTime="2025-08-13 01:02:31.51109921 +0000 UTC m=+1.335367189" Aug 13 01:02:33.598000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.602210 kernel: kauditd_printk_skb: 279 callbacks suppressed Aug 13 01:02:33.602336 kernel: audit: type=1400 audit(1755046953.598:857): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.598000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e409a0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:33.617673 kernel: audit: type=1300 audit(1755046953.598:857): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e409a0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:33.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:33.625297 kernel: audit: type=1327 audit(1755046953.598:857): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:33.599000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.631614 kernel: audit: type=1400 audit(1755046953.599:858): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.631744 kernel: audit: type=1300 audit(1755046953.599:858): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e409e0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:33.599000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e409e0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:33.599000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:33.647972 kernel: audit: type=1327 audit(1755046953.599:858): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:33.648148 kernel: audit: type=1400 audit(1755046953.600:859): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.600000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.600000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e40d60 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:33.668921 kernel: audit: type=1300 audit(1755046953.600:859): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e40d60 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:33.669066 kernel: audit: type=1327 audit(1755046953.600:859): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:33.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:33.600000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.682371 kernel: audit: type=1400 audit(1755046953.600:860): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.600000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f7b0e0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:02:33.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:34.634227 kubelet[2607]: I0813 01:02:34.634191 2607 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Aug 13 01:02:34.634680 env[1719]: time="2025-08-13T01:02:34.634618539Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Aug 13 01:02:34.635040 kubelet[2607]: I0813 01:02:34.634886 2607 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Aug 13 01:02:35.526562 systemd[1]: Created slice kubepods-besteffort-pod31124542_2846_444e_9a64_886642097bb1.slice. Aug 13 01:02:35.638456 kubelet[2607]: I0813 01:02:35.638401 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/31124542-2846-444e-9a64-886642097bb1-xtables-lock\") pod \"kube-proxy-rgf44\" (UID: \"31124542-2846-444e-9a64-886642097bb1\") " pod="kube-system/kube-proxy-rgf44" Aug 13 01:02:35.638456 kubelet[2607]: I0813 01:02:35.638457 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/31124542-2846-444e-9a64-886642097bb1-kube-proxy\") pod \"kube-proxy-rgf44\" (UID: \"31124542-2846-444e-9a64-886642097bb1\") " pod="kube-system/kube-proxy-rgf44" Aug 13 01:02:35.638456 kubelet[2607]: I0813 01:02:35.638476 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/31124542-2846-444e-9a64-886642097bb1-lib-modules\") pod \"kube-proxy-rgf44\" (UID: \"31124542-2846-444e-9a64-886642097bb1\") " pod="kube-system/kube-proxy-rgf44" Aug 13 01:02:35.638979 kubelet[2607]: I0813 01:02:35.638491 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9gdmp\" (UniqueName: \"kubernetes.io/projected/31124542-2846-444e-9a64-886642097bb1-kube-api-access-9gdmp\") pod \"kube-proxy-rgf44\" (UID: \"31124542-2846-444e-9a64-886642097bb1\") " pod="kube-system/kube-proxy-rgf44" Aug 13 01:02:35.745656 kubelet[2607]: I0813 01:02:35.745615 2607 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Aug 13 01:02:35.834407 env[1719]: time="2025-08-13T01:02:35.834296735Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rgf44,Uid:31124542-2846-444e-9a64-886642097bb1,Namespace:kube-system,Attempt:0,}" Aug 13 01:02:35.863077 env[1719]: time="2025-08-13T01:02:35.863009432Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:02:35.863220 env[1719]: time="2025-08-13T01:02:35.863084862Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:02:35.863220 env[1719]: time="2025-08-13T01:02:35.863106740Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:02:35.863378 env[1719]: time="2025-08-13T01:02:35.863344941Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/874363d3d3c87098919562979f6cf7eccad64c3abf58f1efae9846bcef363f85 pid=2660 runtime=io.containerd.runc.v2 Aug 13 01:02:35.879188 systemd[1]: Started cri-containerd-874363d3d3c87098919562979f6cf7eccad64c3abf58f1efae9846bcef363f85.scope. Aug 13 01:02:35.889215 systemd[1]: run-containerd-runc-k8s.io-874363d3d3c87098919562979f6cf7eccad64c3abf58f1efae9846bcef363f85-runc.5spzo3.mount: Deactivated successfully. Aug 13 01:02:35.931055 systemd[1]: Created slice kubepods-besteffort-pod9504db8b_85f9_411c_95b7_58dcc4e1ef17.slice. Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.934000 audit: BPF prog-id=112 op=LOAD Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2660 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837343336336433643363383730393839313935363239373966366366 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2660 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837343336336433643363383730393839313935363239373966366366 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.935000 audit: BPF prog-id=113 op=LOAD Aug 13 01:02:35.935000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003acf80 items=0 ppid=2660 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837343336336433643363383730393839313935363239373966366366 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit: BPF prog-id=114 op=LOAD Aug 13 01:02:35.936000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003acfc8 items=0 ppid=2660 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:35.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837343336336433643363383730393839313935363239373966366366 Aug 13 01:02:35.936000 audit: BPF prog-id=114 op=UNLOAD Aug 13 01:02:35.936000 audit: BPF prog-id=113 op=UNLOAD Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:35.936000 audit: BPF prog-id=115 op=LOAD Aug 13 01:02:35.936000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003ad3d8 items=0 ppid=2660 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:35.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837343336336433643363383730393839313935363239373966366366 Aug 13 01:02:35.954690 env[1719]: time="2025-08-13T01:02:35.954648142Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rgf44,Uid:31124542-2846-444e-9a64-886642097bb1,Namespace:kube-system,Attempt:0,} returns sandbox id \"874363d3d3c87098919562979f6cf7eccad64c3abf58f1efae9846bcef363f85\"" Aug 13 01:02:35.963628 env[1719]: time="2025-08-13T01:02:35.963593489Z" level=info msg="CreateContainer within sandbox \"874363d3d3c87098919562979f6cf7eccad64c3abf58f1efae9846bcef363f85\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Aug 13 01:02:35.998467 env[1719]: time="2025-08-13T01:02:35.998408164Z" level=info msg="CreateContainer within sandbox \"874363d3d3c87098919562979f6cf7eccad64c3abf58f1efae9846bcef363f85\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"09c1b0aaf5ef7d4eddfa30d4e0b79c5faeeb2ee8028839b54f2859499e3a98a9\"" Aug 13 01:02:36.000259 env[1719]: time="2025-08-13T01:02:36.000228415Z" level=info msg="StartContainer for \"09c1b0aaf5ef7d4eddfa30d4e0b79c5faeeb2ee8028839b54f2859499e3a98a9\"" Aug 13 01:02:36.018815 systemd[1]: Started cri-containerd-09c1b0aaf5ef7d4eddfa30d4e0b79c5faeeb2ee8028839b54f2859499e3a98a9.scope. Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f565c34aa88 items=0 ppid=2660 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633162306161663565663764346564646661333064346530623739 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.034000 audit: BPF prog-id=116 op=LOAD Aug 13 01:02:36.034000 audit[2699]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00022c7c8 items=0 ppid=2660 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633162306161663565663764346564646661333064346530623739 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit: BPF prog-id=117 op=LOAD Aug 13 01:02:36.035000 audit[2699]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00022c818 items=0 ppid=2660 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633162306161663565663764346564646661333064346530623739 Aug 13 01:02:36.035000 audit: BPF prog-id=117 op=UNLOAD Aug 13 01:02:36.035000 audit: BPF prog-id=116 op=UNLOAD Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.035000 audit: BPF prog-id=118 op=LOAD Aug 13 01:02:36.035000 audit[2699]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00022c8a8 items=0 ppid=2660 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633162306161663565663764346564646661333064346530623739 Aug 13 01:02:36.040378 kubelet[2607]: I0813 01:02:36.040320 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9504db8b-85f9-411c-95b7-58dcc4e1ef17-var-lib-calico\") pod \"tigera-operator-747864d56d-qm27n\" (UID: \"9504db8b-85f9-411c-95b7-58dcc4e1ef17\") " pod="tigera-operator/tigera-operator-747864d56d-qm27n" Aug 13 01:02:36.040378 kubelet[2607]: I0813 01:02:36.040351 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ws9qk\" (UniqueName: \"kubernetes.io/projected/9504db8b-85f9-411c-95b7-58dcc4e1ef17-kube-api-access-ws9qk\") pod \"tigera-operator-747864d56d-qm27n\" (UID: \"9504db8b-85f9-411c-95b7-58dcc4e1ef17\") " pod="tigera-operator/tigera-operator-747864d56d-qm27n" Aug 13 01:02:36.052204 env[1719]: time="2025-08-13T01:02:36.052161801Z" level=info msg="StartContainer for \"09c1b0aaf5ef7d4eddfa30d4e0b79c5faeeb2ee8028839b54f2859499e3a98a9\" returns successfully" Aug 13 01:02:36.235558 env[1719]: time="2025-08-13T01:02:36.235513359Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-qm27n,Uid:9504db8b-85f9-411c-95b7-58dcc4e1ef17,Namespace:tigera-operator,Attempt:0,}" Aug 13 01:02:36.260033 env[1719]: time="2025-08-13T01:02:36.259946045Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:02:36.260033 env[1719]: time="2025-08-13T01:02:36.260003190Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:02:36.260509 env[1719]: time="2025-08-13T01:02:36.260018743Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:02:36.261012 env[1719]: time="2025-08-13T01:02:36.260882801Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/48f859152624e88d8f307fbdba3c6d2e43e123dc43d749acc5aa841d523cb8c9 pid=2731 runtime=io.containerd.runc.v2 Aug 13 01:02:36.291140 systemd[1]: Started cri-containerd-48f859152624e88d8f307fbdba3c6d2e43e123dc43d749acc5aa841d523cb8c9.scope. Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.305000 audit: BPF prog-id=119 op=LOAD Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2731 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835393135323632346538386438663330376662646261336336 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2731 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835393135323632346538386438663330376662646261336336 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.308000 audit: BPF prog-id=120 op=LOAD Aug 13 01:02:36.308000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025410 items=0 ppid=2731 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835393135323632346538386438663330376662646261336336 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.309000 audit: BPF prog-id=121 op=LOAD Aug 13 01:02:36.309000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025458 items=0 ppid=2731 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835393135323632346538386438663330376662646261336336 Aug 13 01:02:36.310000 audit: BPF prog-id=121 op=UNLOAD Aug 13 01:02:36.311000 audit: BPF prog-id=120 op=UNLOAD Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:36.311000 audit: BPF prog-id=122 op=LOAD Aug 13 01:02:36.311000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025868 items=0 ppid=2731 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:36.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835393135323632346538386438663330376662646261336336 Aug 13 01:02:36.344747 env[1719]: time="2025-08-13T01:02:36.344574122Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-qm27n,Uid:9504db8b-85f9-411c-95b7-58dcc4e1ef17,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"48f859152624e88d8f307fbdba3c6d2e43e123dc43d749acc5aa841d523cb8c9\"" Aug 13 01:02:36.350032 env[1719]: time="2025-08-13T01:02:36.349985052Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Aug 13 01:02:37.769000 audit[2802]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.769000 audit[2802]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffdc05f470 a2=0 a3=7fffdc05f45c items=0 ppid=2710 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.769000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 01:02:37.770000 audit[2804]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2804 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.770000 audit[2804]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc632fdf60 a2=0 a3=7ffc632fdf4c items=0 ppid=2710 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 01:02:37.772000 audit[2805]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.772000 audit[2805]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdaa012190 a2=0 a3=7ffdaa01217c items=0 ppid=2710 pid=2805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.772000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 01:02:37.773000 audit[2806]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2806 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:37.773000 audit[2806]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2f7b1800 a2=0 a3=7fff2f7b17ec items=0 ppid=2710 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 01:02:37.775000 audit[2807]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:37.775000 audit[2807]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdce308ce0 a2=0 a3=7ffdce308ccc items=0 ppid=2710 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 01:02:37.776000 audit[2808]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2808 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:37.776000 audit[2808]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdaa1ba690 a2=0 a3=7ffdaa1ba67c items=0 ppid=2710 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.776000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 01:02:37.884000 audit[2811]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.884000 audit[2811]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcbcbb6590 a2=0 a3=7ffcbcbb657c items=0 ppid=2710 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.884000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 01:02:37.898000 audit[2813]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2813 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.898000 audit[2813]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffce6d938e0 a2=0 a3=7ffce6d938cc items=0 ppid=2710 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Aug 13 01:02:37.904000 audit[2816]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.904000 audit[2816]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcc8191bc0 a2=0 a3=7ffcc8191bac items=0 ppid=2710 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Aug 13 01:02:37.906000 audit[2817]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.906000 audit[2817]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc915b6e00 a2=0 a3=7ffc915b6dec items=0 ppid=2710 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.906000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 01:02:37.910000 audit[2819]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2819 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.910000 audit[2819]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdbac02700 a2=0 a3=7ffdbac026ec items=0 ppid=2710 pid=2819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.910000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 01:02:37.914000 audit[2820]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.914000 audit[2820]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd65307fe0 a2=0 a3=7ffd65307fcc items=0 ppid=2710 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 01:02:37.923000 audit[2822]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2822 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.923000 audit[2822]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffc52c8eb0 a2=0 a3=7fffc52c8e9c items=0 ppid=2710 pid=2822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.923000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 01:02:37.931000 audit[2825]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.931000 audit[2825]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd0de175e0 a2=0 a3=7ffd0de175cc items=0 ppid=2710 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Aug 13 01:02:37.935000 audit[2826]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2826 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.935000 audit[2826]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffe685cc50 a2=0 a3=7fffe685cc3c items=0 ppid=2710 pid=2826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.935000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 01:02:37.940000 audit[2828]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.940000 audit[2828]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd4e1194f0 a2=0 a3=7ffd4e1194dc items=0 ppid=2710 pid=2828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.940000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 01:02:37.944000 audit[2829]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2829 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.944000 audit[2829]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe13fcbfa0 a2=0 a3=7ffe13fcbf8c items=0 ppid=2710 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.944000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 01:02:37.951000 audit[2831]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2831 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.951000 audit[2831]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe91e405c0 a2=0 a3=7ffe91e405ac items=0 ppid=2710 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.951000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 01:02:37.959000 audit[2834]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2834 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.959000 audit[2834]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc487dc110 a2=0 a3=7ffc487dc0fc items=0 ppid=2710 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.959000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 01:02:37.967000 audit[2837]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.967000 audit[2837]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffcd335ba0 a2=0 a3=7fffcd335b8c items=0 ppid=2710 pid=2837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.967000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 01:02:37.969000 audit[2838]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2838 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.969000 audit[2838]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffddfaa8520 a2=0 a3=7ffddfaa850c items=0 ppid=2710 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 01:02:37.975000 audit[2840]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2840 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.975000 audit[2840]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff564d2730 a2=0 a3=7fff564d271c items=0 ppid=2710 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.975000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:02:37.982000 audit[2843]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.982000 audit[2843]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd38b53370 a2=0 a3=7ffd38b5335c items=0 ppid=2710 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.982000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:02:37.984000 audit[2844]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2844 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.984000 audit[2844]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5aee1580 a2=0 a3=7ffe5aee156c items=0 ppid=2710 pid=2844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.984000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 01:02:37.988000 audit[2846]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:02:37.988000 audit[2846]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc950e6120 a2=0 a3=7ffc950e610c items=0 ppid=2710 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:37.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 01:02:38.062360 kubelet[2607]: I0813 01:02:38.059540 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-rgf44" podStartSLOduration=3.059517023 podStartE2EDuration="3.059517023s" podCreationTimestamp="2025-08-13 01:02:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:02:36.484925778 +0000 UTC m=+6.309193746" watchObservedRunningTime="2025-08-13 01:02:38.059517023 +0000 UTC m=+7.883784996" Aug 13 01:02:38.089000 audit[2852]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2852 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:38.089000 audit[2852]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffee04abcb0 a2=0 a3=7ffee04abc9c items=0 ppid=2710 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.089000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:38.105000 audit[2852]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2852 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:38.105000 audit[2852]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffee04abcb0 a2=0 a3=7ffee04abc9c items=0 ppid=2710 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.105000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:38.107000 audit[2857]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2857 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.107000 audit[2857]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe72acfed0 a2=0 a3=7ffe72acfebc items=0 ppid=2710 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.107000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 01:02:38.113618 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2008317792.mount: Deactivated successfully. Aug 13 01:02:38.117000 audit[2859]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2859 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.117000 audit[2859]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdfec5c280 a2=0 a3=7ffdfec5c26c items=0 ppid=2710 pid=2859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.117000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Aug 13 01:02:38.122000 audit[2862]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2862 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.122000 audit[2862]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd65ed6ff0 a2=0 a3=7ffd65ed6fdc items=0 ppid=2710 pid=2862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.122000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Aug 13 01:02:38.124000 audit[2863]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2863 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.124000 audit[2863]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffdd968f0 a2=0 a3=7ffffdd968dc items=0 ppid=2710 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.124000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 01:02:38.128000 audit[2865]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2865 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.128000 audit[2865]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc23ecd80 a2=0 a3=7fffc23ecd6c items=0 ppid=2710 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.128000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 01:02:38.130000 audit[2866]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2866 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.130000 audit[2866]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0fbb1000 a2=0 a3=7ffd0fbb0fec items=0 ppid=2710 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 01:02:38.133000 audit[2868]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2868 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.133000 audit[2868]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe37fc9310 a2=0 a3=7ffe37fc92fc items=0 ppid=2710 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Aug 13 01:02:38.138000 audit[2871]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2871 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.138000 audit[2871]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffdddc85830 a2=0 a3=7ffdddc8581c items=0 ppid=2710 pid=2871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.138000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 01:02:38.140000 audit[2872]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2872 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.140000 audit[2872]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5dcb6a40 a2=0 a3=7ffe5dcb6a2c items=0 ppid=2710 pid=2872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 01:02:38.144000 audit[2874]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2874 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.144000 audit[2874]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcb0ae67e0 a2=0 a3=7ffcb0ae67cc items=0 ppid=2710 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.144000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 01:02:38.145000 audit[2875]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2875 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.145000 audit[2875]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdbacadce0 a2=0 a3=7ffdbacadccc items=0 ppid=2710 pid=2875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 01:02:38.160000 audit[2877]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2877 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.160000 audit[2877]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdafb5ec60 a2=0 a3=7ffdafb5ec4c items=0 ppid=2710 pid=2877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.160000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 01:02:38.171000 audit[2880]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2880 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.171000 audit[2880]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd50521df0 a2=0 a3=7ffd50521ddc items=0 ppid=2710 pid=2880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.171000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 01:02:38.178000 audit[2883]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2883 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.178000 audit[2883]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd934a1e10 a2=0 a3=7ffd934a1dfc items=0 ppid=2710 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Aug 13 01:02:38.180000 audit[2884]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2884 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.180000 audit[2884]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffaeda5bc0 a2=0 a3=7fffaeda5bac items=0 ppid=2710 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 01:02:38.184000 audit[2886]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2886 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.184000 audit[2886]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe60acb940 a2=0 a3=7ffe60acb92c items=0 ppid=2710 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:02:38.190000 audit[2889]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2889 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.190000 audit[2889]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffce9233f50 a2=0 a3=7ffce9233f3c items=0 ppid=2710 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:02:38.192000 audit[2890]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2890 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.192000 audit[2890]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc7eed970 a2=0 a3=7fffc7eed95c items=0 ppid=2710 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.192000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 01:02:38.196000 audit[2892]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2892 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.196000 audit[2892]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fffc8f1d940 a2=0 a3=7fffc8f1d92c items=0 ppid=2710 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.196000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 01:02:38.203000 audit[2893]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2893 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.203000 audit[2893]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeafb716a0 a2=0 a3=7ffeafb7168c items=0 ppid=2710 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.203000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 01:02:38.226000 audit[2895]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2895 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.226000 audit[2895]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd03502f40 a2=0 a3=7ffd03502f2c items=0 ppid=2710 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.226000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:02:38.235000 audit[2898]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2898 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:02:38.235000 audit[2898]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd4802ea80 a2=0 a3=7ffd4802ea6c items=0 ppid=2710 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:02:38.243000 audit[2900]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2900 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 01:02:38.243000 audit[2900]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffe0ece15e0 a2=0 a3=7ffe0ece15cc items=0 ppid=2710 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.243000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:38.244000 audit[2900]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2900 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 01:02:38.244000 audit[2900]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffe0ece15e0 a2=0 a3=7ffe0ece15cc items=0 ppid=2710 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:38.244000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:39.053732 env[1719]: time="2025-08-13T01:02:39.053665174Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:39.059138 env[1719]: time="2025-08-13T01:02:39.059079596Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:39.062132 env[1719]: time="2025-08-13T01:02:39.062082679Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:39.065294 env[1719]: time="2025-08-13T01:02:39.065256798Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:39.065948 env[1719]: time="2025-08-13T01:02:39.065898515Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Aug 13 01:02:39.076449 env[1719]: time="2025-08-13T01:02:39.076406800Z" level=info msg="CreateContainer within sandbox \"48f859152624e88d8f307fbdba3c6d2e43e123dc43d749acc5aa841d523cb8c9\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Aug 13 01:02:39.104553 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1300286276.mount: Deactivated successfully. Aug 13 01:02:39.132581 env[1719]: time="2025-08-13T01:02:39.132300229Z" level=info msg="CreateContainer within sandbox \"48f859152624e88d8f307fbdba3c6d2e43e123dc43d749acc5aa841d523cb8c9\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5\"" Aug 13 01:02:39.133629 env[1719]: time="2025-08-13T01:02:39.133584060Z" level=info msg="StartContainer for \"99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5\"" Aug 13 01:02:39.162464 systemd[1]: Started cri-containerd-99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5.scope. Aug 13 01:02:39.188861 kernel: kauditd_printk_skb: 312 callbacks suppressed Aug 13 01:02:39.189003 kernel: audit: type=1400 audit(1755046959.184:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.206501 kernel: audit: type=1400 audit(1755046959.184:955): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.206698 kernel: audit: type=1400 audit(1755046959.184:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.236295 kernel: audit: type=1400 audit(1755046959.184:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.236486 kernel: audit: type=1400 audit(1755046959.184:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.246436 kernel: audit: type=1400 audit(1755046959.184:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.246635 kernel: audit: type=1400 audit(1755046959.184:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.262563 kernel: audit: type=1400 audit(1755046959.184:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.262710 kernel: audit: type=1400 audit(1755046959.184:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.271271 kernel: audit: type=1400 audit(1755046959.185:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.185000 audit: BPF prog-id=123 op=LOAD Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2731 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:39.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333836323135303130623361633833626438383333373731393330 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2731 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:39.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333836323135303130623361633833626438383333373731393330 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.187000 audit: BPF prog-id=124 op=LOAD Aug 13 01:02:39.187000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028a900 items=0 ppid=2731 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:39.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333836323135303130623361633833626438383333373731393330 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit: BPF prog-id=125 op=LOAD Aug 13 01:02:39.214000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028a948 items=0 ppid=2731 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:39.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333836323135303130623361633833626438383333373731393330 Aug 13 01:02:39.214000 audit: BPF prog-id=125 op=UNLOAD Aug 13 01:02:39.214000 audit: BPF prog-id=124 op=UNLOAD Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:39.214000 audit: BPF prog-id=126 op=LOAD Aug 13 01:02:39.214000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028ad58 items=0 ppid=2731 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:39.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333836323135303130623361633833626438383333373731393330 Aug 13 01:02:39.302331 env[1719]: time="2025-08-13T01:02:39.302265672Z" level=info msg="StartContainer for \"99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5\" returns successfully" Aug 13 01:02:40.364902 kubelet[2607]: I0813 01:02:40.364839 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-qm27n" podStartSLOduration=2.644070047 podStartE2EDuration="5.364817407s" podCreationTimestamp="2025-08-13 01:02:35 +0000 UTC" firstStartedPulling="2025-08-13 01:02:36.346157665 +0000 UTC m=+6.170425639" lastFinishedPulling="2025-08-13 01:02:39.066905049 +0000 UTC m=+8.891172999" observedRunningTime="2025-08-13 01:02:39.496539023 +0000 UTC m=+9.320806997" watchObservedRunningTime="2025-08-13 01:02:40.364817407 +0000 UTC m=+10.189085413" Aug 13 01:02:40.752284 update_engine[1713]: I0813 01:02:40.752225 1713 update_attempter.cc:509] Updating boot flags... Aug 13 01:02:44.668536 sudo[1989]: pam_unix(sudo:session): session closed for user root Aug 13 01:02:44.681198 kernel: kauditd_printk_skb: 47 callbacks suppressed Aug 13 01:02:44.681350 kernel: audit: type=1106 audit(1755046964.667:972): pid=1989 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:02:44.667000 audit[1989]: USER_END pid=1989 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:02:44.667000 audit[1989]: CRED_DISP pid=1989 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:02:44.691325 kernel: audit: type=1104 audit(1755046964.667:973): pid=1989 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:02:44.703195 sshd[1986]: pam_unix(sshd:session): session closed for user core Aug 13 01:02:44.708000 audit[1986]: USER_END pid=1986 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:44.722280 kernel: audit: type=1106 audit(1755046964.708:974): pid=1986 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:44.708000 audit[1986]: CRED_DISP pid=1986 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:44.734174 kernel: audit: type=1104 audit(1755046964.708:975): pid=1986 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:44.737676 systemd[1]: sshd@6-172.31.21.64:22-147.75.109.163:59720.service: Deactivated successfully. Aug 13 01:02:44.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.64:22-147.75.109.163:59720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:44.739576 systemd[1]: session-7.scope: Deactivated successfully. Aug 13 01:02:44.739770 systemd[1]: session-7.scope: Consumed 5.295s CPU time. Aug 13 01:02:44.740517 systemd-logind[1711]: Session 7 logged out. Waiting for processes to exit. Aug 13 01:02:44.741897 systemd-logind[1711]: Removed session 7. Aug 13 01:02:44.747150 kernel: audit: type=1131 audit(1755046964.736:976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.64:22-147.75.109.163:59720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:46.322000 audit[3082]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:46.330145 kernel: audit: type=1325 audit(1755046966.322:977): table=filter:89 family=2 entries=14 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:46.322000 audit[3082]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc16b3bf80 a2=0 a3=7ffc16b3bf6c items=0 ppid=2710 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:46.346132 kernel: audit: type=1300 audit(1755046966.322:977): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc16b3bf80 a2=0 a3=7ffc16b3bf6c items=0 ppid=2710 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:46.322000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:46.359135 kernel: audit: type=1327 audit(1755046966.322:977): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:46.351000 audit[3082]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:46.379088 kernel: audit: type=1325 audit(1755046966.351:978): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:46.379235 kernel: audit: type=1300 audit(1755046966.351:978): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc16b3bf80 a2=0 a3=0 items=0 ppid=2710 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:46.351000 audit[3082]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc16b3bf80 a2=0 a3=0 items=0 ppid=2710 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:46.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:46.372000 audit[3084]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=3084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:46.372000 audit[3084]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc68481ce0 a2=0 a3=7ffc68481ccc items=0 ppid=2710 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:46.372000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:46.385000 audit[3084]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:46.385000 audit[3084]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc68481ce0 a2=0 a3=0 items=0 ppid=2710 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:46.385000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:48.932000 audit[3087]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:48.932000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff83987800 a2=0 a3=7fff839877ec items=0 ppid=2710 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:48.932000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:48.937000 audit[3087]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:48.937000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff83987800 a2=0 a3=0 items=0 ppid=2710 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:48.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:48.963000 audit[3089]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:48.963000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffabd8d810 a2=0 a3=7fffabd8d7fc items=0 ppid=2710 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:48.963000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:48.968000 audit[3089]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:48.968000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffabd8d810 a2=0 a3=0 items=0 ppid=2710 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:48.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:49.301589 systemd[1]: Created slice kubepods-besteffort-podb651b80d_d0ca_40b0_8d04_e6dc84e3af8c.slice. Aug 13 01:02:49.452068 kubelet[2607]: I0813 01:02:49.452017 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/b651b80d-d0ca-40b0-8d04-e6dc84e3af8c-typha-certs\") pod \"calico-typha-65c9f5c6d4-cxfl4\" (UID: \"b651b80d-d0ca-40b0-8d04-e6dc84e3af8c\") " pod="calico-system/calico-typha-65c9f5c6d4-cxfl4" Aug 13 01:02:49.452068 kubelet[2607]: I0813 01:02:49.452074 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b651b80d-d0ca-40b0-8d04-e6dc84e3af8c-tigera-ca-bundle\") pod \"calico-typha-65c9f5c6d4-cxfl4\" (UID: \"b651b80d-d0ca-40b0-8d04-e6dc84e3af8c\") " pod="calico-system/calico-typha-65c9f5c6d4-cxfl4" Aug 13 01:02:49.452775 kubelet[2607]: I0813 01:02:49.452107 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8wfhm\" (UniqueName: \"kubernetes.io/projected/b651b80d-d0ca-40b0-8d04-e6dc84e3af8c-kube-api-access-8wfhm\") pod \"calico-typha-65c9f5c6d4-cxfl4\" (UID: \"b651b80d-d0ca-40b0-8d04-e6dc84e3af8c\") " pod="calico-system/calico-typha-65c9f5c6d4-cxfl4" Aug 13 01:02:49.614719 env[1719]: time="2025-08-13T01:02:49.613848729Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-65c9f5c6d4-cxfl4,Uid:b651b80d-d0ca-40b0-8d04-e6dc84e3af8c,Namespace:calico-system,Attempt:0,}" Aug 13 01:02:49.646202 env[1719]: time="2025-08-13T01:02:49.644484924Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:02:49.646202 env[1719]: time="2025-08-13T01:02:49.644535573Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:02:49.646202 env[1719]: time="2025-08-13T01:02:49.644572257Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:02:49.646202 env[1719]: time="2025-08-13T01:02:49.644745170Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c907d479d9d99f0c67766e04ec9975fb637b78764043a98054d0df9d1ebaf61c pid=3098 runtime=io.containerd.runc.v2 Aug 13 01:02:49.676358 systemd[1]: Started cri-containerd-c907d479d9d99f0c67766e04ec9975fb637b78764043a98054d0df9d1ebaf61c.scope. Aug 13 01:02:49.711197 kernel: kauditd_printk_skb: 19 callbacks suppressed Aug 13 01:02:49.711349 kernel: audit: type=1400 audit(1755046969.701:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.720305 kernel: audit: type=1400 audit(1755046969.701:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.730468 kernel: audit: type=1400 audit(1755046969.701:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.751208 kernel: audit: type=1400 audit(1755046969.701:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.751355 kernel: audit: type=1400 audit(1755046969.701:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.761630 kernel: audit: type=1400 audit(1755046969.701:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.769587 systemd[1]: Created slice kubepods-besteffort-pod713f40d3_ffd7_4b58_ae00_02da96a22315.slice. Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.792473 kernel: audit: type=1400 audit(1755046969.701:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.792602 kernel: audit: type=1400 audit(1755046969.701:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.807282 kernel: audit: type=1400 audit(1755046969.701:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.817143 kernel: audit: type=1400 audit(1755046969.703:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit: BPF prog-id=127 op=LOAD Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:49.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339303764343739643964393966306336373736366530346563393937 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:49.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339303764343739643964393966306336373736366530346563393937 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.703000 audit: BPF prog-id=128 op=LOAD Aug 13 01:02:49.703000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003806d0 items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:49.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339303764343739643964393966306336373736366530346563393937 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit: BPF prog-id=129 op=LOAD Aug 13 01:02:49.719000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000380718 items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:49.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339303764343739643964393966306336373736366530346563393937 Aug 13 01:02:49.719000 audit: BPF prog-id=129 op=UNLOAD Aug 13 01:02:49.719000 audit: BPF prog-id=128 op=UNLOAD Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:49.719000 audit: BPF prog-id=130 op=LOAD Aug 13 01:02:49.719000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000380b28 items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:49.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339303764343739643964393966306336373736366530346563393937 Aug 13 01:02:49.964501 kubelet[2607]: I0813 01:02:49.964369 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-var-run-calico\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.964501 kubelet[2607]: I0813 01:02:49.964418 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-cni-bin-dir\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.966999 kubelet[2607]: I0813 01:02:49.966931 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-cni-log-dir\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967175 kubelet[2607]: I0813 01:02:49.967029 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-cni-net-dir\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967175 kubelet[2607]: I0813 01:02:49.967080 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-flexvol-driver-host\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967175 kubelet[2607]: I0813 01:02:49.967161 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-xtables-lock\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967353 kubelet[2607]: I0813 01:02:49.967193 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-policysync\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967353 kubelet[2607]: I0813 01:02:49.967258 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/713f40d3-ffd7-4b58-ae00-02da96a22315-tigera-ca-bundle\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967353 kubelet[2607]: I0813 01:02:49.967310 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-var-lib-calico\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967353 kubelet[2607]: I0813 01:02:49.967338 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sbrsz\" (UniqueName: \"kubernetes.io/projected/713f40d3-ffd7-4b58-ae00-02da96a22315-kube-api-access-sbrsz\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967533 kubelet[2607]: I0813 01:02:49.967422 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/713f40d3-ffd7-4b58-ae00-02da96a22315-lib-modules\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.967533 kubelet[2607]: I0813 01:02:49.967471 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/713f40d3-ffd7-4b58-ae00-02da96a22315-node-certs\") pod \"calico-node-9qgl9\" (UID: \"713f40d3-ffd7-4b58-ae00-02da96a22315\") " pod="calico-system/calico-node-9qgl9" Aug 13 01:02:49.986068 env[1719]: time="2025-08-13T01:02:49.985908635Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-65c9f5c6d4-cxfl4,Uid:b651b80d-d0ca-40b0-8d04-e6dc84e3af8c,Namespace:calico-system,Attempt:0,} returns sandbox id \"c907d479d9d99f0c67766e04ec9975fb637b78764043a98054d0df9d1ebaf61c\"" Aug 13 01:02:49.991717 env[1719]: time="2025-08-13T01:02:49.991668898Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Aug 13 01:02:50.009185 kubelet[2607]: E0813 01:02:50.009103 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:02:50.013000 audit[3131]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=3131 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:50.013000 audit[3131]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe3bf94dc0 a2=0 a3=7ffe3bf94dac items=0 ppid=2710 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:50.013000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:50.018000 audit[3131]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3131 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:50.018000 audit[3131]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe3bf94dc0 a2=0 a3=0 items=0 ppid=2710 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:50.018000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:50.070105 kubelet[2607]: I0813 01:02:50.068704 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/eb8fa6ca-0f9c-4967-a309-b869c696b219-kubelet-dir\") pod \"csi-node-driver-bp445\" (UID: \"eb8fa6ca-0f9c-4967-a309-b869c696b219\") " pod="calico-system/csi-node-driver-bp445" Aug 13 01:02:50.070105 kubelet[2607]: I0813 01:02:50.068757 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/eb8fa6ca-0f9c-4967-a309-b869c696b219-registration-dir\") pod \"csi-node-driver-bp445\" (UID: \"eb8fa6ca-0f9c-4967-a309-b869c696b219\") " pod="calico-system/csi-node-driver-bp445" Aug 13 01:02:50.070105 kubelet[2607]: I0813 01:02:50.068801 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/eb8fa6ca-0f9c-4967-a309-b869c696b219-varrun\") pod \"csi-node-driver-bp445\" (UID: \"eb8fa6ca-0f9c-4967-a309-b869c696b219\") " pod="calico-system/csi-node-driver-bp445" Aug 13 01:02:50.070105 kubelet[2607]: I0813 01:02:50.068946 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p6ptt\" (UniqueName: \"kubernetes.io/projected/eb8fa6ca-0f9c-4967-a309-b869c696b219-kube-api-access-p6ptt\") pod \"csi-node-driver-bp445\" (UID: \"eb8fa6ca-0f9c-4967-a309-b869c696b219\") " pod="calico-system/csi-node-driver-bp445" Aug 13 01:02:50.070105 kubelet[2607]: I0813 01:02:50.069037 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/eb8fa6ca-0f9c-4967-a309-b869c696b219-socket-dir\") pod \"csi-node-driver-bp445\" (UID: \"eb8fa6ca-0f9c-4967-a309-b869c696b219\") " pod="calico-system/csi-node-driver-bp445" Aug 13 01:02:50.079142 kubelet[2607]: E0813 01:02:50.077189 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.079142 kubelet[2607]: W0813 01:02:50.077218 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.079142 kubelet[2607]: E0813 01:02:50.077252 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.088234 kubelet[2607]: E0813 01:02:50.088200 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.088234 kubelet[2607]: W0813 01:02:50.088229 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.088471 kubelet[2607]: E0813 01:02:50.088258 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.170811 kubelet[2607]: E0813 01:02:50.170757 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.170811 kubelet[2607]: W0813 01:02:50.170788 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.170811 kubelet[2607]: E0813 01:02:50.170809 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.171168 kubelet[2607]: E0813 01:02:50.171145 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.171168 kubelet[2607]: W0813 01:02:50.171164 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.171355 kubelet[2607]: E0813 01:02:50.171181 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.171489 kubelet[2607]: E0813 01:02:50.171467 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.171489 kubelet[2607]: W0813 01:02:50.171484 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.171620 kubelet[2607]: E0813 01:02:50.171498 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.171775 kubelet[2607]: E0813 01:02:50.171754 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.171775 kubelet[2607]: W0813 01:02:50.171769 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.171893 kubelet[2607]: E0813 01:02:50.171782 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.172067 kubelet[2607]: E0813 01:02:50.172046 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.172067 kubelet[2607]: W0813 01:02:50.172059 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.172214 kubelet[2607]: E0813 01:02:50.172071 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.172378 kubelet[2607]: E0813 01:02:50.172356 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.172378 kubelet[2607]: W0813 01:02:50.172371 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.172486 kubelet[2607]: E0813 01:02:50.172385 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.172799 kubelet[2607]: E0813 01:02:50.172776 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.172799 kubelet[2607]: W0813 01:02:50.172791 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.172939 kubelet[2607]: E0813 01:02:50.172805 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.173046 kubelet[2607]: E0813 01:02:50.173027 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.173046 kubelet[2607]: W0813 01:02:50.173041 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.173273 kubelet[2607]: E0813 01:02:50.173054 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.173395 kubelet[2607]: E0813 01:02:50.173374 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.173395 kubelet[2607]: W0813 01:02:50.173391 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.173513 kubelet[2607]: E0813 01:02:50.173418 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.173665 kubelet[2607]: E0813 01:02:50.173645 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.173665 kubelet[2607]: W0813 01:02:50.173660 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.173776 kubelet[2607]: E0813 01:02:50.173672 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.173905 kubelet[2607]: E0813 01:02:50.173885 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.173905 kubelet[2607]: W0813 01:02:50.173899 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.174004 kubelet[2607]: E0813 01:02:50.173911 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.174201 kubelet[2607]: E0813 01:02:50.174188 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.174282 kubelet[2607]: W0813 01:02:50.174271 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.174340 kubelet[2607]: E0813 01:02:50.174331 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.174586 kubelet[2607]: E0813 01:02:50.174575 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.174745 kubelet[2607]: W0813 01:02:50.174734 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.174796 kubelet[2607]: E0813 01:02:50.174788 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.175065 kubelet[2607]: E0813 01:02:50.175053 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.175162 kubelet[2607]: W0813 01:02:50.175152 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.175216 kubelet[2607]: E0813 01:02:50.175209 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.175460 kubelet[2607]: E0813 01:02:50.175449 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.175537 kubelet[2607]: W0813 01:02:50.175528 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.175589 kubelet[2607]: E0813 01:02:50.175579 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.175836 kubelet[2607]: E0813 01:02:50.175826 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.175901 kubelet[2607]: W0813 01:02:50.175894 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.175965 kubelet[2607]: E0813 01:02:50.175954 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.176278 kubelet[2607]: E0813 01:02:50.176267 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.176350 kubelet[2607]: W0813 01:02:50.176341 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.176397 kubelet[2607]: E0813 01:02:50.176390 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.176788 kubelet[2607]: E0813 01:02:50.176775 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.176877 kubelet[2607]: W0813 01:02:50.176862 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.176950 kubelet[2607]: E0813 01:02:50.176941 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.177261 kubelet[2607]: E0813 01:02:50.177249 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.177340 kubelet[2607]: W0813 01:02:50.177331 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.177388 kubelet[2607]: E0813 01:02:50.177380 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.177637 kubelet[2607]: E0813 01:02:50.177627 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.177702 kubelet[2607]: W0813 01:02:50.177694 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.177749 kubelet[2607]: E0813 01:02:50.177741 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.182672 kubelet[2607]: E0813 01:02:50.182634 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.182672 kubelet[2607]: W0813 01:02:50.182657 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.182672 kubelet[2607]: E0813 01:02:50.182679 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.183097 kubelet[2607]: E0813 01:02:50.183079 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.183097 kubelet[2607]: W0813 01:02:50.183095 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.183202 kubelet[2607]: E0813 01:02:50.183142 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.183826 kubelet[2607]: E0813 01:02:50.183788 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.183826 kubelet[2607]: W0813 01:02:50.183806 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.183826 kubelet[2607]: E0813 01:02:50.183821 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.184202 kubelet[2607]: E0813 01:02:50.184182 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.184202 kubelet[2607]: W0813 01:02:50.184199 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.184321 kubelet[2607]: E0813 01:02:50.184219 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.184523 kubelet[2607]: E0813 01:02:50.184506 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.184523 kubelet[2607]: W0813 01:02:50.184520 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.184841 kubelet[2607]: E0813 01:02:50.184536 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.195797 kubelet[2607]: E0813 01:02:50.195766 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:50.195797 kubelet[2607]: W0813 01:02:50.195796 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:50.195797 kubelet[2607]: E0813 01:02:50.195818 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:50.381712 env[1719]: time="2025-08-13T01:02:50.381071954Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9qgl9,Uid:713f40d3-ffd7-4b58-ae00-02da96a22315,Namespace:calico-system,Attempt:0,}" Aug 13 01:02:50.411503 env[1719]: time="2025-08-13T01:02:50.411428360Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:02:50.411687 env[1719]: time="2025-08-13T01:02:50.411489658Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:02:50.411687 env[1719]: time="2025-08-13T01:02:50.411505496Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:02:50.411844 env[1719]: time="2025-08-13T01:02:50.411718385Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3 pid=3169 runtime=io.containerd.runc.v2 Aug 13 01:02:50.426301 systemd[1]: Started cri-containerd-ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3.scope. Aug 13 01:02:50.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.445000 audit: BPF prog-id=131 op=LOAD Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3169 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:50.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563643137663930306632393037333462393134643962393932363938 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3169 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:50.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563643137663930306632393037333462393134643962393932363938 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit: BPF prog-id=132 op=LOAD Aug 13 01:02:50.446000 audit[3179]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028bf10 items=0 ppid=3169 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:50.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563643137663930306632393037333462393134643962393932363938 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit: BPF prog-id=133 op=LOAD Aug 13 01:02:50.446000 audit[3179]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028bf58 items=0 ppid=3169 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:50.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563643137663930306632393037333462393134643962393932363938 Aug 13 01:02:50.446000 audit: BPF prog-id=133 op=UNLOAD Aug 13 01:02:50.446000 audit: BPF prog-id=132 op=UNLOAD Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { perfmon } for pid=3179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit[3179]: AVC avc: denied { bpf } for pid=3179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:50.446000 audit: BPF prog-id=134 op=LOAD Aug 13 01:02:50.446000 audit[3179]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002fe368 items=0 ppid=3169 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:50.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563643137663930306632393037333462393134643962393932363938 Aug 13 01:02:50.471036 env[1719]: time="2025-08-13T01:02:50.470952965Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9qgl9,Uid:713f40d3-ffd7-4b58-ae00-02da96a22315,Namespace:calico-system,Attempt:0,} returns sandbox id \"ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3\"" Aug 13 01:02:50.575181 systemd[1]: run-containerd-runc-k8s.io-c907d479d9d99f0c67766e04ec9975fb637b78764043a98054d0df9d1ebaf61c-runc.WpsSDG.mount: Deactivated successfully. Aug 13 01:02:51.307258 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1540008009.mount: Deactivated successfully. Aug 13 01:02:51.348667 kubelet[2607]: E0813 01:02:51.348619 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:02:52.267380 env[1719]: time="2025-08-13T01:02:52.267318374Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:52.271643 env[1719]: time="2025-08-13T01:02:52.271596230Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:52.275805 env[1719]: time="2025-08-13T01:02:52.275758095Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:52.279057 env[1719]: time="2025-08-13T01:02:52.278973714Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:52.280014 env[1719]: time="2025-08-13T01:02:52.279970263Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Aug 13 01:02:52.283427 env[1719]: time="2025-08-13T01:02:52.283354245Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Aug 13 01:02:52.306259 env[1719]: time="2025-08-13T01:02:52.306207088Z" level=info msg="CreateContainer within sandbox \"c907d479d9d99f0c67766e04ec9975fb637b78764043a98054d0df9d1ebaf61c\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Aug 13 01:02:52.342713 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1657562797.mount: Deactivated successfully. Aug 13 01:02:52.356237 env[1719]: time="2025-08-13T01:02:52.356176515Z" level=info msg="CreateContainer within sandbox \"c907d479d9d99f0c67766e04ec9975fb637b78764043a98054d0df9d1ebaf61c\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"8580b572ad779057d6e5a884421e52699236bc2d9f253f6c5f3df0990b911806\"" Aug 13 01:02:52.358487 env[1719]: time="2025-08-13T01:02:52.357158767Z" level=info msg="StartContainer for \"8580b572ad779057d6e5a884421e52699236bc2d9f253f6c5f3df0990b911806\"" Aug 13 01:02:52.380439 systemd[1]: Started cri-containerd-8580b572ad779057d6e5a884421e52699236bc2d9f253f6c5f3df0990b911806.scope. Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.404000 audit: BPF prog-id=135 op=LOAD Aug 13 01:02:52.404000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.404000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3098 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:52.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835383062353732616437373930353764366535613838343432316535 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3098 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:52.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835383062353732616437373930353764366535613838343432316535 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit: BPF prog-id=136 op=LOAD Aug 13 01:02:52.405000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024f80 items=0 ppid=3098 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:52.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835383062353732616437373930353764366535613838343432316535 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit: BPF prog-id=137 op=LOAD Aug 13 01:02:52.405000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024fc8 items=0 ppid=3098 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:52.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835383062353732616437373930353764366535613838343432316535 Aug 13 01:02:52.405000 audit: BPF prog-id=137 op=UNLOAD Aug 13 01:02:52.405000 audit: BPF prog-id=136 op=UNLOAD Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:52.405000 audit: BPF prog-id=138 op=LOAD Aug 13 01:02:52.405000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000253d8 items=0 ppid=3098 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:52.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835383062353732616437373930353764366535613838343432316535 Aug 13 01:02:52.441614 env[1719]: time="2025-08-13T01:02:52.441561695Z" level=info msg="StartContainer for \"8580b572ad779057d6e5a884421e52699236bc2d9f253f6c5f3df0990b911806\" returns successfully" Aug 13 01:02:52.582700 kubelet[2607]: E0813 01:02:52.582603 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.583619 kubelet[2607]: W0813 01:02:52.583178 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.583619 kubelet[2607]: E0813 01:02:52.583219 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.583619 kubelet[2607]: E0813 01:02:52.583512 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.583619 kubelet[2607]: W0813 01:02:52.583523 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.583619 kubelet[2607]: E0813 01:02:52.583540 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.584308 kubelet[2607]: E0813 01:02:52.584142 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.584308 kubelet[2607]: W0813 01:02:52.584156 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.584308 kubelet[2607]: E0813 01:02:52.584175 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.584655 kubelet[2607]: E0813 01:02:52.584643 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.584753 kubelet[2607]: W0813 01:02:52.584742 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.584832 kubelet[2607]: E0813 01:02:52.584821 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.585149 kubelet[2607]: E0813 01:02:52.585136 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.585251 kubelet[2607]: W0813 01:02:52.585239 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.585332 kubelet[2607]: E0813 01:02:52.585320 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.585596 kubelet[2607]: E0813 01:02:52.585586 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.585685 kubelet[2607]: W0813 01:02:52.585673 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.585761 kubelet[2607]: E0813 01:02:52.585750 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.586015 kubelet[2607]: E0813 01:02:52.586005 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.586103 kubelet[2607]: W0813 01:02:52.586092 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.586204 kubelet[2607]: E0813 01:02:52.586193 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.586471 kubelet[2607]: E0813 01:02:52.586460 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.586558 kubelet[2607]: W0813 01:02:52.586546 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.586645 kubelet[2607]: E0813 01:02:52.586633 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.586931 kubelet[2607]: E0813 01:02:52.586920 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.587021 kubelet[2607]: W0813 01:02:52.587010 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.587102 kubelet[2607]: E0813 01:02:52.587091 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.587408 kubelet[2607]: E0813 01:02:52.587397 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.587494 kubelet[2607]: W0813 01:02:52.587483 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.587573 kubelet[2607]: E0813 01:02:52.587562 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.587823 kubelet[2607]: E0813 01:02:52.587812 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.587912 kubelet[2607]: W0813 01:02:52.587901 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.587991 kubelet[2607]: E0813 01:02:52.587980 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.588339 kubelet[2607]: E0813 01:02:52.588326 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.588440 kubelet[2607]: W0813 01:02:52.588428 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.588523 kubelet[2607]: E0813 01:02:52.588512 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.588821 kubelet[2607]: E0813 01:02:52.588810 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.588916 kubelet[2607]: W0813 01:02:52.588905 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.588999 kubelet[2607]: E0813 01:02:52.588988 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.589332 kubelet[2607]: E0813 01:02:52.589320 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.589424 kubelet[2607]: W0813 01:02:52.589413 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.589507 kubelet[2607]: E0813 01:02:52.589497 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.589790 kubelet[2607]: E0813 01:02:52.589779 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.590243 kubelet[2607]: W0813 01:02:52.590224 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.590340 kubelet[2607]: E0813 01:02:52.590329 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.597817 kubelet[2607]: E0813 01:02:52.597625 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.597817 kubelet[2607]: W0813 01:02:52.597647 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.597817 kubelet[2607]: E0813 01:02:52.597669 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.598414 kubelet[2607]: E0813 01:02:52.598251 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.598414 kubelet[2607]: W0813 01:02:52.598267 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.598414 kubelet[2607]: E0813 01:02:52.598286 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.598769 kubelet[2607]: E0813 01:02:52.598756 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.598858 kubelet[2607]: W0813 01:02:52.598845 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.598945 kubelet[2607]: E0813 01:02:52.598932 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.599326 kubelet[2607]: E0813 01:02:52.599313 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.599430 kubelet[2607]: W0813 01:02:52.599417 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.599508 kubelet[2607]: E0813 01:02:52.599496 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.599825 kubelet[2607]: E0813 01:02:52.599812 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.599921 kubelet[2607]: W0813 01:02:52.599909 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.599999 kubelet[2607]: E0813 01:02:52.599989 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.600308 kubelet[2607]: E0813 01:02:52.600297 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.600391 kubelet[2607]: W0813 01:02:52.600381 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.600465 kubelet[2607]: E0813 01:02:52.600455 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.600755 kubelet[2607]: E0813 01:02:52.600744 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.600846 kubelet[2607]: W0813 01:02:52.600836 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.600922 kubelet[2607]: E0813 01:02:52.600912 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.601295 kubelet[2607]: E0813 01:02:52.601282 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.601399 kubelet[2607]: W0813 01:02:52.601386 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.601490 kubelet[2607]: E0813 01:02:52.601478 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.601826 kubelet[2607]: E0813 01:02:52.601813 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.601940 kubelet[2607]: W0813 01:02:52.601927 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.602029 kubelet[2607]: E0813 01:02:52.602018 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.602345 kubelet[2607]: E0813 01:02:52.602332 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.602584 kubelet[2607]: W0813 01:02:52.602561 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.602681 kubelet[2607]: E0813 01:02:52.602667 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.605420 kubelet[2607]: E0813 01:02:52.605401 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.605552 kubelet[2607]: W0813 01:02:52.605536 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.605653 kubelet[2607]: E0813 01:02:52.605639 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.606106 kubelet[2607]: E0813 01:02:52.606093 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.606229 kubelet[2607]: W0813 01:02:52.606216 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.606307 kubelet[2607]: E0813 01:02:52.606295 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.606606 kubelet[2607]: E0813 01:02:52.606594 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.607037 kubelet[2607]: W0813 01:02:52.607020 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.607189 kubelet[2607]: E0813 01:02:52.607174 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.607484 kubelet[2607]: E0813 01:02:52.607473 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.607568 kubelet[2607]: W0813 01:02:52.607558 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.607648 kubelet[2607]: E0813 01:02:52.607637 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.607959 kubelet[2607]: E0813 01:02:52.607948 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.608041 kubelet[2607]: W0813 01:02:52.608030 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.608173 kubelet[2607]: E0813 01:02:52.608160 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.611392 kubelet[2607]: E0813 01:02:52.611372 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.611554 kubelet[2607]: W0813 01:02:52.611538 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.611643 kubelet[2607]: E0813 01:02:52.611630 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.612266 kubelet[2607]: E0813 01:02:52.612249 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.612381 kubelet[2607]: W0813 01:02:52.612367 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.612494 kubelet[2607]: E0813 01:02:52.612476 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:52.612836 kubelet[2607]: E0813 01:02:52.612822 2607 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:02:52.612937 kubelet[2607]: W0813 01:02:52.612924 2607 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:02:52.613025 kubelet[2607]: E0813 01:02:52.613012 2607 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:02:53.347872 kubelet[2607]: E0813 01:02:53.347443 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:02:53.427467 env[1719]: time="2025-08-13T01:02:53.427398545Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:53.431425 env[1719]: time="2025-08-13T01:02:53.431386353Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:53.434447 env[1719]: time="2025-08-13T01:02:53.434412095Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:53.436941 env[1719]: time="2025-08-13T01:02:53.436897136Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:02:53.438358 env[1719]: time="2025-08-13T01:02:53.437460073Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Aug 13 01:02:53.445242 env[1719]: time="2025-08-13T01:02:53.445160603Z" level=info msg="CreateContainer within sandbox \"ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Aug 13 01:02:53.484210 env[1719]: time="2025-08-13T01:02:53.484168514Z" level=info msg="CreateContainer within sandbox \"ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc\"" Aug 13 01:02:53.486331 env[1719]: time="2025-08-13T01:02:53.486224277Z" level=info msg="StartContainer for \"1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc\"" Aug 13 01:02:53.520215 systemd[1]: run-containerd-runc-k8s.io-1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc-runc.hMEagk.mount: Deactivated successfully. Aug 13 01:02:53.528363 systemd[1]: Started cri-containerd-1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc.scope. Aug 13 01:02:53.536020 kubelet[2607]: I0813 01:02:53.535732 2607 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f12c02911b8 items=0 ppid=3169 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:53.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162386462396665623165333034306663313837303639663530396466 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit: BPF prog-id=139 op=LOAD Aug 13 01:02:53.549000 audit[3285]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002e5eb8 items=0 ppid=3169 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:53.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162386462396665623165333034306663313837303639663530396466 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit: BPF prog-id=140 op=LOAD Aug 13 01:02:53.549000 audit[3285]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002e5f08 items=0 ppid=3169 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:53.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162386462396665623165333034306663313837303639663530396466 Aug 13 01:02:53.549000 audit: BPF prog-id=140 op=UNLOAD Aug 13 01:02:53.549000 audit: BPF prog-id=139 op=UNLOAD Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { perfmon } for pid=3285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit[3285]: AVC avc: denied { bpf } for pid=3285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:02:53.549000 audit: BPF prog-id=141 op=LOAD Aug 13 01:02:53.549000 audit[3285]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002e5f98 items=0 ppid=3169 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:53.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162386462396665623165333034306663313837303639663530396466 Aug 13 01:02:53.580221 env[1719]: time="2025-08-13T01:02:53.580166452Z" level=info msg="StartContainer for \"1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc\" returns successfully" Aug 13 01:02:53.591231 systemd[1]: cri-containerd-1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc.scope: Deactivated successfully. Aug 13 01:02:53.594000 audit: BPF prog-id=141 op=UNLOAD Aug 13 01:02:53.684323 env[1719]: time="2025-08-13T01:02:53.684145230Z" level=info msg="shim disconnected" id=1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc Aug 13 01:02:53.684323 env[1719]: time="2025-08-13T01:02:53.684211826Z" level=warning msg="cleaning up after shim disconnected" id=1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc namespace=k8s.io Aug 13 01:02:53.684323 env[1719]: time="2025-08-13T01:02:53.684227225Z" level=info msg="cleaning up dead shim" Aug 13 01:02:53.700979 env[1719]: time="2025-08-13T01:02:53.700933270Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:02:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3328 runtime=io.containerd.runc.v2\n" Aug 13 01:02:54.289927 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1b8db9feb1e3040fc187069f509df76f9bfb9d03441af5dad4e642a8b5796ecc-rootfs.mount: Deactivated successfully. Aug 13 01:02:54.540208 env[1719]: time="2025-08-13T01:02:54.540096645Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Aug 13 01:02:54.568056 kubelet[2607]: I0813 01:02:54.567430 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-65c9f5c6d4-cxfl4" podStartSLOduration=3.275652729 podStartE2EDuration="5.567415165s" podCreationTimestamp="2025-08-13 01:02:49 +0000 UTC" firstStartedPulling="2025-08-13 01:02:49.989555915 +0000 UTC m=+19.813823872" lastFinishedPulling="2025-08-13 01:02:52.281318254 +0000 UTC m=+22.105586308" observedRunningTime="2025-08-13 01:02:52.551535488 +0000 UTC m=+22.375803461" watchObservedRunningTime="2025-08-13 01:02:54.567415165 +0000 UTC m=+24.391683135" Aug 13 01:02:55.347558 kubelet[2607]: E0813 01:02:55.347497 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:02:57.097277 kubelet[2607]: I0813 01:02:57.097061 2607 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:02:57.149185 kernel: kauditd_printk_skb: 211 callbacks suppressed Aug 13 01:02:57.149373 kernel: audit: type=1325 audit(1755046977.145:1048): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:57.145000 audit[3342]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:57.145000 audit[3342]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffeffec5d40 a2=0 a3=7ffeffec5d2c items=0 ppid=2710 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:57.163192 kernel: audit: type=1300 audit(1755046977.145:1048): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffeffec5d40 a2=0 a3=7ffeffec5d2c items=0 ppid=2710 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:57.145000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:57.171939 kernel: audit: type=1327 audit(1755046977.145:1048): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:57.172086 kernel: audit: type=1325 audit(1755046977.163:1049): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:57.172147 kernel: audit: type=1300 audit(1755046977.163:1049): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffeffec5d40 a2=0 a3=7ffeffec5d2c items=0 ppid=2710 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:57.163000 audit[3342]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:57.163000 audit[3342]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffeffec5d40 a2=0 a3=7ffeffec5d2c items=0 ppid=2710 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:57.163000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:57.184277 kernel: audit: type=1327 audit(1755046977.163:1049): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:57.347888 kubelet[2607]: E0813 01:02:57.347769 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:02:59.347381 kubelet[2607]: E0813 01:02:59.346997 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:03:00.870369 env[1719]: time="2025-08-13T01:03:00.870299740Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:00.872752 env[1719]: time="2025-08-13T01:03:00.872701452Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:00.874877 env[1719]: time="2025-08-13T01:03:00.874835482Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:00.876440 env[1719]: time="2025-08-13T01:03:00.876401039Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:00.877154 env[1719]: time="2025-08-13T01:03:00.877126677Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Aug 13 01:03:00.881299 env[1719]: time="2025-08-13T01:03:00.881264234Z" level=info msg="CreateContainer within sandbox \"ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Aug 13 01:03:00.896190 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3566461724.mount: Deactivated successfully. Aug 13 01:03:00.902885 env[1719]: time="2025-08-13T01:03:00.902820873Z" level=info msg="CreateContainer within sandbox \"ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3\"" Aug 13 01:03:00.904322 env[1719]: time="2025-08-13T01:03:00.904289863Z" level=info msg="StartContainer for \"6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3\"" Aug 13 01:03:00.928176 systemd[1]: Started cri-containerd-6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3.scope. Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.962670 kernel: audit: type=1400 audit(1755046980.948:1050): avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.962831 kernel: audit: type=1300 audit(1755046980.948:1050): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fcc95ca8b98 items=0 ppid=3169 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.948000 audit[3352]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fcc95ca8b98 items=0 ppid=3169 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631313862383831376138336164636633323338363037383965663564 Aug 13 01:03:00.977569 kernel: audit: type=1327 audit(1755046980.948:1050): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631313862383831376138336164636633323338363037383965663564 Aug 13 01:03:00.977707 kernel: audit: type=1400 audit(1755046980.948:1051): avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.948000 audit: BPF prog-id=142 op=LOAD Aug 13 01:03:00.948000 audit[3352]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001bb1b8 items=0 ppid=3169 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631313862383831376138336164636633323338363037383965663564 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit: BPF prog-id=143 op=LOAD Aug 13 01:03:00.954000 audit[3352]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001bb208 items=0 ppid=3169 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631313862383831376138336164636633323338363037383965663564 Aug 13 01:03:00.954000 audit: BPF prog-id=143 op=UNLOAD Aug 13 01:03:00.954000 audit: BPF prog-id=142 op=UNLOAD Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { perfmon } for pid=3352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit[3352]: AVC avc: denied { bpf } for pid=3352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:00.954000 audit: BPF prog-id=144 op=LOAD Aug 13 01:03:00.954000 audit[3352]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001bb298 items=0 ppid=3169 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631313862383831376138336164636633323338363037383965663564 Aug 13 01:03:00.997545 env[1719]: time="2025-08-13T01:03:00.997473623Z" level=info msg="StartContainer for \"6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3\" returns successfully" Aug 13 01:03:01.349106 kubelet[2607]: E0813 01:03:01.349044 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:03:03.352950 kubelet[2607]: E0813 01:03:03.352768 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:03:03.946981 env[1719]: time="2025-08-13T01:03:03.946906899Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 01:03:03.962182 systemd[1]: cri-containerd-6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3.scope: Deactivated successfully. Aug 13 01:03:03.977000 audit: BPF prog-id=144 op=UNLOAD Aug 13 01:03:03.998750 kernel: kauditd_printk_skb: 39 callbacks suppressed Aug 13 01:03:03.998904 kernel: audit: type=1334 audit(1755046983.977:1056): prog-id=144 op=UNLOAD Aug 13 01:03:04.033798 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3-rootfs.mount: Deactivated successfully. Aug 13 01:03:04.046698 kubelet[2607]: I0813 01:03:04.042201 2607 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Aug 13 01:03:04.047932 env[1719]: time="2025-08-13T01:03:04.047882811Z" level=info msg="shim disconnected" id=6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3 Aug 13 01:03:04.048148 env[1719]: time="2025-08-13T01:03:04.048102528Z" level=warning msg="cleaning up after shim disconnected" id=6118b8817a83adcf323860789ef5d3aa22e07af13949ae086270865531f4e6a3 namespace=k8s.io Aug 13 01:03:04.048239 env[1719]: time="2025-08-13T01:03:04.048225031Z" level=info msg="cleaning up dead shim" Aug 13 01:03:04.068235 env[1719]: time="2025-08-13T01:03:04.068185303Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:03:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3392 runtime=io.containerd.runc.v2\n" Aug 13 01:03:04.233124 systemd[1]: Created slice kubepods-besteffort-pod08087410_bce6_49a4_acc7_f910830b7746.slice. Aug 13 01:03:04.263674 systemd[1]: Created slice kubepods-burstable-pod4bd8a7a8_4b51_4349_ba1c_68c3ace8c22d.slice. Aug 13 01:03:04.277595 systemd[1]: Created slice kubepods-besteffort-pod14ba39ac_7472_4ec5_b18b_9019ae772400.slice. Aug 13 01:03:04.286724 systemd[1]: Created slice kubepods-burstable-pode1bffb21_6109_4213_a3cc_f4b22a0d6c19.slice. Aug 13 01:03:04.298004 systemd[1]: Created slice kubepods-besteffort-pod9396d154_0d8d_4429_8f65_71c1ff716fd2.slice. Aug 13 01:03:04.309050 systemd[1]: Created slice kubepods-besteffort-pod9bff5897_b20d_423c_9873_a6298df70078.slice. Aug 13 01:03:04.317946 systemd[1]: Created slice kubepods-besteffort-pod9cb56d00_67ce_4ec5_9c03_0745d269cbf6.slice. Aug 13 01:03:04.337760 kubelet[2607]: I0813 01:03:04.337713 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dvtrb\" (UniqueName: \"kubernetes.io/projected/e1bffb21-6109-4213-a3cc-f4b22a0d6c19-kube-api-access-dvtrb\") pod \"coredns-674b8bbfcf-zwgd4\" (UID: \"e1bffb21-6109-4213-a3cc-f4b22a0d6c19\") " pod="kube-system/coredns-674b8bbfcf-zwgd4" Aug 13 01:03:04.337966 kubelet[2607]: I0813 01:03:04.337768 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x5xbw\" (UniqueName: \"kubernetes.io/projected/08087410-bce6-49a4-acc7-f910830b7746-kube-api-access-x5xbw\") pod \"calico-kube-controllers-6f6464b85b-zj8gj\" (UID: \"08087410-bce6-49a4-acc7-f910830b7746\") " pod="calico-system/calico-kube-controllers-6f6464b85b-zj8gj" Aug 13 01:03:04.337966 kubelet[2607]: I0813 01:03:04.337806 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nfdqb\" (UniqueName: \"kubernetes.io/projected/9cb56d00-67ce-4ec5-9c03-0745d269cbf6-kube-api-access-nfdqb\") pod \"calico-apiserver-b8cf85895-75kjb\" (UID: \"9cb56d00-67ce-4ec5-9c03-0745d269cbf6\") " pod="calico-apiserver/calico-apiserver-b8cf85895-75kjb" Aug 13 01:03:04.337966 kubelet[2607]: I0813 01:03:04.337829 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/9396d154-0d8d-4429-8f65-71c1ff716fd2-config\") pod \"goldmane-768f4c5c69-c79h6\" (UID: \"9396d154-0d8d-4429-8f65-71c1ff716fd2\") " pod="calico-system/goldmane-768f4c5c69-c79h6" Aug 13 01:03:04.337966 kubelet[2607]: I0813 01:03:04.337855 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/9cb56d00-67ce-4ec5-9c03-0745d269cbf6-calico-apiserver-certs\") pod \"calico-apiserver-b8cf85895-75kjb\" (UID: \"9cb56d00-67ce-4ec5-9c03-0745d269cbf6\") " pod="calico-apiserver/calico-apiserver-b8cf85895-75kjb" Aug 13 01:03:04.337966 kubelet[2607]: I0813 01:03:04.337883 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9xwst\" (UniqueName: \"kubernetes.io/projected/4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d-kube-api-access-9xwst\") pod \"coredns-674b8bbfcf-gdcs4\" (UID: \"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d\") " pod="kube-system/coredns-674b8bbfcf-gdcs4" Aug 13 01:03:04.338235 kubelet[2607]: I0813 01:03:04.337908 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9396d154-0d8d-4429-8f65-71c1ff716fd2-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-c79h6\" (UID: \"9396d154-0d8d-4429-8f65-71c1ff716fd2\") " pod="calico-system/goldmane-768f4c5c69-c79h6" Aug 13 01:03:04.338235 kubelet[2607]: I0813 01:03:04.337929 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-backend-key-pair\") pod \"whisker-68555bdc65-ww469\" (UID: \"14ba39ac-7472-4ec5-b18b-9019ae772400\") " pod="calico-system/whisker-68555bdc65-ww469" Aug 13 01:03:04.338235 kubelet[2607]: I0813 01:03:04.337950 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-ca-bundle\") pod \"whisker-68555bdc65-ww469\" (UID: \"14ba39ac-7472-4ec5-b18b-9019ae772400\") " pod="calico-system/whisker-68555bdc65-ww469" Aug 13 01:03:04.338235 kubelet[2607]: I0813 01:03:04.337973 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/9bff5897-b20d-423c-9873-a6298df70078-calico-apiserver-certs\") pod \"calico-apiserver-b8cf85895-9pggm\" (UID: \"9bff5897-b20d-423c-9873-a6298df70078\") " pod="calico-apiserver/calico-apiserver-b8cf85895-9pggm" Aug 13 01:03:04.338235 kubelet[2607]: I0813 01:03:04.338001 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9jhzm\" (UniqueName: \"kubernetes.io/projected/9bff5897-b20d-423c-9873-a6298df70078-kube-api-access-9jhzm\") pod \"calico-apiserver-b8cf85895-9pggm\" (UID: \"9bff5897-b20d-423c-9873-a6298df70078\") " pod="calico-apiserver/calico-apiserver-b8cf85895-9pggm" Aug 13 01:03:04.338443 kubelet[2607]: I0813 01:03:04.338028 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h5wfp\" (UniqueName: \"kubernetes.io/projected/9396d154-0d8d-4429-8f65-71c1ff716fd2-kube-api-access-h5wfp\") pod \"goldmane-768f4c5c69-c79h6\" (UID: \"9396d154-0d8d-4429-8f65-71c1ff716fd2\") " pod="calico-system/goldmane-768f4c5c69-c79h6" Aug 13 01:03:04.338443 kubelet[2607]: I0813 01:03:04.338052 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8p9pq\" (UniqueName: \"kubernetes.io/projected/14ba39ac-7472-4ec5-b18b-9019ae772400-kube-api-access-8p9pq\") pod \"whisker-68555bdc65-ww469\" (UID: \"14ba39ac-7472-4ec5-b18b-9019ae772400\") " pod="calico-system/whisker-68555bdc65-ww469" Aug 13 01:03:04.338443 kubelet[2607]: I0813 01:03:04.338079 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d-config-volume\") pod \"coredns-674b8bbfcf-gdcs4\" (UID: \"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d\") " pod="kube-system/coredns-674b8bbfcf-gdcs4" Aug 13 01:03:04.338443 kubelet[2607]: I0813 01:03:04.338105 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/08087410-bce6-49a4-acc7-f910830b7746-tigera-ca-bundle\") pod \"calico-kube-controllers-6f6464b85b-zj8gj\" (UID: \"08087410-bce6-49a4-acc7-f910830b7746\") " pod="calico-system/calico-kube-controllers-6f6464b85b-zj8gj" Aug 13 01:03:04.338443 kubelet[2607]: I0813 01:03:04.338170 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e1bffb21-6109-4213-a3cc-f4b22a0d6c19-config-volume\") pod \"coredns-674b8bbfcf-zwgd4\" (UID: \"e1bffb21-6109-4213-a3cc-f4b22a0d6c19\") " pod="kube-system/coredns-674b8bbfcf-zwgd4" Aug 13 01:03:04.338653 kubelet[2607]: I0813 01:03:04.338196 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/9396d154-0d8d-4429-8f65-71c1ff716fd2-goldmane-key-pair\") pod \"goldmane-768f4c5c69-c79h6\" (UID: \"9396d154-0d8d-4429-8f65-71c1ff716fd2\") " pod="calico-system/goldmane-768f4c5c69-c79h6" Aug 13 01:03:04.569793 env[1719]: time="2025-08-13T01:03:04.569656951Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f6464b85b-zj8gj,Uid:08087410-bce6-49a4-acc7-f910830b7746,Namespace:calico-system,Attempt:0,}" Aug 13 01:03:04.573425 env[1719]: time="2025-08-13T01:03:04.573374891Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gdcs4,Uid:4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d,Namespace:kube-system,Attempt:0,}" Aug 13 01:03:04.585693 env[1719]: time="2025-08-13T01:03:04.585646111Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68555bdc65-ww469,Uid:14ba39ac-7472-4ec5-b18b-9019ae772400,Namespace:calico-system,Attempt:0,}" Aug 13 01:03:04.608091 env[1719]: time="2025-08-13T01:03:04.608041410Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zwgd4,Uid:e1bffb21-6109-4213-a3cc-f4b22a0d6c19,Namespace:kube-system,Attempt:0,}" Aug 13 01:03:04.608778 env[1719]: time="2025-08-13T01:03:04.608716664Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-c79h6,Uid:9396d154-0d8d-4429-8f65-71c1ff716fd2,Namespace:calico-system,Attempt:0,}" Aug 13 01:03:04.617917 env[1719]: time="2025-08-13T01:03:04.617879954Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Aug 13 01:03:04.625931 env[1719]: time="2025-08-13T01:03:04.625878751Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-75kjb,Uid:9cb56d00-67ce-4ec5-9c03-0745d269cbf6,Namespace:calico-apiserver,Attempt:0,}" Aug 13 01:03:04.627231 env[1719]: time="2025-08-13T01:03:04.626389598Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-9pggm,Uid:9bff5897-b20d-423c-9873-a6298df70078,Namespace:calico-apiserver,Attempt:0,}" Aug 13 01:03:05.121403 env[1719]: time="2025-08-13T01:03:05.121315889Z" level=error msg="Failed to destroy network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.124757 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53-shm.mount: Deactivated successfully. Aug 13 01:03:05.127171 env[1719]: time="2025-08-13T01:03:05.127062470Z" level=error msg="encountered an error cleaning up failed sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.127316 env[1719]: time="2025-08-13T01:03:05.127203602Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-c79h6,Uid:9396d154-0d8d-4429-8f65-71c1ff716fd2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.133513 kubelet[2607]: E0813 01:03:05.133428 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.136542 kubelet[2607]: E0813 01:03:05.136472 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-c79h6" Aug 13 01:03:05.136707 kubelet[2607]: E0813 01:03:05.136563 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-c79h6" Aug 13 01:03:05.136707 kubelet[2607]: E0813 01:03:05.136647 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-c79h6_calico-system(9396d154-0d8d-4429-8f65-71c1ff716fd2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-c79h6_calico-system(9396d154-0d8d-4429-8f65-71c1ff716fd2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-c79h6" podUID="9396d154-0d8d-4429-8f65-71c1ff716fd2" Aug 13 01:03:05.163152 env[1719]: time="2025-08-13T01:03:05.163059338Z" level=error msg="Failed to destroy network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.169884 env[1719]: time="2025-08-13T01:03:05.166860591Z" level=error msg="encountered an error cleaning up failed sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.169884 env[1719]: time="2025-08-13T01:03:05.166954768Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f6464b85b-zj8gj,Uid:08087410-bce6-49a4-acc7-f910830b7746,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.170079 kubelet[2607]: E0813 01:03:05.167237 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.170079 kubelet[2607]: E0813 01:03:05.167309 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6f6464b85b-zj8gj" Aug 13 01:03:05.170079 kubelet[2607]: E0813 01:03:05.167338 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6f6464b85b-zj8gj" Aug 13 01:03:05.166511 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77-shm.mount: Deactivated successfully. Aug 13 01:03:05.171225 kubelet[2607]: E0813 01:03:05.167403 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6f6464b85b-zj8gj_calico-system(08087410-bce6-49a4-acc7-f910830b7746)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6f6464b85b-zj8gj_calico-system(08087410-bce6-49a4-acc7-f910830b7746)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6f6464b85b-zj8gj" podUID="08087410-bce6-49a4-acc7-f910830b7746" Aug 13 01:03:05.201782 env[1719]: time="2025-08-13T01:03:05.201713609Z" level=error msg="Failed to destroy network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.207200 env[1719]: time="2025-08-13T01:03:05.205473628Z" level=error msg="encountered an error cleaning up failed sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.207200 env[1719]: time="2025-08-13T01:03:05.205562787Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zwgd4,Uid:e1bffb21-6109-4213-a3cc-f4b22a0d6c19,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.205227 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351-shm.mount: Deactivated successfully. Aug 13 01:03:05.210166 kubelet[2607]: E0813 01:03:05.207672 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.210166 kubelet[2607]: E0813 01:03:05.207754 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-zwgd4" Aug 13 01:03:05.210166 kubelet[2607]: E0813 01:03:05.207802 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-zwgd4" Aug 13 01:03:05.210584 kubelet[2607]: E0813 01:03:05.210073 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-zwgd4_kube-system(e1bffb21-6109-4213-a3cc-f4b22a0d6c19)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-zwgd4_kube-system(e1bffb21-6109-4213-a3cc-f4b22a0d6c19)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-zwgd4" podUID="e1bffb21-6109-4213-a3cc-f4b22a0d6c19" Aug 13 01:03:05.228028 env[1719]: time="2025-08-13T01:03:05.227952818Z" level=error msg="Failed to destroy network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.234621 env[1719]: time="2025-08-13T01:03:05.231708978Z" level=error msg="encountered an error cleaning up failed sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.234621 env[1719]: time="2025-08-13T01:03:05.231800922Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-9pggm,Uid:9bff5897-b20d-423c-9873-a6298df70078,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.235105 kubelet[2607]: E0813 01:03:05.232302 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.235105 kubelet[2607]: E0813 01:03:05.232374 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-b8cf85895-9pggm" Aug 13 01:03:05.235105 kubelet[2607]: E0813 01:03:05.232406 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-b8cf85895-9pggm" Aug 13 01:03:05.231504 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5-shm.mount: Deactivated successfully. Aug 13 01:03:05.235448 kubelet[2607]: E0813 01:03:05.232483 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-b8cf85895-9pggm_calico-apiserver(9bff5897-b20d-423c-9873-a6298df70078)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-b8cf85895-9pggm_calico-apiserver(9bff5897-b20d-423c-9873-a6298df70078)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-b8cf85895-9pggm" podUID="9bff5897-b20d-423c-9873-a6298df70078" Aug 13 01:03:05.249414 env[1719]: time="2025-08-13T01:03:05.249346182Z" level=error msg="Failed to destroy network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.249897 env[1719]: time="2025-08-13T01:03:05.249842071Z" level=error msg="encountered an error cleaning up failed sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.250038 env[1719]: time="2025-08-13T01:03:05.249915010Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-75kjb,Uid:9cb56d00-67ce-4ec5-9c03-0745d269cbf6,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.250224 kubelet[2607]: E0813 01:03:05.250174 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.250320 kubelet[2607]: E0813 01:03:05.250252 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-b8cf85895-75kjb" Aug 13 01:03:05.250320 kubelet[2607]: E0813 01:03:05.250281 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-b8cf85895-75kjb" Aug 13 01:03:05.250458 kubelet[2607]: E0813 01:03:05.250350 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-b8cf85895-75kjb_calico-apiserver(9cb56d00-67ce-4ec5-9c03-0745d269cbf6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-b8cf85895-75kjb_calico-apiserver(9cb56d00-67ce-4ec5-9c03-0745d269cbf6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-b8cf85895-75kjb" podUID="9cb56d00-67ce-4ec5-9c03-0745d269cbf6" Aug 13 01:03:05.253196 env[1719]: time="2025-08-13T01:03:05.253136641Z" level=error msg="Failed to destroy network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.255170 env[1719]: time="2025-08-13T01:03:05.255070568Z" level=error msg="encountered an error cleaning up failed sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.255463 env[1719]: time="2025-08-13T01:03:05.255395447Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gdcs4,Uid:4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.256755 kubelet[2607]: E0813 01:03:05.255807 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.256755 kubelet[2607]: E0813 01:03:05.255886 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gdcs4" Aug 13 01:03:05.256755 kubelet[2607]: E0813 01:03:05.255920 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gdcs4" Aug 13 01:03:05.257037 kubelet[2607]: E0813 01:03:05.255995 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-gdcs4_kube-system(4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-gdcs4_kube-system(4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gdcs4" podUID="4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d" Aug 13 01:03:05.263673 env[1719]: time="2025-08-13T01:03:05.263609563Z" level=error msg="Failed to destroy network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.264401 env[1719]: time="2025-08-13T01:03:05.264021892Z" level=error msg="encountered an error cleaning up failed sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.264401 env[1719]: time="2025-08-13T01:03:05.264087770Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68555bdc65-ww469,Uid:14ba39ac-7472-4ec5-b18b-9019ae772400,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.265377 kubelet[2607]: E0813 01:03:05.264375 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.265377 kubelet[2607]: E0813 01:03:05.264564 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-68555bdc65-ww469" Aug 13 01:03:05.265377 kubelet[2607]: E0813 01:03:05.264599 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-68555bdc65-ww469" Aug 13 01:03:05.265604 kubelet[2607]: E0813 01:03:05.264660 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-68555bdc65-ww469_calico-system(14ba39ac-7472-4ec5-b18b-9019ae772400)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-68555bdc65-ww469_calico-system(14ba39ac-7472-4ec5-b18b-9019ae772400)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-68555bdc65-ww469" podUID="14ba39ac-7472-4ec5-b18b-9019ae772400" Aug 13 01:03:05.356012 systemd[1]: Created slice kubepods-besteffort-podeb8fa6ca_0f9c_4967_a309_b869c696b219.slice. Aug 13 01:03:05.364331 env[1719]: time="2025-08-13T01:03:05.363004774Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bp445,Uid:eb8fa6ca-0f9c-4967-a309-b869c696b219,Namespace:calico-system,Attempt:0,}" Aug 13 01:03:05.475748 env[1719]: time="2025-08-13T01:03:05.475688084Z" level=error msg="Failed to destroy network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.476351 env[1719]: time="2025-08-13T01:03:05.476293970Z" level=error msg="encountered an error cleaning up failed sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.476594 env[1719]: time="2025-08-13T01:03:05.476553930Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bp445,Uid:eb8fa6ca-0f9c-4967-a309-b869c696b219,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.477350 kubelet[2607]: E0813 01:03:05.477295 2607 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.477472 kubelet[2607]: E0813 01:03:05.477383 2607 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bp445" Aug 13 01:03:05.477472 kubelet[2607]: E0813 01:03:05.477412 2607 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bp445" Aug 13 01:03:05.477585 kubelet[2607]: E0813 01:03:05.477471 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-bp445_calico-system(eb8fa6ca-0f9c-4967-a309-b869c696b219)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-bp445_calico-system(eb8fa6ca-0f9c-4967-a309-b869c696b219)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:03:05.615877 kubelet[2607]: I0813 01:03:05.615369 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:05.617984 kubelet[2607]: I0813 01:03:05.617951 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:05.628220 kubelet[2607]: I0813 01:03:05.628180 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:05.630157 kubelet[2607]: I0813 01:03:05.630019 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:05.631665 kubelet[2607]: I0813 01:03:05.631597 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:05.635173 kubelet[2607]: I0813 01:03:05.635149 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:05.637979 env[1719]: time="2025-08-13T01:03:05.637940277Z" level=info msg="StopPodSandbox for \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\"" Aug 13 01:03:05.638832 env[1719]: time="2025-08-13T01:03:05.638802726Z" level=info msg="StopPodSandbox for \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\"" Aug 13 01:03:05.640081 kubelet[2607]: I0813 01:03:05.639708 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:05.646700 env[1719]: time="2025-08-13T01:03:05.639049110Z" level=info msg="StopPodSandbox for \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\"" Aug 13 01:03:05.646905 kubelet[2607]: I0813 01:03:05.646883 2607 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:05.647259 env[1719]: time="2025-08-13T01:03:05.647226497Z" level=info msg="StopPodSandbox for \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\"" Aug 13 01:03:05.647903 env[1719]: time="2025-08-13T01:03:05.639090633Z" level=info msg="StopPodSandbox for \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\"" Aug 13 01:03:05.648596 env[1719]: time="2025-08-13T01:03:05.639147906Z" level=info msg="StopPodSandbox for \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\"" Aug 13 01:03:05.652802 env[1719]: time="2025-08-13T01:03:05.639203577Z" level=info msg="StopPodSandbox for \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\"" Aug 13 01:03:05.653581 env[1719]: time="2025-08-13T01:03:05.642434985Z" level=info msg="StopPodSandbox for \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\"" Aug 13 01:03:05.755755 env[1719]: time="2025-08-13T01:03:05.752009829Z" level=error msg="StopPodSandbox for \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\" failed" error="failed to destroy network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.755755 env[1719]: time="2025-08-13T01:03:05.753959839Z" level=error msg="StopPodSandbox for \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\" failed" error="failed to destroy network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.755998 kubelet[2607]: E0813 01:03:05.753641 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:05.759201 kubelet[2607]: E0813 01:03:05.753816 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5"} Aug 13 01:03:05.759558 kubelet[2607]: E0813 01:03:05.759528 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9bff5897-b20d-423c-9873-a6298df70078\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.759745 kubelet[2607]: E0813 01:03:05.759714 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9bff5897-b20d-423c-9873-a6298df70078\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-b8cf85895-9pggm" podUID="9bff5897-b20d-423c-9873-a6298df70078" Aug 13 01:03:05.759986 kubelet[2607]: E0813 01:03:05.759956 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:05.760142 kubelet[2607]: E0813 01:03:05.760100 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602"} Aug 13 01:03:05.760252 kubelet[2607]: E0813 01:03:05.760233 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9cb56d00-67ce-4ec5-9c03-0745d269cbf6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.760394 kubelet[2607]: E0813 01:03:05.760373 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9cb56d00-67ce-4ec5-9c03-0745d269cbf6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-b8cf85895-75kjb" podUID="9cb56d00-67ce-4ec5-9c03-0745d269cbf6" Aug 13 01:03:05.779393 env[1719]: time="2025-08-13T01:03:05.779331723Z" level=error msg="StopPodSandbox for \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\" failed" error="failed to destroy network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.779623 kubelet[2607]: E0813 01:03:05.779583 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:05.779749 kubelet[2607]: E0813 01:03:05.779641 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351"} Aug 13 01:03:05.779749 kubelet[2607]: E0813 01:03:05.779689 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e1bffb21-6109-4213-a3cc-f4b22a0d6c19\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.779749 kubelet[2607]: E0813 01:03:05.779721 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e1bffb21-6109-4213-a3cc-f4b22a0d6c19\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-zwgd4" podUID="e1bffb21-6109-4213-a3cc-f4b22a0d6c19" Aug 13 01:03:05.814968 env[1719]: time="2025-08-13T01:03:05.814852344Z" level=error msg="StopPodSandbox for \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\" failed" error="failed to destroy network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.815699 kubelet[2607]: E0813 01:03:05.815309 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:05.815699 kubelet[2607]: E0813 01:03:05.815384 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77"} Aug 13 01:03:05.815699 kubelet[2607]: E0813 01:03:05.815443 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"08087410-bce6-49a4-acc7-f910830b7746\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.815699 kubelet[2607]: E0813 01:03:05.815503 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"08087410-bce6-49a4-acc7-f910830b7746\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6f6464b85b-zj8gj" podUID="08087410-bce6-49a4-acc7-f910830b7746" Aug 13 01:03:05.893049 env[1719]: time="2025-08-13T01:03:05.892883970Z" level=error msg="StopPodSandbox for \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\" failed" error="failed to destroy network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.893678 kubelet[2607]: E0813 01:03:05.893449 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:05.893678 kubelet[2607]: E0813 01:03:05.893535 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1"} Aug 13 01:03:05.893678 kubelet[2607]: E0813 01:03:05.893593 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"eb8fa6ca-0f9c-4967-a309-b869c696b219\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.893678 kubelet[2607]: E0813 01:03:05.893643 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"eb8fa6ca-0f9c-4967-a309-b869c696b219\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bp445" podUID="eb8fa6ca-0f9c-4967-a309-b869c696b219" Aug 13 01:03:05.924657 env[1719]: time="2025-08-13T01:03:05.924592213Z" level=error msg="StopPodSandbox for \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\" failed" error="failed to destroy network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.924894 kubelet[2607]: E0813 01:03:05.924853 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:05.925001 kubelet[2607]: E0813 01:03:05.924913 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc"} Aug 13 01:03:05.925001 kubelet[2607]: E0813 01:03:05.924957 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.925153 kubelet[2607]: E0813 01:03:05.924989 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gdcs4" podUID="4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d" Aug 13 01:03:05.935711 env[1719]: time="2025-08-13T01:03:05.935632820Z" level=error msg="StopPodSandbox for \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\" failed" error="failed to destroy network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.936356 kubelet[2607]: E0813 01:03:05.936265 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:05.936524 kubelet[2607]: E0813 01:03:05.936443 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44"} Aug 13 01:03:05.936579 kubelet[2607]: E0813 01:03:05.936518 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"14ba39ac-7472-4ec5-b18b-9019ae772400\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.936665 kubelet[2607]: E0813 01:03:05.936616 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"14ba39ac-7472-4ec5-b18b-9019ae772400\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-68555bdc65-ww469" podUID="14ba39ac-7472-4ec5-b18b-9019ae772400" Aug 13 01:03:05.946004 env[1719]: time="2025-08-13T01:03:05.945938872Z" level=error msg="StopPodSandbox for \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\" failed" error="failed to destroy network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:03:05.946615 kubelet[2607]: E0813 01:03:05.946418 2607 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:05.946615 kubelet[2607]: E0813 01:03:05.946476 2607 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53"} Aug 13 01:03:05.946615 kubelet[2607]: E0813 01:03:05.946523 2607 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9396d154-0d8d-4429-8f65-71c1ff716fd2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:03:05.946615 kubelet[2607]: E0813 01:03:05.946558 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9396d154-0d8d-4429-8f65-71c1ff716fd2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-c79h6" podUID="9396d154-0d8d-4429-8f65-71c1ff716fd2" Aug 13 01:03:06.034823 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602-shm.mount: Deactivated successfully. Aug 13 01:03:06.037324 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44-shm.mount: Deactivated successfully. Aug 13 01:03:06.037472 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc-shm.mount: Deactivated successfully. Aug 13 01:03:11.576997 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1392059245.mount: Deactivated successfully. Aug 13 01:03:11.629148 env[1719]: time="2025-08-13T01:03:11.628847906Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:11.664783 env[1719]: time="2025-08-13T01:03:11.664732203Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:11.667780 env[1719]: time="2025-08-13T01:03:11.667716263Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:11.670987 env[1719]: time="2025-08-13T01:03:11.670932114Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:11.671300 env[1719]: time="2025-08-13T01:03:11.671264449Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Aug 13 01:03:11.709219 env[1719]: time="2025-08-13T01:03:11.709173987Z" level=info msg="CreateContainer within sandbox \"ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Aug 13 01:03:11.811231 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2633999715.mount: Deactivated successfully. Aug 13 01:03:11.818991 env[1719]: time="2025-08-13T01:03:11.818921704Z" level=info msg="CreateContainer within sandbox \"ecd17f900f290734b914d9b9926987088af72ef5c37de394206c130e5e8acba3\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"21e13e6398b2c454a20008c2ed8e259835473d19a900b5366ca08941384f95ed\"" Aug 13 01:03:11.821480 env[1719]: time="2025-08-13T01:03:11.820106322Z" level=info msg="StartContainer for \"21e13e6398b2c454a20008c2ed8e259835473d19a900b5366ca08941384f95ed\"" Aug 13 01:03:11.843735 systemd[1]: Started cri-containerd-21e13e6398b2c454a20008c2ed8e259835473d19a900b5366ca08941384f95ed.scope. Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb4b4659a18 items=0 ppid=3169 pid=3777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:11.889890 kernel: audit: type=1400 audit(1755046991.874:1057): avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.890447 kernel: audit: type=1300 audit(1755046991.874:1057): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb4b4659a18 items=0 ppid=3169 pid=3777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:11.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231653133653633393862326334353461323030303863326564386532 Aug 13 01:03:11.902134 kernel: audit: type=1327 audit(1755046991.874:1057): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231653133653633393862326334353461323030303863326564386532 Aug 13 01:03:11.902965 kernel: audit: type=1400 audit(1755046991.874:1058): avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.923750 kernel: audit: type=1400 audit(1755046991.874:1058): avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.923908 kernel: audit: type=1400 audit(1755046991.874:1058): avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.936335 env[1719]: time="2025-08-13T01:03:11.930852508Z" level=info msg="StartContainer for \"21e13e6398b2c454a20008c2ed8e259835473d19a900b5366ca08941384f95ed\" returns successfully" Aug 13 01:03:11.937091 kernel: audit: type=1400 audit(1755046991.874:1058): avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.937180 kernel: audit: type=1400 audit(1755046991.874:1058): avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.949206 kernel: audit: type=1400 audit(1755046991.874:1058): avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.949333 kernel: audit: type=1400 audit(1755046991.874:1058): avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit: BPF prog-id=145 op=LOAD Aug 13 01:03:11.874000 audit[3777]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000dfba8 items=0 ppid=3169 pid=3777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:11.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231653133653633393862326334353461323030303863326564386532 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit: BPF prog-id=146 op=LOAD Aug 13 01:03:11.874000 audit[3777]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000dfbf8 items=0 ppid=3169 pid=3777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:11.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231653133653633393862326334353461323030303863326564386532 Aug 13 01:03:11.874000 audit: BPF prog-id=146 op=UNLOAD Aug 13 01:03:11.874000 audit: BPF prog-id=145 op=UNLOAD Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { perfmon } for pid=3777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit[3777]: AVC avc: denied { bpf } for pid=3777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:11.874000 audit: BPF prog-id=147 op=LOAD Aug 13 01:03:11.874000 audit[3777]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000dfc88 items=0 ppid=3169 pid=3777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:11.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231653133653633393862326334353461323030303863326564386532 Aug 13 01:03:12.402309 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Aug 13 01:03:12.402510 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 13 01:03:12.774802 systemd[1]: run-containerd-runc-k8s.io-21e13e6398b2c454a20008c2ed8e259835473d19a900b5366ca08941384f95ed-runc.O8e740.mount: Deactivated successfully. Aug 13 01:03:12.814012 kubelet[2607]: I0813 01:03:12.804651 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-9qgl9" podStartSLOduration=2.602655265 podStartE2EDuration="23.797383448s" podCreationTimestamp="2025-08-13 01:02:49 +0000 UTC" firstStartedPulling="2025-08-13 01:02:50.478041297 +0000 UTC m=+20.302309248" lastFinishedPulling="2025-08-13 01:03:11.67276947 +0000 UTC m=+41.497037431" observedRunningTime="2025-08-13 01:03:12.797215634 +0000 UTC m=+42.621483609" watchObservedRunningTime="2025-08-13 01:03:12.797383448 +0000 UTC m=+42.621651422" Aug 13 01:03:12.885886 env[1719]: time="2025-08-13T01:03:12.885401474Z" level=info msg="StopPodSandbox for \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\"" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.055 [INFO][3850] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.055 [INFO][3850] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" iface="eth0" netns="/var/run/netns/cni-ef31fa38-2059-2364-2f27-34d3a4d2075e" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.056 [INFO][3850] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" iface="eth0" netns="/var/run/netns/cni-ef31fa38-2059-2364-2f27-34d3a4d2075e" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.057 [INFO][3850] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" iface="eth0" netns="/var/run/netns/cni-ef31fa38-2059-2364-2f27-34d3a4d2075e" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.057 [INFO][3850] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.057 [INFO][3850] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.408 [INFO][3857] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.412 [INFO][3857] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.413 [INFO][3857] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.428 [WARNING][3857] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.428 [INFO][3857] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.431 [INFO][3857] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:13.437343 env[1719]: 2025-08-13 01:03:13.434 [INFO][3850] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:13.445410 env[1719]: time="2025-08-13T01:03:13.437535456Z" level=info msg="TearDown network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\" successfully" Aug 13 01:03:13.445410 env[1719]: time="2025-08-13T01:03:13.437583043Z" level=info msg="StopPodSandbox for \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\" returns successfully" Aug 13 01:03:13.440756 systemd[1]: run-netns-cni\x2def31fa38\x2d2059\x2d2364\x2d2f27\x2d34d3a4d2075e.mount: Deactivated successfully. Aug 13 01:03:13.622152 kubelet[2607]: I0813 01:03:13.622092 2607 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8p9pq\" (UniqueName: \"kubernetes.io/projected/14ba39ac-7472-4ec5-b18b-9019ae772400-kube-api-access-8p9pq\") pod \"14ba39ac-7472-4ec5-b18b-9019ae772400\" (UID: \"14ba39ac-7472-4ec5-b18b-9019ae772400\") " Aug 13 01:03:13.622413 kubelet[2607]: I0813 01:03:13.622383 2607 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-backend-key-pair\") pod \"14ba39ac-7472-4ec5-b18b-9019ae772400\" (UID: \"14ba39ac-7472-4ec5-b18b-9019ae772400\") " Aug 13 01:03:13.622413 kubelet[2607]: I0813 01:03:13.622413 2607 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-ca-bundle\") pod \"14ba39ac-7472-4ec5-b18b-9019ae772400\" (UID: \"14ba39ac-7472-4ec5-b18b-9019ae772400\") " Aug 13 01:03:13.630139 kubelet[2607]: I0813 01:03:13.628714 2607 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "14ba39ac-7472-4ec5-b18b-9019ae772400" (UID: "14ba39ac-7472-4ec5-b18b-9019ae772400"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Aug 13 01:03:13.633961 systemd[1]: var-lib-kubelet-pods-14ba39ac\x2d7472\x2d4ec5\x2db18b\x2d9019ae772400-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8p9pq.mount: Deactivated successfully. Aug 13 01:03:13.636842 systemd[1]: var-lib-kubelet-pods-14ba39ac\x2d7472\x2d4ec5\x2db18b\x2d9019ae772400-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Aug 13 01:03:13.638313 kubelet[2607]: I0813 01:03:13.637883 2607 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "14ba39ac-7472-4ec5-b18b-9019ae772400" (UID: "14ba39ac-7472-4ec5-b18b-9019ae772400"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Aug 13 01:03:13.638511 kubelet[2607]: I0813 01:03:13.638475 2607 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/14ba39ac-7472-4ec5-b18b-9019ae772400-kube-api-access-8p9pq" (OuterVolumeSpecName: "kube-api-access-8p9pq") pod "14ba39ac-7472-4ec5-b18b-9019ae772400" (UID: "14ba39ac-7472-4ec5-b18b-9019ae772400"). InnerVolumeSpecName "kube-api-access-8p9pq". PluginName "kubernetes.io/projected", VolumeGIDValue "" Aug 13 01:03:13.723954 kubelet[2607]: I0813 01:03:13.723921 2607 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-8p9pq\" (UniqueName: \"kubernetes.io/projected/14ba39ac-7472-4ec5-b18b-9019ae772400-kube-api-access-8p9pq\") on node \"ip-172-31-21-64\" DevicePath \"\"" Aug 13 01:03:13.724557 kubelet[2607]: I0813 01:03:13.724535 2607 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-backend-key-pair\") on node \"ip-172-31-21-64\" DevicePath \"\"" Aug 13 01:03:13.724821 kubelet[2607]: I0813 01:03:13.724802 2607 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/14ba39ac-7472-4ec5-b18b-9019ae772400-whisker-ca-bundle\") on node \"ip-172-31-21-64\" DevicePath \"\"" Aug 13 01:03:13.758959 systemd[1]: Removed slice kubepods-besteffort-pod14ba39ac_7472_4ec5_b18b_9019ae772400.slice. Aug 13 01:03:13.901758 systemd[1]: Created slice kubepods-besteffort-podbb2453ea_0a5a_4f94_9fc7_cbeab75e4caf.slice. Aug 13 01:03:14.027792 kubelet[2607]: I0813 01:03:14.027665 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d9rnz\" (UniqueName: \"kubernetes.io/projected/bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf-kube-api-access-d9rnz\") pod \"whisker-74bb4495dc-fdn5f\" (UID: \"bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf\") " pod="calico-system/whisker-74bb4495dc-fdn5f" Aug 13 01:03:14.027792 kubelet[2607]: I0813 01:03:14.027714 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf-whisker-ca-bundle\") pod \"whisker-74bb4495dc-fdn5f\" (UID: \"bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf\") " pod="calico-system/whisker-74bb4495dc-fdn5f" Aug 13 01:03:14.027792 kubelet[2607]: I0813 01:03:14.027751 2607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf-whisker-backend-key-pair\") pod \"whisker-74bb4495dc-fdn5f\" (UID: \"bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf\") " pod="calico-system/whisker-74bb4495dc-fdn5f" Aug 13 01:03:14.205570 env[1719]: time="2025-08-13T01:03:14.205522200Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74bb4495dc-fdn5f,Uid:bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf,Namespace:calico-system,Attempt:0,}" Aug 13 01:03:14.352088 kubelet[2607]: I0813 01:03:14.351043 2607 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="14ba39ac-7472-4ec5-b18b-9019ae772400" path="/var/lib/kubelet/pods/14ba39ac-7472-4ec5-b18b-9019ae772400/volumes" Aug 13 01:03:14.381000 audit[3970]: AVC avc: denied { write } for pid=3970 comm="tee" name="fd" dev="proc" ino=25114 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:03:14.381000 audit[3970]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd595ce7c9 a2=241 a3=1b6 items=1 ppid=3928 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.381000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Aug 13 01:03:14.381000 audit: PATH item=0 name="/dev/fd/63" inode=25099 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:03:14.381000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:03:14.389000 audit[3968]: AVC avc: denied { write } for pid=3968 comm="tee" name="fd" dev="proc" ino=25122 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:03:14.389000 audit[3968]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe266b47db a2=241 a3=1b6 items=1 ppid=3931 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.389000 audit: CWD cwd="/etc/service/enabled/cni/log" Aug 13 01:03:14.389000 audit: PATH item=0 name="/dev/fd/63" inode=25098 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:03:14.389000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:03:14.392000 audit[3972]: AVC avc: denied { write } for pid=3972 comm="tee" name="fd" dev="proc" ino=25126 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:03:14.392000 audit[3972]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcf04a47da a2=241 a3=1b6 items=1 ppid=3920 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.392000 audit: CWD cwd="/etc/service/enabled/bird/log" Aug 13 01:03:14.392000 audit: PATH item=0 name="/dev/fd/63" inode=25102 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:03:14.392000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:03:14.395000 audit[3974]: AVC avc: denied { write } for pid=3974 comm="tee" name="fd" dev="proc" ino=25835 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:03:14.395000 audit[3974]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc073fc7d9 a2=241 a3=1b6 items=1 ppid=3935 pid=3974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.395000 audit: CWD cwd="/etc/service/enabled/felix/log" Aug 13 01:03:14.395000 audit: PATH item=0 name="/dev/fd/63" inode=25105 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:03:14.395000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:03:14.403000 audit[3981]: AVC avc: denied { write } for pid=3981 comm="tee" name="fd" dev="proc" ino=25839 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:03:14.403000 audit[3981]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe747c47ca a2=241 a3=1b6 items=1 ppid=3924 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.403000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Aug 13 01:03:14.403000 audit: PATH item=0 name="/dev/fd/63" inode=25830 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:03:14.403000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:03:14.432000 audit[3991]: AVC avc: denied { write } for pid=3991 comm="tee" name="fd" dev="proc" ino=25132 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:03:14.432000 audit[3991]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebfd9c7d9 a2=241 a3=1b6 items=1 ppid=3922 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.432000 audit: CWD cwd="/etc/service/enabled/bird6/log" Aug 13 01:03:14.432000 audit: PATH item=0 name="/dev/fd/63" inode=25119 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:03:14.432000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:03:14.435000 audit[3989]: AVC avc: denied { write } for pid=3989 comm="tee" name="fd" dev="proc" ino=25136 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:03:14.435000 audit[3989]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffff1ffe7d9 a2=241 a3=1b6 items=1 ppid=3921 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.435000 audit: CWD cwd="/etc/service/enabled/confd/log" Aug 13 01:03:14.435000 audit: PATH item=0 name="/dev/fd/63" inode=25118 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:03:14.435000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:03:14.461329 (udev-worker)[3809]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:03:14.467214 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:03:14.476164 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali398d4de6214: link becomes ready Aug 13 01:03:14.482769 systemd-networkd[1444]: cali398d4de6214: Link UP Aug 13 01:03:14.483050 systemd-networkd[1444]: cali398d4de6214: Gained carrier Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.259 [INFO][3899] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.292 [INFO][3899] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0 whisker-74bb4495dc- calico-system bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf 944 0 2025-08-13 01:03:13 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:74bb4495dc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-21-64 whisker-74bb4495dc-fdn5f eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali398d4de6214 [] [] }} ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.292 [INFO][3899] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.364 [INFO][3949] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" HandleID="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Workload="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.365 [INFO][3949] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" HandleID="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Workload="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5860), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-64", "pod":"whisker-74bb4495dc-fdn5f", "timestamp":"2025-08-13 01:03:14.364742536 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.365 [INFO][3949] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.365 [INFO][3949] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.365 [INFO][3949] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.379 [INFO][3949] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.400 [INFO][3949] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.409 [INFO][3949] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.411 [INFO][3949] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.415 [INFO][3949] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.415 [INFO][3949] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.417 [INFO][3949] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2 Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.425 [INFO][3949] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.438 [INFO][3949] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.129/26] block=192.168.42.128/26 handle="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.438 [INFO][3949] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.129/26] handle="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" host="ip-172-31-21-64" Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.439 [INFO][3949] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:14.507841 env[1719]: 2025-08-13 01:03:14.439 [INFO][3949] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.129/26] IPv6=[] ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" HandleID="k8s-pod-network.8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Workload="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" Aug 13 01:03:14.509731 env[1719]: 2025-08-13 01:03:14.443 [INFO][3899] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0", GenerateName:"whisker-74bb4495dc-", Namespace:"calico-system", SelfLink:"", UID:"bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 3, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"74bb4495dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"whisker-74bb4495dc-fdn5f", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.42.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali398d4de6214", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:14.509731 env[1719]: 2025-08-13 01:03:14.443 [INFO][3899] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.129/32] ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" Aug 13 01:03:14.509731 env[1719]: 2025-08-13 01:03:14.443 [INFO][3899] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali398d4de6214 ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" Aug 13 01:03:14.509731 env[1719]: 2025-08-13 01:03:14.482 [INFO][3899] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" Aug 13 01:03:14.509731 env[1719]: 2025-08-13 01:03:14.482 [INFO][3899] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0", GenerateName:"whisker-74bb4495dc-", Namespace:"calico-system", SelfLink:"", UID:"bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 3, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"74bb4495dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2", Pod:"whisker-74bb4495dc-fdn5f", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.42.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali398d4de6214", MAC:"aa:ea:a7:47:b8:cb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:14.509731 env[1719]: 2025-08-13 01:03:14.497 [INFO][3899] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2" Namespace="calico-system" Pod="whisker-74bb4495dc-fdn5f" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--74bb4495dc--fdn5f-eth0" Aug 13 01:03:14.540214 env[1719]: time="2025-08-13T01:03:14.540096988Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:14.540381 env[1719]: time="2025-08-13T01:03:14.540229991Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:14.540381 env[1719]: time="2025-08-13T01:03:14.540260860Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:14.540512 env[1719]: time="2025-08-13T01:03:14.540465615Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2 pid=4018 runtime=io.containerd.runc.v2 Aug 13 01:03:14.559793 systemd[1]: Started cri-containerd-8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2.scope. Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.623000 audit: BPF prog-id=148 op=LOAD Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4018 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866643033646430343332653262353464353330313731363735303062 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4018 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866643033646430343332653262353464353330313731363735303062 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit: BPF prog-id=149 op=LOAD Aug 13 01:03:14.627000 audit[4027]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ac480 items=0 ppid=4018 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866643033646430343332653262353464353330313731363735303062 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.627000 audit: BPF prog-id=150 op=LOAD Aug 13 01:03:14.627000 audit[4027]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003ac4c8 items=0 ppid=4018 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866643033646430343332653262353464353330313731363735303062 Aug 13 01:03:14.628000 audit: BPF prog-id=150 op=UNLOAD Aug 13 01:03:14.628000 audit: BPF prog-id=149 op=UNLOAD Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:14.628000 audit: BPF prog-id=151 op=LOAD Aug 13 01:03:14.628000 audit[4027]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003ac8d8 items=0 ppid=4018 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:14.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866643033646430343332653262353464353330313731363735303062 Aug 13 01:03:14.694893 env[1719]: time="2025-08-13T01:03:14.694836489Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74bb4495dc-fdn5f,Uid:bb2453ea-0a5a-4f94-9fc7-cbeab75e4caf,Namespace:calico-system,Attempt:0,} returns sandbox id \"8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2\"" Aug 13 01:03:14.703280 env[1719]: time="2025-08-13T01:03:14.703232796Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.027000 audit: BPF prog-id=152 op=LOAD Aug 13 01:03:15.027000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc4f2fb40 a2=98 a3=1fffffffffffffff items=0 ppid=3939 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.027000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:03:15.027000 audit: BPF prog-id=152 op=UNLOAD Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit: BPF prog-id=153 op=LOAD Aug 13 01:03:15.028000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc4f2fa20 a2=94 a3=3 items=0 ppid=3939 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.028000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:03:15.028000 audit: BPF prog-id=153 op=UNLOAD Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit: BPF prog-id=154 op=LOAD Aug 13 01:03:15.028000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc4f2fa60 a2=94 a3=7ffcc4f2fc40 items=0 ppid=3939 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.028000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:03:15.028000 audit: BPF prog-id=154 op=UNLOAD Aug 13 01:03:15.028000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.028000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffcc4f2fb30 a2=50 a3=a000000085 items=0 ppid=3939 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.028000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.030000 audit: BPF prog-id=155 op=LOAD Aug 13 01:03:15.030000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff04f93990 a2=98 a3=3 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.030000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.030000 audit: BPF prog-id=155 op=UNLOAD Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit: BPF prog-id=156 op=LOAD Aug 13 01:03:15.031000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff04f93780 a2=94 a3=54428f items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.031000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.031000 audit: BPF prog-id=156 op=UNLOAD Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.031000 audit: BPF prog-id=157 op=LOAD Aug 13 01:03:15.031000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff04f937b0 a2=94 a3=2 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.031000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.031000 audit: BPF prog-id=157 op=UNLOAD Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit: BPF prog-id=158 op=LOAD Aug 13 01:03:15.153000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff04f93670 a2=94 a3=1 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.153000 audit: BPF prog-id=158 op=UNLOAD Aug 13 01:03:15.153000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.153000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff04f93740 a2=50 a3=7fff04f93820 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff04f93680 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff04f936b0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff04f935c0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff04f936d0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff04f936b0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff04f936a0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff04f936d0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff04f936b0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff04f936d0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff04f936a0 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.164000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.164000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff04f93710 a2=28 a3=0 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.164000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff04f934c0 a2=50 a3=1 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit: BPF prog-id=159 op=LOAD Aug 13 01:03:15.165000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff04f934c0 a2=94 a3=5 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.165000 audit: BPF prog-id=159 op=UNLOAD Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff04f93570 a2=50 a3=1 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff04f93690 a2=4 a3=38 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { confidentiality } for pid=4085 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:03:15.165000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff04f936e0 a2=94 a3=6 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { confidentiality } for pid=4085 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:03:15.165000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff04f92e90 a2=94 a3=88 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { perfmon } for pid=4085 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { bpf } for pid=4085 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.165000 audit[4085]: AVC avc: denied { confidentiality } for pid=4085 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:03:15.165000 audit[4085]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff04f92e90 a2=94 a3=88 items=0 ppid=3939 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit: BPF prog-id=160 op=LOAD Aug 13 01:03:15.181000 audit[4088]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce4e0a770 a2=98 a3=1999999999999999 items=0 ppid=3939 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.181000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 01:03:15.181000 audit: BPF prog-id=160 op=UNLOAD Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.181000 audit: BPF prog-id=161 op=LOAD Aug 13 01:03:15.181000 audit[4088]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce4e0a650 a2=94 a3=ffff items=0 ppid=3939 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.181000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 01:03:15.182000 audit: BPF prog-id=161 op=UNLOAD Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.182000 audit: BPF prog-id=162 op=LOAD Aug 13 01:03:15.182000 audit[4088]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce4e0a690 a2=94 a3=7ffce4e0a870 items=0 ppid=3939 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.182000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 01:03:15.182000 audit: BPF prog-id=162 op=UNLOAD Aug 13 01:03:15.284604 systemd-networkd[1444]: vxlan.calico: Link UP Aug 13 01:03:15.284615 systemd-networkd[1444]: vxlan.calico: Gained carrier Aug 13 01:03:15.314219 (udev-worker)[4114]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:03:15.314219 (udev-worker)[4113]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.315000 audit: BPF prog-id=163 op=LOAD Aug 13 01:03:15.315000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd16ef7130 a2=98 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.315000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.315000 audit: BPF prog-id=163 op=UNLOAD Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit: BPF prog-id=164 op=LOAD Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd16ef6f40 a2=94 a3=54428f items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit: BPF prog-id=164 op=UNLOAD Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit: BPF prog-id=165 op=LOAD Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd16ef6f70 a2=94 a3=2 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit: BPF prog-id=165 op=UNLOAD Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd16ef6e40 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd16ef6e70 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd16ef6d80 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd16ef6e90 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd16ef6e70 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd16ef6e60 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd16ef6e90 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd16ef6e70 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd16ef6e90 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd16ef6e60 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd16ef6ed0 a2=28 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.316000 audit: BPF prog-id=166 op=LOAD Aug 13 01:03:15.316000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd16ef6d40 a2=94 a3=0 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.316000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.317000 audit: BPF prog-id=166 op=UNLOAD Aug 13 01:03:15.317000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.317000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd16ef6d30 a2=50 a3=2800 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.317000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.317000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffd16ef6d30 a2=50 a3=2800 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit: BPF prog-id=167 op=LOAD Aug 13 01:03:15.318000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd16ef6550 a2=94 a3=2 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.318000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.318000 audit: BPF prog-id=167 op=UNLOAD Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.318000 audit: BPF prog-id=168 op=LOAD Aug 13 01:03:15.318000 audit[4116]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd16ef6650 a2=94 a3=30 items=0 ppid=3939 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.318000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit: BPF prog-id=169 op=LOAD Aug 13 01:03:15.323000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe12687f20 a2=98 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.323000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.323000 audit: BPF prog-id=169 op=UNLOAD Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit: BPF prog-id=170 op=LOAD Aug 13 01:03:15.323000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe12687d10 a2=94 a3=54428f items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.323000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.323000 audit: BPF prog-id=170 op=UNLOAD Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.323000 audit: BPF prog-id=171 op=LOAD Aug 13 01:03:15.323000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe12687d40 a2=94 a3=2 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.323000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.323000 audit: BPF prog-id=171 op=UNLOAD Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit: BPF prog-id=172 op=LOAD Aug 13 01:03:15.476000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe12687c00 a2=94 a3=1 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.476000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.476000 audit: BPF prog-id=172 op=UNLOAD Aug 13 01:03:15.476000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.476000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe12687cd0 a2=50 a3=7ffe12687db0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.476000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe12687c10 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe12687c40 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe12687b50 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe12687c60 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe12687c40 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe12687c30 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe12687c60 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe12687c40 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe12687c60 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe12687c30 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe12687ca0 a2=28 a3=0 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe12687a50 a2=50 a3=1 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.488000 audit: BPF prog-id=173 op=LOAD Aug 13 01:03:15.488000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe12687a50 a2=94 a3=5 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.488000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.489000 audit: BPF prog-id=173 op=UNLOAD Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe12687b00 a2=50 a3=1 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.489000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe12687c20 a2=4 a3=38 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.489000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { confidentiality } for pid=4120 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:03:15.489000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe12687c70 a2=94 a3=6 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.489000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { confidentiality } for pid=4120 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:03:15.489000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe12687420 a2=94 a3=88 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.489000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.489000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe12687420 a2=94 a3=88 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.489000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.490000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.490000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe12688e50 a2=10 a3=f8f00800 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.490000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.490000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.490000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe12688cf0 a2=10 a3=3 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.490000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.490000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.490000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe12688c90 a2=10 a3=3 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.490000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.490000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:15.490000 audit[4120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe12688c90 a2=10 a3=7 items=0 ppid=3939 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.490000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:03:15.499000 audit: BPF prog-id=168 op=UNLOAD Aug 13 01:03:15.571000 audit[4144]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=4144 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:15.571000 audit[4144]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffc73ebc060 a2=0 a3=7ffc73ebc04c items=0 ppid=3939 pid=4144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.571000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:15.611000 audit[4147]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=4147 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:15.611000 audit[4147]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffef7b6cc20 a2=0 a3=7ffef7b6cc0c items=0 ppid=3939 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.611000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:15.618000 audit[4145]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=4145 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:15.618000 audit[4145]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffe528021b0 a2=0 a3=7ffe5280219c items=0 ppid=3939 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.618000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:15.620000 audit[4146]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=4146 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:15.620000 audit[4146]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffcd3be4a60 a2=0 a3=7ffcd3be4a4c items=0 ppid=3939 pid=4146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:15.620000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:15.922009 env[1719]: time="2025-08-13T01:03:15.921650825Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:15.925608 env[1719]: time="2025-08-13T01:03:15.925570500Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:15.928152 env[1719]: time="2025-08-13T01:03:15.928076358Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:15.931014 env[1719]: time="2025-08-13T01:03:15.930960278Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:15.931780 env[1719]: time="2025-08-13T01:03:15.931735043Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Aug 13 01:03:15.938573 env[1719]: time="2025-08-13T01:03:15.938520729Z" level=info msg="CreateContainer within sandbox \"8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Aug 13 01:03:15.964993 env[1719]: time="2025-08-13T01:03:15.964934613Z" level=info msg="CreateContainer within sandbox \"8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"3a6a0a0a66c81dce3b226070a8c6fe276b807bf9a9973a56472fc6aee72aa7b8\"" Aug 13 01:03:15.965848 env[1719]: time="2025-08-13T01:03:15.965818868Z" level=info msg="StartContainer for \"3a6a0a0a66c81dce3b226070a8c6fe276b807bf9a9973a56472fc6aee72aa7b8\"" Aug 13 01:03:16.008732 systemd[1]: Started cri-containerd-3a6a0a0a66c81dce3b226070a8c6fe276b807bf9a9973a56472fc6aee72aa7b8.scope. Aug 13 01:03:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit: BPF prog-id=174 op=LOAD Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4018 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366130613061363663383164636533623232363037306138633666 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4018 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366130613061363663383164636533623232363037306138633666 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.029000 audit: BPF prog-id=175 op=LOAD Aug 13 01:03:16.029000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002e8af0 items=0 ppid=4018 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366130613061363663383164636533623232363037306138633666 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit: BPF prog-id=176 op=LOAD Aug 13 01:03:16.030000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002e8b38 items=0 ppid=4018 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366130613061363663383164636533623232363037306138633666 Aug 13 01:03:16.030000 audit: BPF prog-id=176 op=UNLOAD Aug 13 01:03:16.030000 audit: BPF prog-id=175 op=UNLOAD Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.030000 audit: BPF prog-id=177 op=LOAD Aug 13 01:03:16.030000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002e8f48 items=0 ppid=4018 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366130613061363663383164636533623232363037306138633666 Aug 13 01:03:16.069168 systemd-networkd[1444]: cali398d4de6214: Gained IPv6LL Aug 13 01:03:16.071724 env[1719]: time="2025-08-13T01:03:16.071662706Z" level=info msg="StartContainer for \"3a6a0a0a66c81dce3b226070a8c6fe276b807bf9a9973a56472fc6aee72aa7b8\" returns successfully" Aug 13 01:03:16.076413 env[1719]: time="2025-08-13T01:03:16.076274228Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Aug 13 01:03:16.108000 audit[4175]: AVC avc: denied { search } for pid=4175 comm="nginx" name="crypto" dev="proc" ino=25551 scontext=system_u:system_r:svirt_lxc_net_t:s0:c646,c877 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Aug 13 01:03:16.108000 audit[4175]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fc925c35728 a2=0 a3=0 items=0 ppid=4018 pid=4175 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c646,c877 key=(null) Aug 13 01:03:16.108000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Aug 13 01:03:16.348123 env[1719]: time="2025-08-13T01:03:16.348066149Z" level=info msg="StopPodSandbox for \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\"" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.404 [INFO][4204] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.405 [INFO][4204] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" iface="eth0" netns="/var/run/netns/cni-b853c79e-4d37-9c8f-0b2b-a92c8dbd88ef" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.405 [INFO][4204] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" iface="eth0" netns="/var/run/netns/cni-b853c79e-4d37-9c8f-0b2b-a92c8dbd88ef" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.405 [INFO][4204] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" iface="eth0" netns="/var/run/netns/cni-b853c79e-4d37-9c8f-0b2b-a92c8dbd88ef" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.405 [INFO][4204] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.405 [INFO][4204] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.429 [INFO][4212] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.429 [INFO][4212] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.429 [INFO][4212] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.437 [WARNING][4212] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.437 [INFO][4212] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.440 [INFO][4212] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:16.445424 env[1719]: 2025-08-13 01:03:16.442 [INFO][4204] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:16.449841 systemd[1]: run-netns-cni\x2db853c79e\x2d4d37\x2d9c8f\x2d0b2b\x2da92c8dbd88ef.mount: Deactivated successfully. Aug 13 01:03:16.451092 env[1719]: time="2025-08-13T01:03:16.451040592Z" level=info msg="TearDown network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\" successfully" Aug 13 01:03:16.451483 env[1719]: time="2025-08-13T01:03:16.451424088Z" level=info msg="StopPodSandbox for \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\" returns successfully" Aug 13 01:03:16.452636 env[1719]: time="2025-08-13T01:03:16.452595508Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bp445,Uid:eb8fa6ca-0f9c-4967-a309-b869c696b219,Namespace:calico-system,Attempt:1,}" Aug 13 01:03:16.716409 systemd-networkd[1444]: cali23aaad86063: Link UP Aug 13 01:03:16.719852 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:03:16.719964 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali23aaad86063: link becomes ready Aug 13 01:03:16.720096 systemd-networkd[1444]: cali23aaad86063: Gained carrier Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.531 [INFO][4218] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0 csi-node-driver- calico-system eb8fa6ca-0f9c-4967-a309-b869c696b219 962 0 2025-08-13 01:02:49 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-21-64 csi-node-driver-bp445 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali23aaad86063 [] [] }} ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.532 [INFO][4218] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.633 [INFO][4231] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" HandleID="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.633 [INFO][4231] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" HandleID="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f860), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-64", "pod":"csi-node-driver-bp445", "timestamp":"2025-08-13 01:03:16.633136392 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.633 [INFO][4231] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.633 [INFO][4231] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.633 [INFO][4231] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.641 [INFO][4231] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.649 [INFO][4231] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.663 [INFO][4231] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.669 [INFO][4231] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.676 [INFO][4231] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.676 [INFO][4231] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.678 [INFO][4231] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.700 [INFO][4231] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.710 [INFO][4231] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.130/26] block=192.168.42.128/26 handle="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.710 [INFO][4231] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.130/26] handle="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" host="ip-172-31-21-64" Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.710 [INFO][4231] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:16.739036 env[1719]: 2025-08-13 01:03:16.710 [INFO][4231] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.130/26] IPv6=[] ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" HandleID="k8s-pod-network.19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.740025 env[1719]: 2025-08-13 01:03:16.712 [INFO][4218] cni-plugin/k8s.go 418: Populated endpoint ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eb8fa6ca-0f9c-4967-a309-b869c696b219", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"csi-node-driver-bp445", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.42.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali23aaad86063", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:16.740025 env[1719]: 2025-08-13 01:03:16.712 [INFO][4218] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.130/32] ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.740025 env[1719]: 2025-08-13 01:03:16.712 [INFO][4218] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali23aaad86063 ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.740025 env[1719]: 2025-08-13 01:03:16.721 [INFO][4218] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.740025 env[1719]: 2025-08-13 01:03:16.721 [INFO][4218] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eb8fa6ca-0f9c-4967-a309-b869c696b219", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd", Pod:"csi-node-driver-bp445", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.42.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali23aaad86063", MAC:"16:66:0e:22:9e:94", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:16.740025 env[1719]: 2025-08-13 01:03:16.736 [INFO][4218] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd" Namespace="calico-system" Pod="csi-node-driver-bp445" WorkloadEndpoint="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:16.759923 env[1719]: time="2025-08-13T01:03:16.759811987Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:16.760150 env[1719]: time="2025-08-13T01:03:16.759894407Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:16.760150 env[1719]: time="2025-08-13T01:03:16.759910806Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:16.760469 env[1719]: time="2025-08-13T01:03:16.760399908Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd pid=4255 runtime=io.containerd.runc.v2 Aug 13 01:03:16.770000 audit[4264]: NETFILTER_CFG table=filter:105 family=2 entries=36 op=nft_register_chain pid=4264 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:16.770000 audit[4264]: SYSCALL arch=c000003e syscall=46 success=yes exit=19576 a0=3 a1=7ffcea5afdd0 a2=0 a3=7ffcea5afdbc items=0 ppid=3939 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.770000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:16.779514 systemd[1]: Started cri-containerd-19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd.scope. Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.802000 audit: BPF prog-id=178 op=LOAD Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4255 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139643737343965353838636635306232393536303936663965333366 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4255 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139643737343965353838636635306232393536303936663965333366 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.803000 audit: BPF prog-id=179 op=LOAD Aug 13 01:03:16.803000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002d1ec0 items=0 ppid=4255 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139643737343965353838636635306232393536303936663965333366 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.805000 audit: BPF prog-id=180 op=LOAD Aug 13 01:03:16.805000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002d1f08 items=0 ppid=4255 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139643737343965353838636635306232393536303936663965333366 Aug 13 01:03:16.806000 audit: BPF prog-id=180 op=UNLOAD Aug 13 01:03:16.806000 audit: BPF prog-id=179 op=UNLOAD Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:16.806000 audit: BPF prog-id=181 op=LOAD Aug 13 01:03:16.806000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00039c318 items=0 ppid=4255 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:16.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139643737343965353838636635306232393536303936663965333366 Aug 13 01:03:16.831987 env[1719]: time="2025-08-13T01:03:16.831390687Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bp445,Uid:eb8fa6ca-0f9c-4967-a309-b869c696b219,Namespace:calico-system,Attempt:1,} returns sandbox id \"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd\"" Aug 13 01:03:16.836510 systemd-networkd[1444]: vxlan.calico: Gained IPv6LL Aug 13 01:03:17.348743 env[1719]: time="2025-08-13T01:03:17.348694541Z" level=info msg="StopPodSandbox for \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\"" Aug 13 01:03:17.364271 env[1719]: time="2025-08-13T01:03:17.364220103Z" level=info msg="StopPodSandbox for \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\"" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.521 [INFO][4308] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.521 [INFO][4308] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" iface="eth0" netns="/var/run/netns/cni-cdbf3d13-8ecc-d203-f37d-5207a4d8faf0" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.522 [INFO][4308] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" iface="eth0" netns="/var/run/netns/cni-cdbf3d13-8ecc-d203-f37d-5207a4d8faf0" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.522 [INFO][4308] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" iface="eth0" netns="/var/run/netns/cni-cdbf3d13-8ecc-d203-f37d-5207a4d8faf0" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.522 [INFO][4308] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.522 [INFO][4308] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.589 [INFO][4322] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.590 [INFO][4322] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.590 [INFO][4322] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.600 [WARNING][4322] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.600 [INFO][4322] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.602 [INFO][4322] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:17.631029 env[1719]: 2025-08-13 01:03:17.605 [INFO][4308] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:17.636928 env[1719]: time="2025-08-13T01:03:17.634944067Z" level=info msg="TearDown network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\" successfully" Aug 13 01:03:17.636928 env[1719]: time="2025-08-13T01:03:17.634995369Z" level=info msg="StopPodSandbox for \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\" returns successfully" Aug 13 01:03:17.636928 env[1719]: time="2025-08-13T01:03:17.635953595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-75kjb,Uid:9cb56d00-67ce-4ec5-9c03-0745d269cbf6,Namespace:calico-apiserver,Attempt:1,}" Aug 13 01:03:17.634938 systemd[1]: run-netns-cni\x2dcdbf3d13\x2d8ecc\x2dd203\x2df37d\x2d5207a4d8faf0.mount: Deactivated successfully. Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.527 [INFO][4312] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.527 [INFO][4312] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" iface="eth0" netns="/var/run/netns/cni-e205dda8-1d5f-3521-c20d-833f70d66e2f" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.527 [INFO][4312] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" iface="eth0" netns="/var/run/netns/cni-e205dda8-1d5f-3521-c20d-833f70d66e2f" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.528 [INFO][4312] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" iface="eth0" netns="/var/run/netns/cni-e205dda8-1d5f-3521-c20d-833f70d66e2f" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.528 [INFO][4312] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.528 [INFO][4312] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.599 [INFO][4323] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.599 [INFO][4323] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.605 [INFO][4323] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.640 [WARNING][4323] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.640 [INFO][4323] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.642 [INFO][4323] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:17.647896 env[1719]: 2025-08-13 01:03:17.645 [INFO][4312] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:17.655809 env[1719]: time="2025-08-13T01:03:17.651741645Z" level=info msg="TearDown network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\" successfully" Aug 13 01:03:17.655809 env[1719]: time="2025-08-13T01:03:17.651786512Z" level=info msg="StopPodSandbox for \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\" returns successfully" Aug 13 01:03:17.655809 env[1719]: time="2025-08-13T01:03:17.654007468Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-c79h6,Uid:9396d154-0d8d-4429-8f65-71c1ff716fd2,Namespace:calico-system,Attempt:1,}" Aug 13 01:03:17.655622 systemd[1]: run-netns-cni\x2de205dda8\x2d1d5f\x2d3521\x2dc20d\x2d833f70d66e2f.mount: Deactivated successfully. Aug 13 01:03:18.029515 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:03:18.029729 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif4f35b7ca4d: link becomes ready Aug 13 01:03:18.025490 systemd-networkd[1444]: calif4f35b7ca4d: Link UP Aug 13 01:03:18.030331 systemd-networkd[1444]: calif4f35b7ca4d: Gained carrier Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.815 [INFO][4343] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0 goldmane-768f4c5c69- calico-system 9396d154-0d8d-4429-8f65-71c1ff716fd2 970 0 2025-08-13 01:02:49 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-21-64 goldmane-768f4c5c69-c79h6 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calif4f35b7ca4d [] [] }} ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.815 [INFO][4343] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.940 [INFO][4358] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" HandleID="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.940 [INFO][4358] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" HandleID="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4770), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-64", "pod":"goldmane-768f4c5c69-c79h6", "timestamp":"2025-08-13 01:03:17.940030577 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.941 [INFO][4358] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.942 [INFO][4358] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.942 [INFO][4358] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.969 [INFO][4358] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.977 [INFO][4358] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.984 [INFO][4358] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.989 [INFO][4358] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.995 [INFO][4358] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.996 [INFO][4358] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:17.998 [INFO][4358] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827 Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:18.005 [INFO][4358] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:18.017 [INFO][4358] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.131/26] block=192.168.42.128/26 handle="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:18.017 [INFO][4358] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.131/26] handle="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" host="ip-172-31-21-64" Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:18.017 [INFO][4358] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:18.062370 env[1719]: 2025-08-13 01:03:18.017 [INFO][4358] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.131/26] IPv6=[] ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" HandleID="k8s-pod-network.eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:18.064218 env[1719]: 2025-08-13 01:03:18.021 [INFO][4343] cni-plugin/k8s.go 418: Populated endpoint ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"9396d154-0d8d-4429-8f65-71c1ff716fd2", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"goldmane-768f4c5c69-c79h6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.42.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif4f35b7ca4d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:18.064218 env[1719]: 2025-08-13 01:03:18.021 [INFO][4343] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.131/32] ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:18.064218 env[1719]: 2025-08-13 01:03:18.021 [INFO][4343] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif4f35b7ca4d ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:18.064218 env[1719]: 2025-08-13 01:03:18.031 [INFO][4343] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:18.064218 env[1719]: 2025-08-13 01:03:18.032 [INFO][4343] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"9396d154-0d8d-4429-8f65-71c1ff716fd2", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827", Pod:"goldmane-768f4c5c69-c79h6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.42.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif4f35b7ca4d", MAC:"da:5c:87:5d:95:7e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:18.064218 env[1719]: 2025-08-13 01:03:18.054 [INFO][4343] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827" Namespace="calico-system" Pod="goldmane-768f4c5c69-c79h6" WorkloadEndpoint="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:18.093854 env[1719]: time="2025-08-13T01:03:18.092515857Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:18.093854 env[1719]: time="2025-08-13T01:03:18.092633791Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:18.093854 env[1719]: time="2025-08-13T01:03:18.092668385Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:18.093854 env[1719]: time="2025-08-13T01:03:18.093104263Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827 pid=4387 runtime=io.containerd.runc.v2 Aug 13 01:03:18.162230 systemd[1]: Started cri-containerd-eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827.scope. Aug 13 01:03:18.181193 systemd-networkd[1444]: calic9e70e15cf3: Link UP Aug 13 01:03:18.190151 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic9e70e15cf3: link becomes ready Aug 13 01:03:18.190676 systemd-networkd[1444]: calic9e70e15cf3: Gained carrier Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:17.816 [INFO][4334] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0 calico-apiserver-b8cf85895- calico-apiserver 9cb56d00-67ce-4ec5-9c03-0745d269cbf6 969 0 2025-08-13 01:02:46 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:b8cf85895 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-21-64 calico-apiserver-b8cf85895-75kjb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic9e70e15cf3 [] [] }} ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:17.816 [INFO][4334] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:17.968 [INFO][4363] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" HandleID="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:17.969 [INFO][4363] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" HandleID="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00030a4c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-21-64", "pod":"calico-apiserver-b8cf85895-75kjb", "timestamp":"2025-08-13 01:03:17.968001951 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:17.969 [INFO][4363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.017 [INFO][4363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.017 [INFO][4363] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.058 [INFO][4363] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.078 [INFO][4363] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.091 [INFO][4363] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.104 [INFO][4363] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.115 [INFO][4363] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.116 [INFO][4363] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.122 [INFO][4363] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654 Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.131 [INFO][4363] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.155 [INFO][4363] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.132/26] block=192.168.42.128/26 handle="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.155 [INFO][4363] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.132/26] handle="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" host="ip-172-31-21-64" Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.155 [INFO][4363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:18.224029 env[1719]: 2025-08-13 01:03:18.155 [INFO][4363] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.132/26] IPv6=[] ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" HandleID="k8s-pod-network.12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:18.225103 env[1719]: 2025-08-13 01:03:18.161 [INFO][4334] cni-plugin/k8s.go 418: Populated endpoint ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9cb56d00-67ce-4ec5-9c03-0745d269cbf6", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"calico-apiserver-b8cf85895-75kjb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic9e70e15cf3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:18.225103 env[1719]: 2025-08-13 01:03:18.161 [INFO][4334] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.132/32] ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:18.225103 env[1719]: 2025-08-13 01:03:18.161 [INFO][4334] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic9e70e15cf3 ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:18.225103 env[1719]: 2025-08-13 01:03:18.192 [INFO][4334] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:18.225103 env[1719]: 2025-08-13 01:03:18.192 [INFO][4334] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9cb56d00-67ce-4ec5-9c03-0745d269cbf6", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654", Pod:"calico-apiserver-b8cf85895-75kjb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic9e70e15cf3", MAC:"8e:27:29:8b:e7:40", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:18.225103 env[1719]: 2025-08-13 01:03:18.221 [INFO][4334] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-75kjb" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:18.251783 kernel: kauditd_printk_skb: 773 callbacks suppressed Aug 13 01:03:18.256711 kernel: audit: type=1400 audit(1755046998.241:1228): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.256814 kernel: audit: type=1400 audit(1755046998.241:1229): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.256855 kernel: audit: type=1400 audit(1755046998.241:1230): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.264030 env[1719]: time="2025-08-13T01:03:18.261637221Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:18.264030 env[1719]: time="2025-08-13T01:03:18.261736360Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:18.264030 env[1719]: time="2025-08-13T01:03:18.261767378Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:18.264030 env[1719]: time="2025-08-13T01:03:18.261959815Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654 pid=4429 runtime=io.containerd.runc.v2 Aug 13 01:03:18.264292 kernel: audit: type=1400 audit(1755046998.241:1231): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.270167 kernel: audit: type=1400 audit(1755046998.241:1232): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.276430 kernel: audit: type=1400 audit(1755046998.241:1233): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.288542 kernel: audit: type=1400 audit(1755046998.241:1234): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.300135 kernel: audit: type=1400 audit(1755046998.241:1235): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.310134 kernel: audit: type=1400 audit(1755046998.241:1236): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.318239 kernel: audit: type=1400 audit(1755046998.245:1237): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.312393 systemd[1]: Started cri-containerd-12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654.scope. Aug 13 01:03:18.245000 audit: BPF prog-id=182 op=LOAD Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4387 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613332356365336236653962303332343939396539333435653239 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4387 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613332356365336236653962303332343939396539333435653239 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.245000 audit: BPF prog-id=183 op=LOAD Aug 13 01:03:18.245000 audit[4397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002136a0 items=0 ppid=4387 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613332356365336236653962303332343939396539333435653239 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit: BPF prog-id=184 op=LOAD Aug 13 01:03:18.249000 audit[4397]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002136e8 items=0 ppid=4387 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613332356365336236653962303332343939396539333435653239 Aug 13 01:03:18.249000 audit: BPF prog-id=184 op=UNLOAD Aug 13 01:03:18.249000 audit: BPF prog-id=183 op=UNLOAD Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.249000 audit: BPF prog-id=185 op=LOAD Aug 13 01:03:18.249000 audit[4397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000213af8 items=0 ppid=4387 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613332356365336236653962303332343939396539333435653239 Aug 13 01:03:18.378000 audit[4450]: NETFILTER_CFG table=filter:106 family=2 entries=48 op=nft_register_chain pid=4450 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:18.378000 audit[4450]: SYSCALL arch=c000003e syscall=46 success=yes exit=26368 a0=3 a1=7ffd17fcf010 a2=0 a3=7ffd17fceffc items=0 ppid=3939 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.378000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.426000 audit: BPF prog-id=186 op=LOAD Aug 13 01:03:18.430000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.430000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4429 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653133656232613031613632633236663631386235383361656534 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4429 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653133656232613031613632633236663631386235383361656534 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.437000 audit: BPF prog-id=187 op=LOAD Aug 13 01:03:18.437000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ccbf0 items=0 ppid=4429 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653133656232613031613632633236663631386235383361656534 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.443000 audit: BPF prog-id=188 op=LOAD Aug 13 01:03:18.443000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ccc38 items=0 ppid=4429 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653133656232613031613632633236663631386235383361656534 Aug 13 01:03:18.444000 audit: BPF prog-id=188 op=UNLOAD Aug 13 01:03:18.444000 audit: BPF prog-id=187 op=UNLOAD Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:18.444000 audit: BPF prog-id=189 op=LOAD Aug 13 01:03:18.444000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cd048 items=0 ppid=4429 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653133656232613031613632633236663631386235383361656534 Aug 13 01:03:18.468567 env[1719]: time="2025-08-13T01:03:18.468510340Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-c79h6,Uid:9396d154-0d8d-4429-8f65-71c1ff716fd2,Namespace:calico-system,Attempt:1,} returns sandbox id \"eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827\"" Aug 13 01:03:18.488000 audit[4466]: NETFILTER_CFG table=filter:107 family=2 entries=58 op=nft_register_chain pid=4466 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:18.488000 audit[4466]: SYSCALL arch=c000003e syscall=46 success=yes exit=30584 a0=3 a1=7ffc526eafc0 a2=0 a3=7ffc526eafac items=0 ppid=3939 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:18.488000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:18.532197 env[1719]: time="2025-08-13T01:03:18.532138966Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-75kjb,Uid:9cb56d00-67ce-4ec5-9c03-0745d269cbf6,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654\"" Aug 13 01:03:18.692432 systemd-networkd[1444]: cali23aaad86063: Gained IPv6LL Aug 13 01:03:18.960089 systemd[1]: run-containerd-runc-k8s.io-12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654-runc.kXMqOH.mount: Deactivated successfully. Aug 13 01:03:19.139779 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount554887033.mount: Deactivated successfully. Aug 13 01:03:19.157993 env[1719]: time="2025-08-13T01:03:19.157938854Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:19.160072 env[1719]: time="2025-08-13T01:03:19.160028307Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:19.161886 env[1719]: time="2025-08-13T01:03:19.161856843Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:19.163698 env[1719]: time="2025-08-13T01:03:19.163656728Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:19.164438 env[1719]: time="2025-08-13T01:03:19.164401987Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Aug 13 01:03:19.165875 env[1719]: time="2025-08-13T01:03:19.165851061Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Aug 13 01:03:19.170372 env[1719]: time="2025-08-13T01:03:19.170318590Z" level=info msg="CreateContainer within sandbox \"8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Aug 13 01:03:19.201784 env[1719]: time="2025-08-13T01:03:19.201730711Z" level=info msg="CreateContainer within sandbox \"8fd03dd0432e2b54d53017167500b1cf858743a3a11b3ddafec887ce98e2f6f2\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"e8f917da4163eb774aa67705f0b626c932a2434f2852e560ae689cb49b53c247\"" Aug 13 01:03:19.202506 env[1719]: time="2025-08-13T01:03:19.202480881Z" level=info msg="StartContainer for \"e8f917da4163eb774aa67705f0b626c932a2434f2852e560ae689cb49b53c247\"" Aug 13 01:03:19.203751 systemd-networkd[1444]: calif4f35b7ca4d: Gained IPv6LL Aug 13 01:03:19.231663 systemd[1]: Started cri-containerd-e8f917da4163eb774aa67705f0b626c932a2434f2852e560ae689cb49b53c247.scope. Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.248000 audit: BPF prog-id=190 op=LOAD Aug 13 01:03:19.249000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.249000 audit[4482]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=4018 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538663931376461343136336562373734616136373730356630623632 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=4018 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538663931376461343136336562373734616136373730356630623632 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit: BPF prog-id=191 op=LOAD Aug 13 01:03:19.250000 audit[4482]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000349cf0 items=0 ppid=4018 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538663931376461343136336562373734616136373730356630623632 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit: BPF prog-id=192 op=LOAD Aug 13 01:03:19.250000 audit[4482]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000349d38 items=0 ppid=4018 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538663931376461343136336562373734616136373730356630623632 Aug 13 01:03:19.250000 audit: BPF prog-id=192 op=UNLOAD Aug 13 01:03:19.250000 audit: BPF prog-id=191 op=UNLOAD Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { perfmon } for pid=4482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit[4482]: AVC avc: denied { bpf } for pid=4482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.250000 audit: BPF prog-id=193 op=LOAD Aug 13 01:03:19.250000 audit[4482]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003d6148 items=0 ppid=4018 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538663931376461343136336562373734616136373730356630623632 Aug 13 01:03:19.267356 systemd-networkd[1444]: calic9e70e15cf3: Gained IPv6LL Aug 13 01:03:19.293954 env[1719]: time="2025-08-13T01:03:19.293879407Z" level=info msg="StartContainer for \"e8f917da4163eb774aa67705f0b626c932a2434f2852e560ae689cb49b53c247\" returns successfully" Aug 13 01:03:19.353591 env[1719]: time="2025-08-13T01:03:19.353542900Z" level=info msg="StopPodSandbox for \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\"" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.434 [INFO][4522] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.439 [INFO][4522] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" iface="eth0" netns="/var/run/netns/cni-2627b30c-6d45-9226-f7b5-0c439990b0ce" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.439 [INFO][4522] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" iface="eth0" netns="/var/run/netns/cni-2627b30c-6d45-9226-f7b5-0c439990b0ce" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.439 [INFO][4522] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" iface="eth0" netns="/var/run/netns/cni-2627b30c-6d45-9226-f7b5-0c439990b0ce" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.440 [INFO][4522] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.440 [INFO][4522] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.477 [INFO][4529] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.477 [INFO][4529] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.477 [INFO][4529] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.484 [WARNING][4529] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.484 [INFO][4529] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.486 [INFO][4529] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:19.491764 env[1719]: 2025-08-13 01:03:19.489 [INFO][4522] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:19.493813 env[1719]: time="2025-08-13T01:03:19.493766985Z" level=info msg="TearDown network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\" successfully" Aug 13 01:03:19.494031 env[1719]: time="2025-08-13T01:03:19.493998048Z" level=info msg="StopPodSandbox for \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\" returns successfully" Aug 13 01:03:19.494683 env[1719]: time="2025-08-13T01:03:19.494649827Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gdcs4,Uid:4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d,Namespace:kube-system,Attempt:1,}" Aug 13 01:03:19.708872 systemd-networkd[1444]: cali571f516c81a: Link UP Aug 13 01:03:19.710278 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali571f516c81a: link becomes ready Aug 13 01:03:19.709947 systemd-networkd[1444]: cali571f516c81a: Gained carrier Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.604 [INFO][4535] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0 coredns-674b8bbfcf- kube-system 4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d 989 0 2025-08-13 01:02:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-21-64 coredns-674b8bbfcf-gdcs4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali571f516c81a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.605 [INFO][4535] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.637 [INFO][4549] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" HandleID="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.637 [INFO][4549] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" HandleID="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5100), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-21-64", "pod":"coredns-674b8bbfcf-gdcs4", "timestamp":"2025-08-13 01:03:19.637421144 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.637 [INFO][4549] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.637 [INFO][4549] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.637 [INFO][4549] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.646 [INFO][4549] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.661 [INFO][4549] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.670 [INFO][4549] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.673 [INFO][4549] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.676 [INFO][4549] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.677 [INFO][4549] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.678 [INFO][4549] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86 Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.686 [INFO][4549] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.701 [INFO][4549] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.133/26] block=192.168.42.128/26 handle="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.701 [INFO][4549] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.133/26] handle="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" host="ip-172-31-21-64" Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.701 [INFO][4549] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:19.738942 env[1719]: 2025-08-13 01:03:19.701 [INFO][4549] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.133/26] IPv6=[] ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" HandleID="k8s-pod-network.557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.740226 env[1719]: 2025-08-13 01:03:19.703 [INFO][4535] cni-plugin/k8s.go 418: Populated endpoint ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"coredns-674b8bbfcf-gdcs4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali571f516c81a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:19.740226 env[1719]: 2025-08-13 01:03:19.704 [INFO][4535] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.133/32] ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.740226 env[1719]: 2025-08-13 01:03:19.704 [INFO][4535] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali571f516c81a ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.740226 env[1719]: 2025-08-13 01:03:19.707 [INFO][4535] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.740226 env[1719]: 2025-08-13 01:03:19.712 [INFO][4535] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86", Pod:"coredns-674b8bbfcf-gdcs4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali571f516c81a", MAC:"c2:bf:f0:95:26:58", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:19.740226 env[1719]: 2025-08-13 01:03:19.736 [INFO][4535] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86" Namespace="kube-system" Pod="coredns-674b8bbfcf-gdcs4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:19.757869 env[1719]: time="2025-08-13T01:03:19.756410702Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:19.757869 env[1719]: time="2025-08-13T01:03:19.756465317Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:19.758162 env[1719]: time="2025-08-13T01:03:19.756481444Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:19.758162 env[1719]: time="2025-08-13T01:03:19.757106343Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86 pid=4571 runtime=io.containerd.runc.v2 Aug 13 01:03:19.775000 audit[4587]: NETFILTER_CFG table=filter:108 family=2 entries=54 op=nft_register_chain pid=4587 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:19.775000 audit[4587]: SYSCALL arch=c000003e syscall=46 success=yes exit=26116 a0=3 a1=7ffefaafdbc0 a2=0 a3=7ffefaafdbac items=0 ppid=3939 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.775000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:19.801951 systemd[1]: Started cri-containerd-557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86.scope. Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit: BPF prog-id=194 op=LOAD Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4571 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535376337663935333862363630653061306566303835396632373165 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4571 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535376337663935333862363630653061306566303835396632373165 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit: BPF prog-id=195 op=LOAD Aug 13 01:03:19.842000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0001b5d60 items=0 ppid=4571 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535376337663935333862363630653061306566303835396632373165 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit: BPF prog-id=196 op=LOAD Aug 13 01:03:19.842000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0001b5da8 items=0 ppid=4571 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535376337663935333862363630653061306566303835396632373165 Aug 13 01:03:19.842000 audit: BPF prog-id=196 op=UNLOAD Aug 13 01:03:19.842000 audit: BPF prog-id=195 op=UNLOAD Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:19.842000 audit: BPF prog-id=197 op=LOAD Aug 13 01:03:19.842000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c00039c1b8 items=0 ppid=4571 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535376337663935333862363630653061306566303835396632373165 Aug 13 01:03:19.879380 env[1719]: time="2025-08-13T01:03:19.879338287Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gdcs4,Uid:4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d,Namespace:kube-system,Attempt:1,} returns sandbox id \"557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86\"" Aug 13 01:03:19.891888 env[1719]: time="2025-08-13T01:03:19.891845572Z" level=info msg="CreateContainer within sandbox \"557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 01:03:19.921000 audit[4606]: NETFILTER_CFG table=filter:109 family=2 entries=19 op=nft_register_rule pid=4606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:19.921000 audit[4606]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffcc8437290 a2=0 a3=7ffcc843727c items=0 ppid=2710 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.921000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:19.928000 audit[4606]: NETFILTER_CFG table=nat:110 family=2 entries=21 op=nft_register_chain pid=4606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:19.928000 audit[4606]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7ffcc8437290 a2=0 a3=7ffcc843727c items=0 ppid=2710 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:19.928000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:19.960599 systemd[1]: run-containerd-runc-k8s.io-e8f917da4163eb774aa67705f0b626c932a2434f2852e560ae689cb49b53c247-runc.5gaQJj.mount: Deactivated successfully. Aug 13 01:03:19.960706 systemd[1]: run-netns-cni\x2d2627b30c\x2d6d45\x2d9226\x2df7b5\x2d0c439990b0ce.mount: Deactivated successfully. Aug 13 01:03:19.977450 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3689330711.mount: Deactivated successfully. Aug 13 01:03:19.980403 env[1719]: time="2025-08-13T01:03:19.980242302Z" level=info msg="CreateContainer within sandbox \"557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1fd682d036917189d57ba0aea48206ecc8a8876e4c92bd6484ead2bb466d63c6\"" Aug 13 01:03:19.982865 env[1719]: time="2025-08-13T01:03:19.981687553Z" level=info msg="StartContainer for \"1fd682d036917189d57ba0aea48206ecc8a8876e4c92bd6484ead2bb466d63c6\"" Aug 13 01:03:20.019263 systemd[1]: Started cri-containerd-1fd682d036917189d57ba0aea48206ecc8a8876e4c92bd6484ead2bb466d63c6.scope. Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.044000 audit: BPF prog-id=198 op=LOAD Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4571 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643638326430333639313731383964353762613061656134383230 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4571 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643638326430333639313731383964353762613061656134383230 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit: BPF prog-id=199 op=LOAD Aug 13 01:03:20.045000 audit[4615]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001915b0 items=0 ppid=4571 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643638326430333639313731383964353762613061656134383230 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit: BPF prog-id=200 op=LOAD Aug 13 01:03:20.045000 audit[4615]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001915f8 items=0 ppid=4571 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643638326430333639313731383964353762613061656134383230 Aug 13 01:03:20.045000 audit: BPF prog-id=200 op=UNLOAD Aug 13 01:03:20.045000 audit: BPF prog-id=199 op=UNLOAD Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { perfmon } for pid=4615 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit[4615]: AVC avc: denied { bpf } for pid=4615 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:20.045000 audit: BPF prog-id=201 op=LOAD Aug 13 01:03:20.045000 audit[4615]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000191a08 items=0 ppid=4571 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643638326430333639313731383964353762613061656134383230 Aug 13 01:03:20.071903 env[1719]: time="2025-08-13T01:03:20.071841998Z" level=info msg="StartContainer for \"1fd682d036917189d57ba0aea48206ecc8a8876e4c92bd6484ead2bb466d63c6\" returns successfully" Aug 13 01:03:20.357013 env[1719]: time="2025-08-13T01:03:20.356900200Z" level=info msg="StopPodSandbox for \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\"" Aug 13 01:03:20.425000 audit[4625]: AVC avc: denied { getattr } for pid=4625 comm="coredns" path="cgroup:[4026532727]" dev="nsfs" ino=4026532727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c663,c995 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 01:03:20.425000 audit[4625]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a5e8 a2=c0001dab98 a3=0 items=0 ppid=4571 pid=4625 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c663,c995 key=(null) Aug 13 01:03:20.425000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 01:03:20.504986 kubelet[2607]: I0813 01:03:20.503072 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-74bb4495dc-fdn5f" podStartSLOduration=3.030307668 podStartE2EDuration="7.49957054s" podCreationTimestamp="2025-08-13 01:03:13 +0000 UTC" firstStartedPulling="2025-08-13 01:03:14.696444948 +0000 UTC m=+44.520712908" lastFinishedPulling="2025-08-13 01:03:19.165707827 +0000 UTC m=+48.989975780" observedRunningTime="2025-08-13 01:03:19.793265225 +0000 UTC m=+49.617533197" watchObservedRunningTime="2025-08-13 01:03:20.49957054 +0000 UTC m=+50.323838514" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.502 [INFO][4651] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.503 [INFO][4651] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" iface="eth0" netns="/var/run/netns/cni-11c79220-1fd3-b05b-2398-f19d7b387497" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.503 [INFO][4651] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" iface="eth0" netns="/var/run/netns/cni-11c79220-1fd3-b05b-2398-f19d7b387497" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.503 [INFO][4651] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" iface="eth0" netns="/var/run/netns/cni-11c79220-1fd3-b05b-2398-f19d7b387497" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.503 [INFO][4651] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.503 [INFO][4651] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.552 [INFO][4662] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.552 [INFO][4662] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.552 [INFO][4662] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.569 [WARNING][4662] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.569 [INFO][4662] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.572 [INFO][4662] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:20.578468 env[1719]: 2025-08-13 01:03:20.575 [INFO][4651] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:20.579741 env[1719]: time="2025-08-13T01:03:20.579697211Z" level=info msg="TearDown network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\" successfully" Aug 13 01:03:20.579889 env[1719]: time="2025-08-13T01:03:20.579865935Z" level=info msg="StopPodSandbox for \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\" returns successfully" Aug 13 01:03:20.580924 env[1719]: time="2025-08-13T01:03:20.580891146Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-9pggm,Uid:9bff5897-b20d-423c-9873-a6298df70078,Namespace:calico-apiserver,Attempt:1,}" Aug 13 01:03:20.864000 audit[4696]: NETFILTER_CFG table=filter:111 family=2 entries=18 op=nft_register_rule pid=4696 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:20.864000 audit[4696]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd5a2a7ad0 a2=0 a3=7ffd5a2a7abc items=0 ppid=2710 pid=4696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.864000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:20.876317 systemd-networkd[1444]: cali08eb26b42ac: Link UP Aug 13 01:03:20.876000 audit[4696]: NETFILTER_CFG table=nat:112 family=2 entries=16 op=nft_register_rule pid=4696 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:20.882195 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:03:20.882315 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali08eb26b42ac: link becomes ready Aug 13 01:03:20.876000 audit[4696]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffd5a2a7ad0 a2=0 a3=0 items=0 ppid=2710 pid=4696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:20.881462 systemd-networkd[1444]: cali08eb26b42ac: Gained carrier Aug 13 01:03:20.900441 kubelet[2607]: I0813 01:03:20.900038 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-gdcs4" podStartSLOduration=45.900012205 podStartE2EDuration="45.900012205s" podCreationTimestamp="2025-08-13 01:02:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:03:20.825921267 +0000 UTC m=+50.650189239" watchObservedRunningTime="2025-08-13 01:03:20.900012205 +0000 UTC m=+50.724280158" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.665 [INFO][4670] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0 calico-apiserver-b8cf85895- calico-apiserver 9bff5897-b20d-423c-9873-a6298df70078 1005 0 2025-08-13 01:02:46 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:b8cf85895 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-21-64 calico-apiserver-b8cf85895-9pggm eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali08eb26b42ac [] [] }} ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.666 [INFO][4670] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.760 [INFO][4687] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" HandleID="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.762 [INFO][4687] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" HandleID="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025a170), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-21-64", "pod":"calico-apiserver-b8cf85895-9pggm", "timestamp":"2025-08-13 01:03:20.760138188 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.764 [INFO][4687] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.764 [INFO][4687] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.765 [INFO][4687] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.820 [INFO][4687] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.831 [INFO][4687] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.840 [INFO][4687] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.843 [INFO][4687] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.847 [INFO][4687] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.847 [INFO][4687] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.849 [INFO][4687] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870 Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.855 [INFO][4687] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.868 [INFO][4687] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.134/26] block=192.168.42.128/26 handle="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.868 [INFO][4687] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.134/26] handle="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" host="ip-172-31-21-64" Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.868 [INFO][4687] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:20.917078 env[1719]: 2025-08-13 01:03:20.868 [INFO][4687] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.134/26] IPv6=[] ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" HandleID="k8s-pod-network.13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.918142 env[1719]: 2025-08-13 01:03:20.872 [INFO][4670] cni-plugin/k8s.go 418: Populated endpoint ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9bff5897-b20d-423c-9873-a6298df70078", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"calico-apiserver-b8cf85895-9pggm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali08eb26b42ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:20.918142 env[1719]: 2025-08-13 01:03:20.872 [INFO][4670] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.134/32] ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.918142 env[1719]: 2025-08-13 01:03:20.872 [INFO][4670] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali08eb26b42ac ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.918142 env[1719]: 2025-08-13 01:03:20.883 [INFO][4670] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.918142 env[1719]: 2025-08-13 01:03:20.883 [INFO][4670] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9bff5897-b20d-423c-9873-a6298df70078", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870", Pod:"calico-apiserver-b8cf85895-9pggm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali08eb26b42ac", MAC:"26:90:33:a7:55:16", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:20.918142 env[1719]: 2025-08-13 01:03:20.902 [INFO][4670] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870" Namespace="calico-apiserver" Pod="calico-apiserver-b8cf85895-9pggm" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:20.946000 audit[4707]: NETFILTER_CFG table=filter:113 family=2 entries=53 op=nft_register_chain pid=4707 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:20.946000 audit[4707]: SYSCALL arch=c000003e syscall=46 success=yes exit=26640 a0=3 a1=7ffdaa950210 a2=0 a3=7ffdaa9501fc items=0 ppid=3939 pid=4707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.946000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:20.966336 systemd[1]: run-containerd-runc-k8s.io-1fd682d036917189d57ba0aea48206ecc8a8876e4c92bd6484ead2bb466d63c6-runc.ChC1Ua.mount: Deactivated successfully. Aug 13 01:03:20.966563 systemd[1]: run-netns-cni\x2d11c79220\x2d1fd3\x2db05b\x2d2398\x2df19d7b387497.mount: Deactivated successfully. Aug 13 01:03:20.970654 env[1719]: time="2025-08-13T01:03:20.970562468Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:20.970654 env[1719]: time="2025-08-13T01:03:20.970628040Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:20.970891 env[1719]: time="2025-08-13T01:03:20.970860580Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:20.971296 env[1719]: time="2025-08-13T01:03:20.971255385Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870 pid=4714 runtime=io.containerd.runc.v2 Aug 13 01:03:21.006218 systemd[1]: Started cri-containerd-13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870.scope. Aug 13 01:03:21.010421 systemd[1]: run-containerd-runc-k8s.io-13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870-runc.jSt4xp.mount: Deactivated successfully. Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.042000 audit: BPF prog-id=202 op=LOAD Aug 13 01:03:21.043000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.043000 audit[4723]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4714 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663163323530366535336662666332356632343861613265326266 Aug 13 01:03:21.043000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.043000 audit[4723]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4714 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663163323530366535336662666332356632343861613265326266 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit: BPF prog-id=203 op=LOAD Aug 13 01:03:21.044000 audit[4723]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c07b0 items=0 ppid=4714 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663163323530366535336662666332356632343861613265326266 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit: BPF prog-id=204 op=LOAD Aug 13 01:03:21.044000 audit[4723]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c07f8 items=0 ppid=4714 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663163323530366535336662666332356632343861613265326266 Aug 13 01:03:21.044000 audit: BPF prog-id=204 op=UNLOAD Aug 13 01:03:21.044000 audit: BPF prog-id=203 op=UNLOAD Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { perfmon } for pid=4723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit[4723]: AVC avc: denied { bpf } for pid=4723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.044000 audit: BPF prog-id=205 op=LOAD Aug 13 01:03:21.044000 audit[4723]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c0c08 items=0 ppid=4714 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663163323530366535336662666332356632343861613265326266 Aug 13 01:03:21.095017 env[1719]: time="2025-08-13T01:03:21.094959978Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-b8cf85895-9pggm,Uid:9bff5897-b20d-423c-9873-a6298df70078,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870\"" Aug 13 01:03:21.173913 env[1719]: time="2025-08-13T01:03:21.172169185Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:21.176944 env[1719]: time="2025-08-13T01:03:21.176895961Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:21.179594 env[1719]: time="2025-08-13T01:03:21.179559198Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:21.182169 env[1719]: time="2025-08-13T01:03:21.182127316Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:21.182713 env[1719]: time="2025-08-13T01:03:21.182678763Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Aug 13 01:03:21.184053 env[1719]: time="2025-08-13T01:03:21.184007691Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Aug 13 01:03:21.191359 env[1719]: time="2025-08-13T01:03:21.191319139Z" level=info msg="CreateContainer within sandbox \"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Aug 13 01:03:21.221602 env[1719]: time="2025-08-13T01:03:21.221540554Z" level=info msg="CreateContainer within sandbox \"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"a8027a05b17327be8372797eda0dda69e47d48cfcaa8ddf9312fc53a14c3e6df\"" Aug 13 01:03:21.222394 env[1719]: time="2025-08-13T01:03:21.222368838Z" level=info msg="StartContainer for \"a8027a05b17327be8372797eda0dda69e47d48cfcaa8ddf9312fc53a14c3e6df\"" Aug 13 01:03:21.243562 systemd[1]: Started cri-containerd-a8027a05b17327be8372797eda0dda69e47d48cfcaa8ddf9312fc53a14c3e6df.scope. Aug 13 01:03:21.300000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.300000 audit[4755]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f4558c31c28 items=0 ppid=4255 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138303237613035623137333237626538333732373937656461306464 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.301000 audit: BPF prog-id=206 op=LOAD Aug 13 01:03:21.301000 audit[4755]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001bee88 items=0 ppid=4255 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138303237613035623137333237626538333732373937656461306464 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.302000 audit: BPF prog-id=207 op=LOAD Aug 13 01:03:21.302000 audit[4755]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001beed8 items=0 ppid=4255 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138303237613035623137333237626538333732373937656461306464 Aug 13 01:03:21.303000 audit: BPF prog-id=207 op=UNLOAD Aug 13 01:03:21.303000 audit: BPF prog-id=206 op=UNLOAD Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:21.303000 audit: BPF prog-id=208 op=LOAD Aug 13 01:03:21.303000 audit[4755]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001bef68 items=0 ppid=4255 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:21.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138303237613035623137333237626538333732373937656461306464 Aug 13 01:03:21.325401 env[1719]: time="2025-08-13T01:03:21.325346312Z" level=info msg="StartContainer for \"a8027a05b17327be8372797eda0dda69e47d48cfcaa8ddf9312fc53a14c3e6df\" returns successfully" Aug 13 01:03:21.349040 env[1719]: time="2025-08-13T01:03:21.348989568Z" level=info msg="StopPodSandbox for \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\"" Aug 13 01:03:21.352490 env[1719]: time="2025-08-13T01:03:21.352448834Z" level=info msg="StopPodSandbox for \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\"" Aug 13 01:03:21.571349 systemd-networkd[1444]: cali571f516c81a: Gained IPv6LL Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.494 [INFO][4800] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.494 [INFO][4800] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" iface="eth0" netns="/var/run/netns/cni-a8821d71-cc9b-8ac6-831f-09d1de0102f6" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.496 [INFO][4800] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" iface="eth0" netns="/var/run/netns/cni-a8821d71-cc9b-8ac6-831f-09d1de0102f6" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.496 [INFO][4800] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" iface="eth0" netns="/var/run/netns/cni-a8821d71-cc9b-8ac6-831f-09d1de0102f6" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.496 [INFO][4800] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.496 [INFO][4800] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.569 [INFO][4815] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.570 [INFO][4815] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.570 [INFO][4815] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.590 [WARNING][4815] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.590 [INFO][4815] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.598 [INFO][4815] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:21.611644 env[1719]: 2025-08-13 01:03:21.609 [INFO][4800] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:21.612751 env[1719]: time="2025-08-13T01:03:21.612245843Z" level=info msg="TearDown network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\" successfully" Aug 13 01:03:21.612751 env[1719]: time="2025-08-13T01:03:21.612296870Z" level=info msg="StopPodSandbox for \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\" returns successfully" Aug 13 01:03:21.613137 env[1719]: time="2025-08-13T01:03:21.613076007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zwgd4,Uid:e1bffb21-6109-4213-a3cc-f4b22a0d6c19,Namespace:kube-system,Attempt:1,}" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.501 [INFO][4801] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.501 [INFO][4801] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" iface="eth0" netns="/var/run/netns/cni-28adbe83-9860-f2de-92d5-6684395754f1" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.501 [INFO][4801] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" iface="eth0" netns="/var/run/netns/cni-28adbe83-9860-f2de-92d5-6684395754f1" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.506 [INFO][4801] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" iface="eth0" netns="/var/run/netns/cni-28adbe83-9860-f2de-92d5-6684395754f1" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.506 [INFO][4801] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.506 [INFO][4801] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.597 [INFO][4816] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.598 [INFO][4816] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.610 [INFO][4816] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.629 [WARNING][4816] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.629 [INFO][4816] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.633 [INFO][4816] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:21.638912 env[1719]: 2025-08-13 01:03:21.636 [INFO][4801] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:21.639726 env[1719]: time="2025-08-13T01:03:21.639088970Z" level=info msg="TearDown network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\" successfully" Aug 13 01:03:21.639726 env[1719]: time="2025-08-13T01:03:21.639139966Z" level=info msg="StopPodSandbox for \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\" returns successfully" Aug 13 01:03:21.640011 env[1719]: time="2025-08-13T01:03:21.639974914Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f6464b85b-zj8gj,Uid:08087410-bce6-49a4-acc7-f910830b7746,Namespace:calico-system,Attempt:1,}" Aug 13 01:03:21.928213 systemd-networkd[1444]: cali13c7b545f1b: Link UP Aug 13 01:03:21.939799 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:03:21.939930 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali13c7b545f1b: link becomes ready Aug 13 01:03:21.940199 systemd-networkd[1444]: cali13c7b545f1b: Gained carrier Aug 13 01:03:21.966308 systemd[1]: run-netns-cni\x2da8821d71\x2dcc9b\x2d8ac6\x2d831f\x2d09d1de0102f6.mount: Deactivated successfully. Aug 13 01:03:21.966642 systemd[1]: run-netns-cni\x2d28adbe83\x2d9860\x2df2de\x2d92d5\x2d6684395754f1.mount: Deactivated successfully. Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.718 [INFO][4828] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0 coredns-674b8bbfcf- kube-system e1bffb21-6109-4213-a3cc-f4b22a0d6c19 1022 0 2025-08-13 01:02:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-21-64 coredns-674b8bbfcf-zwgd4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali13c7b545f1b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.718 [INFO][4828] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.781 [INFO][4853] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" HandleID="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.781 [INFO][4853] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" HandleID="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df600), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-21-64", "pod":"coredns-674b8bbfcf-zwgd4", "timestamp":"2025-08-13 01:03:21.780988851 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.783 [INFO][4853] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.783 [INFO][4853] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.783 [INFO][4853] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.805 [INFO][4853] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.821 [INFO][4853] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.834 [INFO][4853] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.869 [INFO][4853] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.873 [INFO][4853] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.873 [INFO][4853] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.881 [INFO][4853] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.893 [INFO][4853] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.907 [INFO][4853] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.135/26] block=192.168.42.128/26 handle="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.907 [INFO][4853] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.135/26] handle="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" host="ip-172-31-21-64" Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.907 [INFO][4853] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:21.986031 env[1719]: 2025-08-13 01:03:21.907 [INFO][4853] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.135/26] IPv6=[] ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" HandleID="k8s-pod-network.ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.987327 env[1719]: 2025-08-13 01:03:21.910 [INFO][4828] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e1bffb21-6109-4213-a3cc-f4b22a0d6c19", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"coredns-674b8bbfcf-zwgd4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13c7b545f1b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:21.987327 env[1719]: 2025-08-13 01:03:21.910 [INFO][4828] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.135/32] ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.987327 env[1719]: 2025-08-13 01:03:21.911 [INFO][4828] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali13c7b545f1b ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.987327 env[1719]: 2025-08-13 01:03:21.941 [INFO][4828] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:21.987327 env[1719]: 2025-08-13 01:03:21.942 [INFO][4828] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e1bffb21-6109-4213-a3cc-f4b22a0d6c19", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f", Pod:"coredns-674b8bbfcf-zwgd4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13c7b545f1b", MAC:"a2:8a:4b:46:e6:50", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:21.987327 env[1719]: 2025-08-13 01:03:21.983 [INFO][4828] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zwgd4" WorkloadEndpoint="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:22.015489 env[1719]: time="2025-08-13T01:03:22.015031962Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:22.015489 env[1719]: time="2025-08-13T01:03:22.015088939Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:22.015489 env[1719]: time="2025-08-13T01:03:22.015102900Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:22.015489 env[1719]: time="2025-08-13T01:03:22.015328727Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f pid=4882 runtime=io.containerd.runc.v2 Aug 13 01:03:22.096444 systemd[1]: run-containerd-runc-k8s.io-ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f-runc.BbfOwh.mount: Deactivated successfully. Aug 13 01:03:22.107388 systemd[1]: Started cri-containerd-ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f.scope. Aug 13 01:03:22.153680 systemd-networkd[1444]: calib75dd1dcbf2: Link UP Aug 13 01:03:22.156163 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib75dd1dcbf2: link becomes ready Aug 13 01:03:22.155843 systemd-networkd[1444]: calib75dd1dcbf2: Gained carrier Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.172000 audit: BPF prog-id=209 op=LOAD Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4882 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383137666630396130333061653565353335323465356364353333 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4882 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383137666630396130333061653565353335323465356364353333 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit: BPF prog-id=210 op=LOAD Aug 13 01:03:22.174000 audit[4891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002402d0 items=0 ppid=4882 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383137666630396130333061653565353335323465356364353333 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit: BPF prog-id=211 op=LOAD Aug 13 01:03:22.174000 audit[4891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000240318 items=0 ppid=4882 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383137666630396130333061653565353335323465356364353333 Aug 13 01:03:22.174000 audit: BPF prog-id=211 op=UNLOAD Aug 13 01:03:22.174000 audit: BPF prog-id=210 op=UNLOAD Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.174000 audit: BPF prog-id=212 op=LOAD Aug 13 01:03:22.174000 audit[4891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000240728 items=0 ppid=4882 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383137666630396130333061653565353335323465356364353333 Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.820 [INFO][4837] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0 calico-kube-controllers-6f6464b85b- calico-system 08087410-bce6-49a4-acc7-f910830b7746 1023 0 2025-08-13 01:02:50 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6f6464b85b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-21-64 calico-kube-controllers-6f6464b85b-zj8gj eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calib75dd1dcbf2 [] [] }} ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.820 [INFO][4837] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.895 [INFO][4861] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" HandleID="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.895 [INFO][4861] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" HandleID="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-64", "pod":"calico-kube-controllers-6f6464b85b-zj8gj", "timestamp":"2025-08-13 01:03:21.89527035 +0000 UTC"}, Hostname:"ip-172-31-21-64", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.895 [INFO][4861] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.917 [INFO][4861] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.918 [INFO][4861] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-64' Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.955 [INFO][4861] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:21.989 [INFO][4861] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.010 [INFO][4861] ipam/ipam.go 511: Trying affinity for 192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.026 [INFO][4861] ipam/ipam.go 158: Attempting to load block cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.044 [INFO][4861] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.42.128/26 host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.044 [INFO][4861] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.42.128/26 handle="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.050 [INFO][4861] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958 Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.065 [INFO][4861] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.42.128/26 handle="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.125 [INFO][4861] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.42.136/26] block=192.168.42.128/26 handle="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.125 [INFO][4861] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.42.136/26] handle="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" host="ip-172-31-21-64" Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.125 [INFO][4861] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:22.206751 env[1719]: 2025-08-13 01:03:22.125 [INFO][4861] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.42.136/26] IPv6=[] ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" HandleID="k8s-pod-network.be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:22.208217 env[1719]: 2025-08-13 01:03:22.130 [INFO][4837] cni-plugin/k8s.go 418: Populated endpoint ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0", GenerateName:"calico-kube-controllers-6f6464b85b-", Namespace:"calico-system", SelfLink:"", UID:"08087410-bce6-49a4-acc7-f910830b7746", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f6464b85b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"", Pod:"calico-kube-controllers-6f6464b85b-zj8gj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.42.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib75dd1dcbf2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:22.208217 env[1719]: 2025-08-13 01:03:22.130 [INFO][4837] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.42.136/32] ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:22.208217 env[1719]: 2025-08-13 01:03:22.130 [INFO][4837] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib75dd1dcbf2 ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:22.208217 env[1719]: 2025-08-13 01:03:22.156 [INFO][4837] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:22.208217 env[1719]: 2025-08-13 01:03:22.156 [INFO][4837] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0", GenerateName:"calico-kube-controllers-6f6464b85b-", Namespace:"calico-system", SelfLink:"", UID:"08087410-bce6-49a4-acc7-f910830b7746", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f6464b85b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958", Pod:"calico-kube-controllers-6f6464b85b-zj8gj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.42.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib75dd1dcbf2", MAC:"12:8f:29:b7:8c:b0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:22.208217 env[1719]: 2025-08-13 01:03:22.204 [INFO][4837] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958" Namespace="calico-system" Pod="calico-kube-controllers-6f6464b85b-zj8gj" WorkloadEndpoint="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:22.232367 env[1719]: time="2025-08-13T01:03:22.232267153Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:03:22.232592 env[1719]: time="2025-08-13T01:03:22.232565953Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:03:22.232731 env[1719]: time="2025-08-13T01:03:22.232709936Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:03:22.233148 env[1719]: time="2025-08-13T01:03:22.233052180Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958 pid=4925 runtime=io.containerd.runc.v2 Aug 13 01:03:22.238000 audit[4912]: NETFILTER_CFG table=filter:114 family=2 entries=15 op=nft_register_rule pid=4912 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:22.254763 systemd[1]: Started cri-containerd-be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958.scope. Aug 13 01:03:22.238000 audit[4912]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe44851260 a2=0 a3=7ffe4485124c items=0 ppid=2710 pid=4912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:22.261000 audit[4912]: NETFILTER_CFG table=nat:115 family=2 entries=37 op=nft_register_chain pid=4912 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:22.261000 audit[4912]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffe44851260 a2=0 a3=7ffe4485124c items=0 ppid=2710 pid=4912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.261000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:22.328737 env[1719]: time="2025-08-13T01:03:22.328684156Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zwgd4,Uid:e1bffb21-6109-4213-a3cc-f4b22a0d6c19,Namespace:kube-system,Attempt:1,} returns sandbox id \"ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f\"" Aug 13 01:03:22.338978 env[1719]: time="2025-08-13T01:03:22.338930982Z" level=info msg="CreateContainer within sandbox \"ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 01:03:22.356000 audit[4963]: NETFILTER_CFG table=filter:116 family=2 entries=80 op=nft_register_chain pid=4963 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:03:22.356000 audit[4963]: SYSCALL arch=c000003e syscall=46 success=yes exit=40584 a0=3 a1=7fffcd4e2550 a2=0 a3=7fffcd4e253c items=0 ppid=3939 pid=4963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.356000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.361000 audit: BPF prog-id=213 op=LOAD Aug 13 01:03:22.362000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.362000 audit[4935]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4925 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336535613661663435363030663833303334346633313636303865 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4925 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336535613661663435363030663833303334346633313636303865 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.363000 audit: BPF prog-id=214 op=LOAD Aug 13 01:03:22.363000 audit[4935]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001dbbd0 items=0 ppid=4925 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336535613661663435363030663833303334346633313636303865 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit: BPF prog-id=215 op=LOAD Aug 13 01:03:22.364000 audit[4935]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dbc18 items=0 ppid=4925 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336535613661663435363030663833303334346633313636303865 Aug 13 01:03:22.364000 audit: BPF prog-id=215 op=UNLOAD Aug 13 01:03:22.364000 audit: BPF prog-id=214 op=UNLOAD Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.364000 audit: BPF prog-id=216 op=LOAD Aug 13 01:03:22.364000 audit[4935]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c0028 items=0 ppid=4925 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336535613661663435363030663833303334346633313636303865 Aug 13 01:03:22.378681 env[1719]: time="2025-08-13T01:03:22.378627179Z" level=info msg="CreateContainer within sandbox \"ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a94da0ccb6d0a0152174569dc4503d6e221899a4a3fe4d1583e1b8f7ca644fa6\"" Aug 13 01:03:22.382191 env[1719]: time="2025-08-13T01:03:22.382143967Z" level=info msg="StartContainer for \"a94da0ccb6d0a0152174569dc4503d6e221899a4a3fe4d1583e1b8f7ca644fa6\"" Aug 13 01:03:22.430489 systemd[1]: Started cri-containerd-a94da0ccb6d0a0152174569dc4503d6e221899a4a3fe4d1583e1b8f7ca644fa6.scope. Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.461000 audit: BPF prog-id=217 op=LOAD Aug 13 01:03:22.467378 systemd-networkd[1444]: cali08eb26b42ac: Gained IPv6LL Aug 13 01:03:22.466000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.466000 audit[4971]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4882 pid=4971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139346461306363623664306130313532313734353639646334353033 Aug 13 01:03:22.466000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.466000 audit[4971]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4882 pid=4971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139346461306363623664306130313532313734353639646334353033 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit: BPF prog-id=218 op=LOAD Aug 13 01:03:22.470000 audit[4971]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028bcb0 items=0 ppid=4882 pid=4971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139346461306363623664306130313532313734353639646334353033 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.470000 audit: BPF prog-id=219 op=LOAD Aug 13 01:03:22.470000 audit[4971]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028bcf8 items=0 ppid=4882 pid=4971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139346461306363623664306130313532313734353639646334353033 Aug 13 01:03:22.470000 audit: BPF prog-id=219 op=UNLOAD Aug 13 01:03:22.470000 audit: BPF prog-id=218 op=UNLOAD Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { perfmon } for pid=4971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit[4971]: AVC avc: denied { bpf } for pid=4971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:22.471000 audit: BPF prog-id=220 op=LOAD Aug 13 01:03:22.471000 audit[4971]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000398108 items=0 ppid=4882 pid=4971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139346461306363623664306130313532313734353639646334353033 Aug 13 01:03:22.475361 env[1719]: time="2025-08-13T01:03:22.472445672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f6464b85b-zj8gj,Uid:08087410-bce6-49a4-acc7-f910830b7746,Namespace:calico-system,Attempt:1,} returns sandbox id \"be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958\"" Aug 13 01:03:22.509531 env[1719]: time="2025-08-13T01:03:22.509448659Z" level=info msg="StartContainer for \"a94da0ccb6d0a0152174569dc4503d6e221899a4a3fe4d1583e1b8f7ca644fa6\" returns successfully" Aug 13 01:03:22.545000 audit[4987]: AVC avc: denied { getattr } for pid=4987 comm="coredns" path="cgroup:[4026532564]" dev="nsfs" ino=4026532564 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c964 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 01:03:22.545000 audit[4987]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0004fe888 a2=c00051b148 a3=0 items=0 ppid=4882 pid=4987 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c964 key=(null) Aug 13 01:03:22.545000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 01:03:22.857671 kubelet[2607]: I0813 01:03:22.857536 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-zwgd4" podStartSLOduration=47.857507949 podStartE2EDuration="47.857507949s" podCreationTimestamp="2025-08-13 01:02:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:03:22.83981557 +0000 UTC m=+52.664083544" watchObservedRunningTime="2025-08-13 01:03:22.857507949 +0000 UTC m=+52.681775931" Aug 13 01:03:22.864000 audit[5007]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=5007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:22.864000 audit[5007]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc2bfa06a0 a2=0 a3=7ffc2bfa068c items=0 ppid=2710 pid=5007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.864000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:22.870000 audit[5007]: NETFILTER_CFG table=nat:118 family=2 entries=46 op=nft_register_rule pid=5007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:22.870000 audit[5007]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffc2bfa06a0 a2=0 a3=7ffc2bfa068c items=0 ppid=2710 pid=5007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:22.870000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:23.171803 systemd-networkd[1444]: cali13c7b545f1b: Gained IPv6LL Aug 13 01:03:23.908000 audit[5009]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=5009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:23.911011 kernel: kauditd_printk_skb: 591 callbacks suppressed Aug 13 01:03:23.911152 kernel: audit: type=1325 audit(1755047003.908:1411): table=filter:119 family=2 entries=12 op=nft_register_rule pid=5009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:23.908000 audit[5009]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffef9e04ed0 a2=0 a3=7ffef9e04ebc items=0 ppid=2710 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:23.931249 kernel: audit: type=1300 audit(1755047003.908:1411): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffef9e04ed0 a2=0 a3=7ffef9e04ebc items=0 ppid=2710 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:23.931359 kernel: audit: type=1327 audit(1755047003.908:1411): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:23.908000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:24.011000 audit[5009]: NETFILTER_CFG table=nat:120 family=2 entries=58 op=nft_register_chain pid=5009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:24.011000 audit[5009]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffef9e04ed0 a2=0 a3=7ffef9e04ebc items=0 ppid=2710 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:24.021418 kernel: audit: type=1325 audit(1755047004.011:1412): table=nat:120 family=2 entries=58 op=nft_register_chain pid=5009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:24.021552 kernel: audit: type=1300 audit(1755047004.011:1412): arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffef9e04ed0 a2=0 a3=7ffef9e04ebc items=0 ppid=2710 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:24.025246 kernel: audit: type=1327 audit(1755047004.011:1412): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:24.011000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:24.069176 systemd-networkd[1444]: calib75dd1dcbf2: Gained IPv6LL Aug 13 01:03:24.251698 systemd[1]: Started sshd@7-172.31.21.64:22-147.75.109.163:58278.service. Aug 13 01:03:24.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.64:22-147.75.109.163:58278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:24.260335 kernel: audit: type=1130 audit(1755047004.252:1413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.64:22-147.75.109.163:58278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:24.519436 kernel: audit: type=1101 audit(1755047004.513:1414): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:24.513000 audit[5015]: USER_ACCT pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:24.521053 sshd[5015]: Accepted publickey for core from 147.75.109.163 port 58278 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:24.525263 sshd[5015]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:24.520000 audit[5015]: CRED_ACQ pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:24.531157 kernel: audit: type=1103 audit(1755047004.520:1415): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:24.541266 kernel: audit: type=1006 audit(1755047004.520:1416): pid=5015 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Aug 13 01:03:24.520000 audit[5015]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1e987950 a2=3 a3=0 items=0 ppid=1 pid=5015 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:24.520000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:24.551226 systemd[1]: Started session-8.scope. Aug 13 01:03:24.552265 systemd-logind[1711]: New session 8 of user core. Aug 13 01:03:24.563000 audit[5015]: USER_START pid=5015 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:24.565000 audit[5017]: CRED_ACQ pid=5017 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:25.997000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:25.997000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c005610ff0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:03:25.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:03:26.009000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:26.009000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c007222000 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:03:26.009000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:03:26.011000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:26.011000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00a5e5320 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:03:26.011000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:03:26.033000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:26.033000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0072221e0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:03:26.033000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:03:26.053000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:26.053000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d4f880 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:03:26.053000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:26.053000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:26.053000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022b03c0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:03:26.053000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:26.105000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:26.105000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00573eff0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:03:26.105000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:03:26.105000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:26.105000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00a5e5ee0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:03:26.105000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:03:26.251431 sshd[5015]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:26.256000 audit[5015]: USER_END pid=5015 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:26.257000 audit[5015]: CRED_DISP pid=5015 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:26.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.64:22-147.75.109.163:58278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:26.259398 systemd[1]: sshd@7-172.31.21.64:22-147.75.109.163:58278.service: Deactivated successfully. Aug 13 01:03:26.260547 systemd[1]: session-8.scope: Deactivated successfully. Aug 13 01:03:26.265052 systemd-logind[1711]: Session 8 logged out. Waiting for processes to exit. Aug 13 01:03:26.267337 systemd-logind[1711]: Removed session 8. Aug 13 01:03:26.440565 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2734630689.mount: Deactivated successfully. Aug 13 01:03:27.376573 env[1719]: time="2025-08-13T01:03:27.376510608Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:27.381708 env[1719]: time="2025-08-13T01:03:27.381662010Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:27.384892 env[1719]: time="2025-08-13T01:03:27.384848908Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:27.387992 env[1719]: time="2025-08-13T01:03:27.387951368Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:27.389025 env[1719]: time="2025-08-13T01:03:27.388835146Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Aug 13 01:03:27.439066 env[1719]: time="2025-08-13T01:03:27.438956283Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 01:03:27.651901 env[1719]: time="2025-08-13T01:03:27.651483235Z" level=info msg="CreateContainer within sandbox \"eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Aug 13 01:03:27.684623 env[1719]: time="2025-08-13T01:03:27.684569426Z" level=info msg="CreateContainer within sandbox \"eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4\"" Aug 13 01:03:27.687386 env[1719]: time="2025-08-13T01:03:27.687275882Z" level=info msg="StartContainer for \"3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4\"" Aug 13 01:03:27.750929 systemd[1]: run-containerd-runc-k8s.io-3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4-runc.tBarsP.mount: Deactivated successfully. Aug 13 01:03:27.759286 systemd[1]: Started cri-containerd-3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4.scope. Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.791000 audit: BPF prog-id=221 op=LOAD Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4387 pid=5044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:27.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364633164326332363164653939653461356666313862363036333964 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4387 pid=5044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:27.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364633164326332363164653939653461356666313862363036333964 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit: BPF prog-id=222 op=LOAD Aug 13 01:03:27.792000 audit[5044]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000991e0 items=0 ppid=4387 pid=5044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:27.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364633164326332363164653939653461356666313862363036333964 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.792000 audit: BPF prog-id=223 op=LOAD Aug 13 01:03:27.792000 audit[5044]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000099228 items=0 ppid=4387 pid=5044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:27.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364633164326332363164653939653461356666313862363036333964 Aug 13 01:03:27.792000 audit: BPF prog-id=223 op=UNLOAD Aug 13 01:03:27.792000 audit: BPF prog-id=222 op=UNLOAD Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { perfmon } for pid=5044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit[5044]: AVC avc: denied { bpf } for pid=5044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:27.793000 audit: BPF prog-id=224 op=LOAD Aug 13 01:03:27.793000 audit[5044]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000099638 items=0 ppid=4387 pid=5044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:27.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364633164326332363164653939653461356666313862363036333964 Aug 13 01:03:27.848890 env[1719]: time="2025-08-13T01:03:27.848854915Z" level=info msg="StartContainer for \"3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4\" returns successfully" Aug 13 01:03:28.159000 audit[5075]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=5075 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:28.159000 audit[5075]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffc4d97fd0 a2=0 a3=7fffc4d97fbc items=0 ppid=2710 pid=5075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:28.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:28.163000 audit[5075]: NETFILTER_CFG table=nat:122 family=2 entries=22 op=nft_register_rule pid=5075 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:28.163000 audit[5075]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fffc4d97fd0 a2=0 a3=7fffc4d97fbc items=0 ppid=2710 pid=5075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:28.163000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:29.045661 systemd[1]: run-containerd-runc-k8s.io-3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4-runc.g1d323.mount: Deactivated successfully. Aug 13 01:03:30.035179 systemd[1]: run-containerd-runc-k8s.io-3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4-runc.AH42C6.mount: Deactivated successfully. Aug 13 01:03:30.202012 kubelet[2607]: I0813 01:03:30.192614 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-c79h6" podStartSLOduration=32.239220076 podStartE2EDuration="41.182316684s" podCreationTimestamp="2025-08-13 01:02:49 +0000 UTC" firstStartedPulling="2025-08-13 01:03:18.47340131 +0000 UTC m=+48.297669267" lastFinishedPulling="2025-08-13 01:03:27.416497872 +0000 UTC m=+57.240765875" observedRunningTime="2025-08-13 01:03:28.138820252 +0000 UTC m=+57.963088224" watchObservedRunningTime="2025-08-13 01:03:30.182316684 +0000 UTC m=+60.006584659" Aug 13 01:03:30.254000 audit[5116]: NETFILTER_CFG table=filter:123 family=2 entries=11 op=nft_register_rule pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:30.256013 kernel: kauditd_printk_skb: 94 callbacks suppressed Aug 13 01:03:30.256236 kernel: audit: type=1325 audit(1755047010.254:1450): table=filter:123 family=2 entries=11 op=nft_register_rule pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:30.268278 kernel: audit: type=1300 audit(1755047010.254:1450): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffdad137b70 a2=0 a3=7ffdad137b5c items=0 ppid=2710 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:30.254000 audit[5116]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffdad137b70 a2=0 a3=7ffdad137b5c items=0 ppid=2710 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:30.272303 kernel: audit: type=1327 audit(1755047010.254:1450): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:30.254000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:30.274000 audit[5116]: NETFILTER_CFG table=nat:124 family=2 entries=29 op=nft_register_chain pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:30.279295 kernel: audit: type=1325 audit(1755047010.274:1451): table=nat:124 family=2 entries=29 op=nft_register_chain pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:30.274000 audit[5116]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffdad137b70 a2=0 a3=7ffdad137b5c items=0 ppid=2710 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:30.289983 kernel: audit: type=1300 audit(1755047010.274:1451): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffdad137b70 a2=0 a3=7ffdad137b5c items=0 ppid=2710 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:30.274000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:30.296489 kernel: audit: type=1327 audit(1755047010.274:1451): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:30.726164 env[1719]: time="2025-08-13T01:03:30.725637933Z" level=info msg="StopPodSandbox for \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\"" Aug 13 01:03:31.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.64:22-147.75.109.163:48506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:31.360769 kernel: audit: type=1130 audit(1755047011.346:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.64:22-147.75.109.163:48506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:31.346081 systemd[1]: Started sshd@8-172.31.21.64:22-147.75.109.163:48506.service. Aug 13 01:03:32.483396 env[1719]: time="2025-08-13T01:03:32.483143159Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:32.490371 env[1719]: time="2025-08-13T01:03:32.490334231Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:32.496905 env[1719]: time="2025-08-13T01:03:32.496839433Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:32.502267 env[1719]: time="2025-08-13T01:03:32.502093719Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:32.502717 env[1719]: time="2025-08-13T01:03:32.502561205Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Aug 13 01:03:32.519000 audit[5135]: USER_ACCT pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:32.529788 kernel: audit: type=1101 audit(1755047012.519:1453): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:32.529863 sshd[5135]: Accepted publickey for core from 147.75.109.163 port 48506 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:32.528000 audit[5135]: CRED_ACQ pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:32.530833 sshd[5135]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:32.544423 kernel: audit: type=1103 audit(1755047012.528:1454): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:32.544509 kernel: audit: type=1006 audit(1755047012.528:1455): pid=5135 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Aug 13 01:03:32.528000 audit[5135]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4788fff0 a2=3 a3=0 items=0 ppid=1 pid=5135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:32.528000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:32.566086 systemd-logind[1711]: New session 9 of user core. Aug 13 01:03:32.567139 systemd[1]: Started session-9.scope. Aug 13 01:03:32.576000 audit[5135]: USER_START pid=5135 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:32.578000 audit[5142]: CRED_ACQ pid=5142 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:32.585511 env[1719]: time="2025-08-13T01:03:32.585390442Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 01:03:32.654998 env[1719]: time="2025-08-13T01:03:32.654944599Z" level=info msg="CreateContainer within sandbox \"12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 01:03:32.685635 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3555779654.mount: Deactivated successfully. Aug 13 01:03:32.693233 env[1719]: time="2025-08-13T01:03:32.693175440Z" level=info msg="CreateContainer within sandbox \"12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"86641dc1dc5a80f1d41cfb269df8f7442c29f491cc430d00c238160c6740dfb7\"" Aug 13 01:03:32.694397 env[1719]: time="2025-08-13T01:03:32.694364556Z" level=info msg="StartContainer for \"86641dc1dc5a80f1d41cfb269df8f7442c29f491cc430d00c238160c6740dfb7\"" Aug 13 01:03:32.744904 systemd[1]: Started cri-containerd-86641dc1dc5a80f1d41cfb269df8f7442c29f491cc430d00c238160c6740dfb7.scope. Aug 13 01:03:32.768090 systemd[1]: run-containerd-runc-k8s.io-86641dc1dc5a80f1d41cfb269df8f7442c29f491cc430d00c238160c6740dfb7-runc.c40bDe.mount: Deactivated successfully. Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.825000 audit: BPF prog-id=225 op=LOAD Aug 13 01:03:32.827000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.827000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4429 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:32.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363431646331646335613830663164343163666232363964663866 Aug 13 01:03:32.827000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.827000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4429 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:32.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363431646331646335613830663164343163666232363964663866 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.830000 audit: BPF prog-id=226 op=LOAD Aug 13 01:03:32.830000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001dbc40 items=0 ppid=4429 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:32.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363431646331646335613830663164343163666232363964663866 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit: BPF prog-id=227 op=LOAD Aug 13 01:03:32.831000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dbc88 items=0 ppid=4429 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:32.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363431646331646335613830663164343163666232363964663866 Aug 13 01:03:32.831000 audit: BPF prog-id=227 op=UNLOAD Aug 13 01:03:32.831000 audit: BPF prog-id=226 op=UNLOAD Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:32.831000 audit: BPF prog-id=228 op=LOAD Aug 13 01:03:32.831000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a8098 items=0 ppid=4429 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:32.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363431646331646335613830663164343163666232363964663866 Aug 13 01:03:32.921674 env[1719]: time="2025-08-13T01:03:32.914299672Z" level=info msg="StartContainer for \"86641dc1dc5a80f1d41cfb269df8f7442c29f491cc430d00c238160c6740dfb7\" returns successfully" Aug 13 01:03:33.085938 env[1719]: time="2025-08-13T01:03:33.085793762Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:33.090687 env[1719]: time="2025-08-13T01:03:33.090641632Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:33.095816 env[1719]: time="2025-08-13T01:03:33.095772594Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:33.103038 env[1719]: time="2025-08-13T01:03:33.102977373Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:33.106531 env[1719]: time="2025-08-13T01:03:33.104974892Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Aug 13 01:03:33.109985 env[1719]: time="2025-08-13T01:03:33.109951079Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Aug 13 01:03:33.120540 env[1719]: time="2025-08-13T01:03:33.119367660Z" level=info msg="CreateContainer within sandbox \"13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 01:03:33.157976 env[1719]: time="2025-08-13T01:03:33.157233098Z" level=info msg="CreateContainer within sandbox \"13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"848addad9ce925ff830043e5d5e5c9adebd49c30b4f4adde92d90434149e2dcf\"" Aug 13 01:03:33.159479 env[1719]: time="2025-08-13T01:03:33.158952623Z" level=info msg="StartContainer for \"848addad9ce925ff830043e5d5e5c9adebd49c30b4f4adde92d90434149e2dcf\"" Aug 13 01:03:33.203138 systemd[1]: Started cri-containerd-848addad9ce925ff830043e5d5e5c9adebd49c30b4f4adde92d90434149e2dcf.scope. Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:32.543 [WARNING][5129] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86", Pod:"coredns-674b8bbfcf-gdcs4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali571f516c81a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:32.549 [INFO][5129] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:32.549 [INFO][5129] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" iface="eth0" netns="" Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:32.550 [INFO][5129] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:32.550 [INFO][5129] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:33.228 [INFO][5141] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:33.229 [INFO][5141] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:33.230 [INFO][5141] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:33.245 [WARNING][5141] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:33.245 [INFO][5141] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:33.248 [INFO][5141] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:33.254128 env[1719]: 2025-08-13 01:03:33.250 [INFO][5129] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.258749 env[1719]: time="2025-08-13T01:03:33.254839389Z" level=info msg="TearDown network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\" successfully" Aug 13 01:03:33.258749 env[1719]: time="2025-08-13T01:03:33.254890579Z" level=info msg="StopPodSandbox for \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\" returns successfully" Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.263000 audit: BPF prog-id=229 op=LOAD Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4714 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:33.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834386164646164396365393235666638333030343365356435653563 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4714 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:33.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834386164646164396365393235666638333030343365356435653563 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit: BPF prog-id=230 op=LOAD Aug 13 01:03:33.264000 audit[5195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000314790 items=0 ppid=4714 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:33.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834386164646164396365393235666638333030343365356435653563 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit: BPF prog-id=231 op=LOAD Aug 13 01:03:33.264000 audit[5195]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003147d8 items=0 ppid=4714 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:33.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834386164646164396365393235666638333030343365356435653563 Aug 13 01:03:33.264000 audit: BPF prog-id=231 op=UNLOAD Aug 13 01:03:33.264000 audit: BPF prog-id=230 op=UNLOAD Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { perfmon } for pid=5195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit[5195]: AVC avc: denied { bpf } for pid=5195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:33.264000 audit: BPF prog-id=232 op=LOAD Aug 13 01:03:33.264000 audit[5195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000314be8 items=0 ppid=4714 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:33.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834386164646164396365393235666638333030343365356435653563 Aug 13 01:03:33.312849 env[1719]: time="2025-08-13T01:03:33.312797578Z" level=info msg="StartContainer for \"848addad9ce925ff830043e5d5e5c9adebd49c30b4f4adde92d90434149e2dcf\" returns successfully" Aug 13 01:03:33.354645 env[1719]: time="2025-08-13T01:03:33.354533432Z" level=info msg="RemovePodSandbox for \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\"" Aug 13 01:03:33.354645 env[1719]: time="2025-08-13T01:03:33.354583124Z" level=info msg="Forcibly stopping sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\"" Aug 13 01:03:33.607000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.607000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00203ce40 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:03:33.607000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:33.608000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.608000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0020f6ee0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:03:33.608000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:33.610000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.610000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0020f6f00 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:03:33.610000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:33.624000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.624000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0020f6f20 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:03:33.624000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.549 [WARNING][5234] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4bd8a7a8-4b51-4349-ba1c-68c3ace8c22d", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"557c7f9538b660e0a0ef0859f271ef6bc834102e4145e237d8c3ab7e33432b86", Pod:"coredns-674b8bbfcf-gdcs4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali571f516c81a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.550 [INFO][5234] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.550 [INFO][5234] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" iface="eth0" netns="" Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.550 [INFO][5234] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.550 [INFO][5234] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.622 [INFO][5250] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.622 [INFO][5250] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.622 [INFO][5250] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.634 [WARNING][5250] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.635 [INFO][5250] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" HandleID="k8s-pod-network.f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--gdcs4-eth0" Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.638 [INFO][5250] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:33.656476 env[1719]: 2025-08-13 01:03:33.645 [INFO][5234] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc" Aug 13 01:03:33.657813 env[1719]: time="2025-08-13T01:03:33.657767325Z" level=info msg="TearDown network for sandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\" successfully" Aug 13 01:03:33.672956 env[1719]: time="2025-08-13T01:03:33.672917348Z" level=info msg="RemovePodSandbox \"f037ec6a7e04a312bb9ff74b204f9c947ad0bdae7b7a0bc4712e3304a99e82cc\" returns successfully" Aug 13 01:03:33.701096 env[1719]: time="2025-08-13T01:03:33.701043887Z" level=info msg="StopPodSandbox for \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\"" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:33.850 [WARNING][5264] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:33.850 [INFO][5264] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:33.850 [INFO][5264] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" iface="eth0" netns="" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:33.850 [INFO][5264] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:33.850 [INFO][5264] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:34.017 [INFO][5272] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:34.017 [INFO][5272] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:34.017 [INFO][5272] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:34.027 [WARNING][5272] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:34.027 [INFO][5272] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:34.029 [INFO][5272] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:34.038020 env[1719]: 2025-08-13 01:03:34.034 [INFO][5264] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.042249 env[1719]: time="2025-08-13T01:03:34.038371610Z" level=info msg="TearDown network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\" successfully" Aug 13 01:03:34.042249 env[1719]: time="2025-08-13T01:03:34.038423767Z" level=info msg="StopPodSandbox for \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\" returns successfully" Aug 13 01:03:34.156754 env[1719]: time="2025-08-13T01:03:34.156218561Z" level=info msg="RemovePodSandbox for \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\"" Aug 13 01:03:34.156754 env[1719]: time="2025-08-13T01:03:34.156270459Z" level=info msg="Forcibly stopping sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\"" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.280 [WARNING][5287] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" WorkloadEndpoint="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.281 [INFO][5287] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.281 [INFO][5287] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" iface="eth0" netns="" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.281 [INFO][5287] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.281 [INFO][5287] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.404 [INFO][5294] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.404 [INFO][5294] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.404 [INFO][5294] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.453 [WARNING][5294] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.453 [INFO][5294] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" HandleID="k8s-pod-network.f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Workload="ip--172--31--21--64-k8s-whisker--68555bdc65--ww469-eth0" Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.479 [INFO][5294] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:34.492230 env[1719]: 2025-08-13 01:03:34.482 [INFO][5287] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44" Aug 13 01:03:34.500619 env[1719]: time="2025-08-13T01:03:34.492600689Z" level=info msg="TearDown network for sandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\" successfully" Aug 13 01:03:34.535300 env[1719]: time="2025-08-13T01:03:34.534151934Z" level=info msg="RemovePodSandbox \"f92b985d26158ae751341f3d6eaa9719c6c9b0db26a662c38b7e50948d3ade44\" returns successfully" Aug 13 01:03:34.543224 env[1719]: time="2025-08-13T01:03:34.542942153Z" level=info msg="StopPodSandbox for \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\"" Aug 13 01:03:34.606872 sshd[5135]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:34.613000 audit[5135]: USER_END pid=5135 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:34.613000 audit[5135]: CRED_DISP pid=5135 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:34.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.64:22-147.75.109.163:48506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:34.619836 systemd[1]: sshd@8-172.31.21.64:22-147.75.109.163:48506.service: Deactivated successfully. Aug 13 01:03:34.622979 systemd[1]: session-9.scope: Deactivated successfully. Aug 13 01:03:34.626016 systemd-logind[1711]: Session 9 logged out. Waiting for processes to exit. Aug 13 01:03:34.628819 systemd-logind[1711]: Removed session 9. Aug 13 01:03:34.723829 kubelet[2607]: I0813 01:03:34.710647 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-b8cf85895-9pggm" podStartSLOduration=36.680188646 podStartE2EDuration="48.693172266s" podCreationTimestamp="2025-08-13 01:02:46 +0000 UTC" firstStartedPulling="2025-08-13 01:03:21.096688394 +0000 UTC m=+50.920956359" lastFinishedPulling="2025-08-13 01:03:33.109672015 +0000 UTC m=+62.933939979" observedRunningTime="2025-08-13 01:03:34.678481059 +0000 UTC m=+64.502749030" watchObservedRunningTime="2025-08-13 01:03:34.693172266 +0000 UTC m=+64.517440233" Aug 13 01:03:34.728312 kubelet[2607]: I0813 01:03:34.725974 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-b8cf85895-75kjb" podStartSLOduration=34.694167476 podStartE2EDuration="48.725952264s" podCreationTimestamp="2025-08-13 01:02:46 +0000 UTC" firstStartedPulling="2025-08-13 01:03:18.535225628 +0000 UTC m=+48.359493594" lastFinishedPulling="2025-08-13 01:03:32.567010418 +0000 UTC m=+62.391278382" observedRunningTime="2025-08-13 01:03:34.725101059 +0000 UTC m=+64.549369026" watchObservedRunningTime="2025-08-13 01:03:34.725952264 +0000 UTC m=+64.550220240" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.743 [WARNING][5308] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e1bffb21-6109-4213-a3cc-f4b22a0d6c19", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f", Pod:"coredns-674b8bbfcf-zwgd4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13c7b545f1b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.743 [INFO][5308] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.743 [INFO][5308] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" iface="eth0" netns="" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.743 [INFO][5308] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.743 [INFO][5308] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.838 [INFO][5316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.839 [INFO][5316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.839 [INFO][5316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.848 [WARNING][5316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.848 [INFO][5316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.850 [INFO][5316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:34.855578 env[1719]: 2025-08-13 01:03:34.852 [INFO][5308] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:34.858806 env[1719]: time="2025-08-13T01:03:34.856585334Z" level=info msg="TearDown network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\" successfully" Aug 13 01:03:34.858806 env[1719]: time="2025-08-13T01:03:34.856633554Z" level=info msg="StopPodSandbox for \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\" returns successfully" Aug 13 01:03:34.859516 env[1719]: time="2025-08-13T01:03:34.859479306Z" level=info msg="RemovePodSandbox for \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\"" Aug 13 01:03:34.859690 env[1719]: time="2025-08-13T01:03:34.859646819Z" level=info msg="Forcibly stopping sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\"" Aug 13 01:03:35.024000 audit[5336]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=5336 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:35.024000 audit[5336]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd2f423e10 a2=0 a3=7ffd2f423dfc items=0 ppid=2710 pid=5336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.024000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:35.035000 audit[5336]: NETFILTER_CFG table=nat:126 family=2 entries=24 op=nft_register_rule pid=5336 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:35.035000 audit[5336]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffd2f423e10 a2=0 a3=7ffd2f423dfc items=0 ppid=2710 pid=5336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.035000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:34.991 [WARNING][5332] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e1bffb21-6109-4213-a3cc-f4b22a0d6c19", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"ac817ff09a030ae5e53524e5cd533ab28372ed5c49805f1572c2114b2e4d614f", Pod:"coredns-674b8bbfcf-zwgd4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.42.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13c7b545f1b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:34.992 [INFO][5332] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:34.992 [INFO][5332] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" iface="eth0" netns="" Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:34.992 [INFO][5332] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:34.992 [INFO][5332] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:35.093 [INFO][5340] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:35.095 [INFO][5340] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:35.095 [INFO][5340] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:35.108 [WARNING][5340] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:35.108 [INFO][5340] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" HandleID="k8s-pod-network.188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Workload="ip--172--31--21--64-k8s-coredns--674b8bbfcf--zwgd4-eth0" Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:35.112 [INFO][5340] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:35.118248 env[1719]: 2025-08-13 01:03:35.115 [INFO][5332] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351" Aug 13 01:03:35.118248 env[1719]: time="2025-08-13T01:03:35.117466533Z" level=info msg="TearDown network for sandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\" successfully" Aug 13 01:03:35.138462 env[1719]: time="2025-08-13T01:03:35.138396701Z" level=info msg="RemovePodSandbox \"188d31b7a41f5c03bfe51ce422a9320ee8436bff9bce82b8179ce81702b5f351\" returns successfully" Aug 13 01:03:35.142615 env[1719]: time="2025-08-13T01:03:35.142480544Z" level=info msg="StopPodSandbox for \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\"" Aug 13 01:03:35.268699 kubelet[2607]: I0813 01:03:35.268657 2607 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.235 [WARNING][5355] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"9396d154-0d8d-4429-8f65-71c1ff716fd2", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827", Pod:"goldmane-768f4c5c69-c79h6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.42.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif4f35b7ca4d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.265 [INFO][5355] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.265 [INFO][5355] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" iface="eth0" netns="" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.265 [INFO][5355] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.265 [INFO][5355] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.308 [INFO][5362] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.308 [INFO][5362] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.308 [INFO][5362] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.320 [WARNING][5362] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.320 [INFO][5362] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.326 [INFO][5362] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:35.336699 env[1719]: 2025-08-13 01:03:35.334 [INFO][5355] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.337574 env[1719]: time="2025-08-13T01:03:35.337532012Z" level=info msg="TearDown network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\" successfully" Aug 13 01:03:35.337687 env[1719]: time="2025-08-13T01:03:35.337663922Z" level=info msg="StopPodSandbox for \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\" returns successfully" Aug 13 01:03:35.340696 env[1719]: time="2025-08-13T01:03:35.340660087Z" level=info msg="RemovePodSandbox for \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\"" Aug 13 01:03:35.340896 env[1719]: time="2025-08-13T01:03:35.340852718Z" level=info msg="Forcibly stopping sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\"" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.452 [WARNING][5376] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"9396d154-0d8d-4429-8f65-71c1ff716fd2", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"eaa325ce3b6e9b0324999e9345e29eb0f1c5c3ff25205dfb21eb304206e65827", Pod:"goldmane-768f4c5c69-c79h6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.42.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif4f35b7ca4d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.457 [INFO][5376] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.457 [INFO][5376] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" iface="eth0" netns="" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.457 [INFO][5376] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.457 [INFO][5376] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.555 [INFO][5383] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.555 [INFO][5383] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.555 [INFO][5383] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.573 [WARNING][5383] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.573 [INFO][5383] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" HandleID="k8s-pod-network.7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Workload="ip--172--31--21--64-k8s-goldmane--768f4c5c69--c79h6-eth0" Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.577 [INFO][5383] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:35.582867 env[1719]: 2025-08-13 01:03:35.580 [INFO][5376] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53" Aug 13 01:03:35.585544 env[1719]: time="2025-08-13T01:03:35.582891494Z" level=info msg="TearDown network for sandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\" successfully" Aug 13 01:03:35.598547 env[1719]: time="2025-08-13T01:03:35.598492311Z" level=info msg="RemovePodSandbox \"7c2f052ced5e67c76e2129d5fe1c8690124259df6015c4f6e1b9918b0d59db53\" returns successfully" Aug 13 01:03:35.599129 env[1719]: time="2025-08-13T01:03:35.599073944Z" level=info msg="StopPodSandbox for \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\"" Aug 13 01:03:35.723402 env[1719]: time="2025-08-13T01:03:35.723359376Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:35.727163 env[1719]: time="2025-08-13T01:03:35.727097201Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:35.730150 env[1719]: time="2025-08-13T01:03:35.730093900Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:35.733416 env[1719]: time="2025-08-13T01:03:35.733353231Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:35.735478 env[1719]: time="2025-08-13T01:03:35.734084430Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Aug 13 01:03:35.740713 env[1719]: time="2025-08-13T01:03:35.740664474Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Aug 13 01:03:35.751106 env[1719]: time="2025-08-13T01:03:35.751064460Z" level=info msg="CreateContainer within sandbox \"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Aug 13 01:03:35.799914 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2949642307.mount: Deactivated successfully. Aug 13 01:03:35.806242 env[1719]: time="2025-08-13T01:03:35.806189401Z" level=info msg="CreateContainer within sandbox \"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"079235efa5fdab86860af9cc6c59da2fb83a2bcba0a6fc347da6ccf649aca61a\"" Aug 13 01:03:35.810373 env[1719]: time="2025-08-13T01:03:35.810327402Z" level=info msg="StartContainer for \"079235efa5fdab86860af9cc6c59da2fb83a2bcba0a6fc347da6ccf649aca61a\"" Aug 13 01:03:35.836527 kernel: kauditd_printk_skb: 139 callbacks suppressed Aug 13 01:03:35.838219 kernel: audit: type=1325 audit(1755047015.832:1503): table=filter:127 family=2 entries=10 op=nft_register_rule pid=5421 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:35.832000 audit[5421]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=5421 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:35.832000 audit[5421]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeb2530e50 a2=0 a3=7ffeb2530e3c items=0 ppid=2710 pid=5421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.858160 kernel: audit: type=1300 audit(1755047015.832:1503): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeb2530e50 a2=0 a3=7ffeb2530e3c items=0 ppid=2710 pid=5421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.832000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:35.892149 kernel: audit: type=1327 audit(1755047015.832:1503): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:35.892280 kernel: audit: type=1325 audit(1755047015.845:1504): table=nat:128 family=2 entries=24 op=nft_register_rule pid=5421 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:35.845000 audit[5421]: NETFILTER_CFG table=nat:128 family=2 entries=24 op=nft_register_rule pid=5421 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:35.845000 audit[5421]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffeb2530e50 a2=0 a3=7ffeb2530e3c items=0 ppid=2710 pid=5421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.906137 kernel: audit: type=1300 audit(1755047015.845:1504): arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffeb2530e50 a2=0 a3=7ffeb2530e3c items=0 ppid=2710 pid=5421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:35.916409 kernel: audit: type=1327 audit(1755047015.845:1504): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.694 [WARNING][5397] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9bff5897-b20d-423c-9873-a6298df70078", ResourceVersion:"1152", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870", Pod:"calico-apiserver-b8cf85895-9pggm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali08eb26b42ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.695 [INFO][5397] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.695 [INFO][5397] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" iface="eth0" netns="" Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.695 [INFO][5397] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.695 [INFO][5397] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.849 [INFO][5404] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.850 [INFO][5404] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.850 [INFO][5404] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.883 [WARNING][5404] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.883 [INFO][5404] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.891 [INFO][5404] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:35.917466 env[1719]: 2025-08-13 01:03:35.907 [INFO][5397] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:35.918849 env[1719]: time="2025-08-13T01:03:35.918794054Z" level=info msg="TearDown network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\" successfully" Aug 13 01:03:35.918944 env[1719]: time="2025-08-13T01:03:35.918926978Z" level=info msg="StopPodSandbox for \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\" returns successfully" Aug 13 01:03:35.919691 env[1719]: time="2025-08-13T01:03:35.919661024Z" level=info msg="RemovePodSandbox for \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\"" Aug 13 01:03:35.919880 env[1719]: time="2025-08-13T01:03:35.919824867Z" level=info msg="Forcibly stopping sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\"" Aug 13 01:03:35.925278 systemd[1]: Started cri-containerd-079235efa5fdab86860af9cc6c59da2fb83a2bcba0a6fc347da6ccf649aca61a.scope. Aug 13 01:03:36.013138 kernel: audit: type=1400 audit(1755047016.001:1505): avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.001000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.001000 audit[5424]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f6999ccae18 items=0 ppid=4255 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:36.030208 kernel: audit: type=1300 audit(1755047016.001:1505): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f6999ccae18 items=0 ppid=4255 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:36.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393233356566613566646162383638363061663963633663353964 Aug 13 01:03:36.046214 kernel: audit: type=1327 audit(1755047016.001:1505): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393233356566613566646162383638363061663963633663353964 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.062464 kernel: audit: type=1400 audit(1755047016.026:1506): avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit: BPF prog-id=233 op=LOAD Aug 13 01:03:36.026000 audit[5424]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000930e8 items=0 ppid=4255 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:36.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393233356566613566646162383638363061663963633663353964 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit: BPF prog-id=234 op=LOAD Aug 13 01:03:36.026000 audit[5424]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000093138 items=0 ppid=4255 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:36.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393233356566613566646162383638363061663963633663353964 Aug 13 01:03:36.026000 audit: BPF prog-id=234 op=UNLOAD Aug 13 01:03:36.026000 audit: BPF prog-id=233 op=UNLOAD Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { perfmon } for pid=5424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit[5424]: AVC avc: denied { bpf } for pid=5424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:36.026000 audit: BPF prog-id=235 op=LOAD Aug 13 01:03:36.026000 audit[5424]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000931c8 items=0 ppid=4255 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:36.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393233356566613566646162383638363061663963633663353964 Aug 13 01:03:36.161617 env[1719]: time="2025-08-13T01:03:36.161566751Z" level=info msg="StartContainer for \"079235efa5fdab86860af9cc6c59da2fb83a2bcba0a6fc347da6ccf649aca61a\" returns successfully" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.076 [WARNING][5445] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9bff5897-b20d-423c-9873-a6298df70078", ResourceVersion:"1152", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"13f1c2506e53fbfc25f248aa2e2bf1504f675ea4b873a1d7bc9dc5e8d10b1870", Pod:"calico-apiserver-b8cf85895-9pggm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali08eb26b42ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.077 [INFO][5445] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.077 [INFO][5445] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" iface="eth0" netns="" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.077 [INFO][5445] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.077 [INFO][5445] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.151 [INFO][5465] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.152 [INFO][5465] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.152 [INFO][5465] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.183 [WARNING][5465] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.183 [INFO][5465] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" HandleID="k8s-pod-network.066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--9pggm-eth0" Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.185 [INFO][5465] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:36.190954 env[1719]: 2025-08-13 01:03:36.188 [INFO][5445] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5" Aug 13 01:03:36.190954 env[1719]: time="2025-08-13T01:03:36.190940140Z" level=info msg="TearDown network for sandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\" successfully" Aug 13 01:03:36.195676 env[1719]: time="2025-08-13T01:03:36.195632200Z" level=info msg="RemovePodSandbox \"066161ea3ccc1b4850faa9ae0eb9992303263c158189439d46742e874a60c2d5\" returns successfully" Aug 13 01:03:36.198785 env[1719]: time="2025-08-13T01:03:36.198748362Z" level=info msg="StopPodSandbox for \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\"" Aug 13 01:03:36.271675 kubelet[2607]: I0813 01:03:36.271646 2607 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.295 [WARNING][5487] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9cb56d00-67ce-4ec5-9c03-0745d269cbf6", ResourceVersion:"1153", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654", Pod:"calico-apiserver-b8cf85895-75kjb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic9e70e15cf3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.295 [INFO][5487] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.295 [INFO][5487] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" iface="eth0" netns="" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.295 [INFO][5487] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.295 [INFO][5487] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.341 [INFO][5494] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.341 [INFO][5494] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.341 [INFO][5494] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.354 [WARNING][5494] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.354 [INFO][5494] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.357 [INFO][5494] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:36.363233 env[1719]: 2025-08-13 01:03:36.359 [INFO][5487] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.363233 env[1719]: time="2025-08-13T01:03:36.363188287Z" level=info msg="TearDown network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\" successfully" Aug 13 01:03:36.364842 env[1719]: time="2025-08-13T01:03:36.364790670Z" level=info msg="StopPodSandbox for \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\" returns successfully" Aug 13 01:03:36.365462 env[1719]: time="2025-08-13T01:03:36.365428904Z" level=info msg="RemovePodSandbox for \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\"" Aug 13 01:03:36.365597 env[1719]: time="2025-08-13T01:03:36.365471881Z" level=info msg="Forcibly stopping sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\"" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.434 [WARNING][5509] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0", GenerateName:"calico-apiserver-b8cf85895-", Namespace:"calico-apiserver", SelfLink:"", UID:"9cb56d00-67ce-4ec5-9c03-0745d269cbf6", ResourceVersion:"1153", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"b8cf85895", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"12e13eb2a01a62c26f618b583aee41fd9988d7d90bf539749e5f29ae6db5d654", Pod:"calico-apiserver-b8cf85895-75kjb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.42.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic9e70e15cf3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.434 [INFO][5509] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.436 [INFO][5509] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" iface="eth0" netns="" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.436 [INFO][5509] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.436 [INFO][5509] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.524 [INFO][5519] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.525 [INFO][5519] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.525 [INFO][5519] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.533 [WARNING][5519] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.533 [INFO][5519] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" HandleID="k8s-pod-network.a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Workload="ip--172--31--21--64-k8s-calico--apiserver--b8cf85895--75kjb-eth0" Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.535 [INFO][5519] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:36.542146 env[1719]: 2025-08-13 01:03:36.538 [INFO][5509] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602" Aug 13 01:03:36.542794 env[1719]: time="2025-08-13T01:03:36.542747684Z" level=info msg="TearDown network for sandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\" successfully" Aug 13 01:03:36.546345 env[1719]: time="2025-08-13T01:03:36.546301892Z" level=info msg="RemovePodSandbox \"a0ea6edce609e5f2f75f0e7ef3d1d3dbc25d20da2783b72b4c498539c2281602\" returns successfully" Aug 13 01:03:36.546986 env[1719]: time="2025-08-13T01:03:36.546958935Z" level=info msg="StopPodSandbox for \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\"" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.601 [WARNING][5533] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0", GenerateName:"calico-kube-controllers-6f6464b85b-", Namespace:"calico-system", SelfLink:"", UID:"08087410-bce6-49a4-acc7-f910830b7746", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f6464b85b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958", Pod:"calico-kube-controllers-6f6464b85b-zj8gj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.42.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib75dd1dcbf2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.601 [INFO][5533] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.601 [INFO][5533] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" iface="eth0" netns="" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.601 [INFO][5533] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.601 [INFO][5533] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.711 [INFO][5540] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.712 [INFO][5540] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.712 [INFO][5540] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.721 [WARNING][5540] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.721 [INFO][5540] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.726 [INFO][5540] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:36.732627 env[1719]: 2025-08-13 01:03:36.729 [INFO][5533] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:36.733460 env[1719]: time="2025-08-13T01:03:36.733410434Z" level=info msg="TearDown network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\" successfully" Aug 13 01:03:36.733560 env[1719]: time="2025-08-13T01:03:36.733542353Z" level=info msg="StopPodSandbox for \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\" returns successfully" Aug 13 01:03:36.734238 env[1719]: time="2025-08-13T01:03:36.734207635Z" level=info msg="RemovePodSandbox for \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\"" Aug 13 01:03:36.734539 env[1719]: time="2025-08-13T01:03:36.734400585Z" level=info msg="Forcibly stopping sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\"" Aug 13 01:03:36.790409 systemd[1]: run-containerd-runc-k8s.io-079235efa5fdab86860af9cc6c59da2fb83a2bcba0a6fc347da6ccf649aca61a-runc.Sux8Ph.mount: Deactivated successfully. Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.807 [WARNING][5555] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0", GenerateName:"calico-kube-controllers-6f6464b85b-", Namespace:"calico-system", SelfLink:"", UID:"08087410-bce6-49a4-acc7-f910830b7746", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f6464b85b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958", Pod:"calico-kube-controllers-6f6464b85b-zj8gj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.42.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib75dd1dcbf2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.808 [INFO][5555] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.808 [INFO][5555] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" iface="eth0" netns="" Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.808 [INFO][5555] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.808 [INFO][5555] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.969 [INFO][5562] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.969 [INFO][5562] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.969 [INFO][5562] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.986 [WARNING][5562] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.986 [INFO][5562] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" HandleID="k8s-pod-network.6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Workload="ip--172--31--21--64-k8s-calico--kube--controllers--6f6464b85b--zj8gj-eth0" Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.988 [INFO][5562] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:36.999877 env[1719]: 2025-08-13 01:03:36.996 [INFO][5555] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77" Aug 13 01:03:37.001402 env[1719]: time="2025-08-13T01:03:37.001349503Z" level=info msg="TearDown network for sandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\" successfully" Aug 13 01:03:37.007665 env[1719]: time="2025-08-13T01:03:37.007617739Z" level=info msg="RemovePodSandbox \"6092e2cd4a61fd5f630578b5ec1782060cd709d155867de84962209ddbf9df77\" returns successfully" Aug 13 01:03:37.019683 env[1719]: time="2025-08-13T01:03:37.019635287Z" level=info msg="StopPodSandbox for \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\"" Aug 13 01:03:37.231095 kubelet[2607]: I0813 01:03:37.223177 2607 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Aug 13 01:03:37.234524 kubelet[2607]: I0813 01:03:37.234479 2607 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.168 [WARNING][5576] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eb8fa6ca-0f9c-4967-a309-b869c696b219", ResourceVersion:"1170", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd", Pod:"csi-node-driver-bp445", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.42.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali23aaad86063", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.169 [INFO][5576] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.169 [INFO][5576] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" iface="eth0" netns="" Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.169 [INFO][5576] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.169 [INFO][5576] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.222 [INFO][5583] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.222 [INFO][5583] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.222 [INFO][5583] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.239 [WARNING][5583] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.239 [INFO][5583] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.242 [INFO][5583] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:37.247605 env[1719]: 2025-08-13 01:03:37.245 [INFO][5576] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.247605 env[1719]: time="2025-08-13T01:03:37.247589115Z" level=info msg="TearDown network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\" successfully" Aug 13 01:03:37.248611 env[1719]: time="2025-08-13T01:03:37.247624149Z" level=info msg="StopPodSandbox for \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\" returns successfully" Aug 13 01:03:37.248611 env[1719]: time="2025-08-13T01:03:37.248179613Z" level=info msg="RemovePodSandbox for \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\"" Aug 13 01:03:37.248611 env[1719]: time="2025-08-13T01:03:37.248271749Z" level=info msg="Forcibly stopping sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\"" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.360 [WARNING][5599] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eb8fa6ca-0f9c-4967-a309-b869c696b219", ResourceVersion:"1170", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 2, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-64", ContainerID:"19d7749e588cf50b2956096f9e33f4779a9ab9fef376ffdba7b35988161088bd", Pod:"csi-node-driver-bp445", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.42.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali23aaad86063", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.361 [INFO][5599] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.361 [INFO][5599] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" iface="eth0" netns="" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.361 [INFO][5599] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.361 [INFO][5599] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.408 [INFO][5606] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.409 [INFO][5606] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.409 [INFO][5606] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.418 [WARNING][5606] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.418 [INFO][5606] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" HandleID="k8s-pod-network.6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Workload="ip--172--31--21--64-k8s-csi--node--driver--bp445-eth0" Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.420 [INFO][5606] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:03:37.431548 env[1719]: 2025-08-13 01:03:37.428 [INFO][5599] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1" Aug 13 01:03:37.435371 env[1719]: time="2025-08-13T01:03:37.435256635Z" level=info msg="TearDown network for sandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\" successfully" Aug 13 01:03:37.439643 env[1719]: time="2025-08-13T01:03:37.439558782Z" level=info msg="RemovePodSandbox \"6dd66c92995bf22e0b6135d1df0d2fa33a737bef63280fc6b6f9aa688980efe1\" returns successfully" Aug 13 01:03:38.366000 audit[5208]: AVC avc: denied { watch } for pid=5208 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_03_04.1463670398/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c398 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c398 tclass=file permissive=0 Aug 13 01:03:38.366000 audit[5208]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001619740 a2=fc6 a3=0 items=0 ppid=4714 pid=5208 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c398 key=(null) Aug 13 01:03:38.366000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:03:38.473163 kubelet[2607]: I0813 01:03:38.456526 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-bp445" podStartSLOduration=30.550030131 podStartE2EDuration="49.454445771s" podCreationTimestamp="2025-08-13 01:02:49 +0000 UTC" firstStartedPulling="2025-08-13 01:03:16.833672802 +0000 UTC m=+46.657940768" lastFinishedPulling="2025-08-13 01:03:35.738088435 +0000 UTC m=+65.562356408" observedRunningTime="2025-08-13 01:03:36.304780149 +0000 UTC m=+66.129048122" watchObservedRunningTime="2025-08-13 01:03:38.454445771 +0000 UTC m=+68.278713745" Aug 13 01:03:38.526000 audit[5168]: AVC avc: denied { watch } for pid=5168 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_03_04.2761460499/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c242,c772 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c242,c772 tclass=file permissive=0 Aug 13 01:03:38.526000 audit[5168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b25820 a2=fc6 a3=0 items=0 ppid=4429 pid=5168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c242,c772 key=(null) Aug 13 01:03:38.526000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:03:38.548000 audit[5616]: NETFILTER_CFG table=filter:129 family=2 entries=9 op=nft_register_rule pid=5616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:38.548000 audit[5616]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc09582950 a2=0 a3=7ffc0958293c items=0 ppid=2710 pid=5616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:38.548000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:38.555000 audit[5616]: NETFILTER_CFG table=nat:130 family=2 entries=31 op=nft_register_chain pid=5616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:38.555000 audit[5616]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffc09582950 a2=0 a3=7ffc0958293c items=0 ppid=2710 pid=5616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:38.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:39.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.64:22-147.75.109.163:38196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:39.652707 systemd[1]: Started sshd@9-172.31.21.64:22-147.75.109.163:38196.service. Aug 13 01:03:39.744362 kubelet[2607]: I0813 01:03:39.744327 2607 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:03:39.852000 audit[5621]: NETFILTER_CFG table=filter:131 family=2 entries=8 op=nft_register_rule pid=5621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:39.852000 audit[5621]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffccb5e5f50 a2=0 a3=7ffccb5e5f3c items=0 ppid=2710 pid=5621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:39.852000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:39.857000 audit[5621]: NETFILTER_CFG table=nat:132 family=2 entries=38 op=nft_register_chain pid=5621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:39.857000 audit[5621]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffccb5e5f50 a2=0 a3=7ffccb5e5f3c items=0 ppid=2710 pid=5621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:39.857000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:40.002000 audit[5618]: USER_ACCT pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:40.005689 sshd[5618]: Accepted publickey for core from 147.75.109.163 port 38196 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:40.005000 audit[5618]: CRED_ACQ pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:40.006000 audit[5618]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff31d4bdc0 a2=3 a3=0 items=0 ppid=1 pid=5618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:40.006000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:40.010425 sshd[5618]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:40.041015 systemd[1]: Started session-10.scope. Aug 13 01:03:40.043418 systemd-logind[1711]: New session 10 of user core. Aug 13 01:03:40.049000 audit[5618]: USER_START pid=5618 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:40.051000 audit[5622]: CRED_ACQ pid=5622 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:41.693456 env[1719]: time="2025-08-13T01:03:41.693410003Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:41.702482 env[1719]: time="2025-08-13T01:03:41.699554925Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:41.705726 env[1719]: time="2025-08-13T01:03:41.705687721Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:41.713811 env[1719]: time="2025-08-13T01:03:41.713742790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Aug 13 01:03:41.715205 env[1719]: time="2025-08-13T01:03:41.714280290Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:03:42.599887 sshd[5618]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:42.608674 kernel: kauditd_printk_skb: 65 callbacks suppressed Aug 13 01:03:42.616480 kernel: audit: type=1106 audit(1755047022.603:1523): pid=5618 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.618828 kernel: audit: type=1104 audit(1755047022.603:1524): pid=5618 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.603000 audit[5618]: USER_END pid=5618 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.603000 audit[5618]: CRED_DISP pid=5618 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.610683 systemd[1]: sshd@9-172.31.21.64:22-147.75.109.163:38196.service: Deactivated successfully. Aug 13 01:03:42.613432 systemd[1]: session-10.scope: Deactivated successfully. Aug 13 01:03:42.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.64:22-147.75.109.163:38196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:42.636178 kernel: audit: type=1131 audit(1755047022.607:1525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.64:22-147.75.109.163:38196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:42.640186 systemd-logind[1711]: Session 10 logged out. Waiting for processes to exit. Aug 13 01:03:42.644690 systemd[1]: Started sshd@10-172.31.21.64:22-147.75.109.163:38204.service. Aug 13 01:03:42.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.64:22-147.75.109.163:38204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:42.654174 kernel: audit: type=1130 audit(1755047022.643:1526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.64:22-147.75.109.163:38204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:42.656895 systemd-logind[1711]: Removed session 10. Aug 13 01:03:42.798564 env[1719]: time="2025-08-13T01:03:42.798414429Z" level=info msg="CreateContainer within sandbox \"be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Aug 13 01:03:42.833717 env[1719]: time="2025-08-13T01:03:42.833660888Z" level=info msg="CreateContainer within sandbox \"be3e5a6af45600f830344f316608e563bae7b645229bc804e155b25a4a05a958\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"dc0840a8da1a1be569b91fcdfee0323d0edabadb0ff62b7b91c5af92251bc009\"" Aug 13 01:03:42.834474 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3635856111.mount: Deactivated successfully. Aug 13 01:03:42.874972 sshd[5634]: Accepted publickey for core from 147.75.109.163 port 38204 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:42.872000 audit[5634]: USER_ACCT pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.885860 kernel: audit: type=1101 audit(1755047022.872:1527): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.886740 sshd[5634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:42.883000 audit[5634]: CRED_ACQ pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.905369 kernel: audit: type=1103 audit(1755047022.883:1528): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.905625 kernel: audit: type=1006 audit(1755047022.883:1529): pid=5634 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Aug 13 01:03:42.908936 env[1719]: time="2025-08-13T01:03:42.908721572Z" level=info msg="StartContainer for \"dc0840a8da1a1be569b91fcdfee0323d0edabadb0ff62b7b91c5af92251bc009\"" Aug 13 01:03:42.912887 systemd[1]: Started session-11.scope. Aug 13 01:03:42.914309 systemd-logind[1711]: New session 11 of user core. Aug 13 01:03:42.883000 audit[5634]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc59732860 a2=3 a3=0 items=0 ppid=1 pid=5634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:42.941025 kernel: audit: type=1300 audit(1755047022.883:1529): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc59732860 a2=3 a3=0 items=0 ppid=1 pid=5634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:42.941189 kernel: audit: type=1327 audit(1755047022.883:1529): proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:42.883000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:42.959207 kernel: audit: type=1105 audit(1755047022.946:1530): pid=5634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.946000 audit[5634]: USER_START pid=5634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.949000 audit[5648]: CRED_ACQ pid=5648 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:42.968036 systemd[1]: Started cri-containerd-dc0840a8da1a1be569b91fcdfee0323d0edabadb0ff62b7b91c5af92251bc009.scope. Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.007000 audit: BPF prog-id=236 op=LOAD Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4925 pid=5647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:43.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303834306138646131613162653536396239316663646665653033 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4925 pid=5647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:43.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303834306138646131613162653536396239316663646665653033 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit: BPF prog-id=237 op=LOAD Aug 13 01:03:43.009000 audit[5647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e3910 items=0 ppid=4925 pid=5647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:43.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303834306138646131613162653536396239316663646665653033 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit: BPF prog-id=238 op=LOAD Aug 13 01:03:43.009000 audit[5647]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e3958 items=0 ppid=4925 pid=5647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:43.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303834306138646131613162653536396239316663646665653033 Aug 13 01:03:43.009000 audit: BPF prog-id=238 op=UNLOAD Aug 13 01:03:43.009000 audit: BPF prog-id=237 op=UNLOAD Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { perfmon } for pid=5647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit[5647]: AVC avc: denied { bpf } for pid=5647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:43.009000 audit: BPF prog-id=239 op=LOAD Aug 13 01:03:43.009000 audit[5647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e3d68 items=0 ppid=4925 pid=5647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:43.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303834306138646131613162653536396239316663646665653033 Aug 13 01:03:43.068138 env[1719]: time="2025-08-13T01:03:43.066334927Z" level=info msg="StartContainer for \"dc0840a8da1a1be569b91fcdfee0323d0edabadb0ff62b7b91c5af92251bc009\" returns successfully" Aug 13 01:03:43.620935 sshd[5634]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:43.625000 audit[5634]: USER_END pid=5634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:43.626000 audit[5634]: CRED_DISP pid=5634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:43.629905 systemd[1]: sshd@10-172.31.21.64:22-147.75.109.163:38204.service: Deactivated successfully. Aug 13 01:03:43.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.64:22-147.75.109.163:38204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:43.631082 systemd[1]: session-11.scope: Deactivated successfully. Aug 13 01:03:43.632894 systemd-logind[1711]: Session 11 logged out. Waiting for processes to exit. Aug 13 01:03:43.635024 systemd-logind[1711]: Removed session 11. Aug 13 01:03:43.648023 systemd[1]: Started sshd@11-172.31.21.64:22-147.75.109.163:38206.service. Aug 13 01:03:43.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.64:22-147.75.109.163:38206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:43.787829 systemd[1]: run-containerd-runc-k8s.io-21e13e6398b2c454a20008c2ed8e259835473d19a900b5366ca08941384f95ed-runc.Khk7b7.mount: Deactivated successfully. Aug 13 01:03:43.981000 audit[5688]: USER_ACCT pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:43.983276 sshd[5688]: Accepted publickey for core from 147.75.109.163 port 38206 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:43.984000 audit[5688]: CRED_ACQ pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:43.985000 audit[5688]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc19f99b60 a2=3 a3=0 items=0 ppid=1 pid=5688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:43.985000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:43.990444 sshd[5688]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:44.007635 systemd-logind[1711]: New session 12 of user core. Aug 13 01:03:44.009305 systemd[1]: Started session-12.scope. Aug 13 01:03:44.016000 audit[5688]: USER_START pid=5688 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:44.018000 audit[5706]: CRED_ACQ pid=5706 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:44.478045 kubelet[2607]: I0813 01:03:44.414768 2607 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6f6464b85b-zj8gj" podStartSLOduration=34.703090537 podStartE2EDuration="54.386378911s" podCreationTimestamp="2025-08-13 01:02:50 +0000 UTC" firstStartedPulling="2025-08-13 01:03:22.475041269 +0000 UTC m=+52.299309223" lastFinishedPulling="2025-08-13 01:03:42.158329644 +0000 UTC m=+71.982597597" observedRunningTime="2025-08-13 01:03:44.111796939 +0000 UTC m=+73.936064911" watchObservedRunningTime="2025-08-13 01:03:44.386378911 +0000 UTC m=+74.210646883" Aug 13 01:03:44.965740 sshd[5688]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:44.974000 audit[5688]: USER_END pid=5688 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:44.975000 audit[5688]: CRED_DISP pid=5688 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:45.007300 systemd[1]: sshd@11-172.31.21.64:22-147.75.109.163:38206.service: Deactivated successfully. Aug 13 01:03:45.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.64:22-147.75.109.163:38206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:45.013339 systemd[1]: session-12.scope: Deactivated successfully. Aug 13 01:03:45.014419 systemd-logind[1711]: Session 12 logged out. Waiting for processes to exit. Aug 13 01:03:45.027849 systemd-logind[1711]: Removed session 12. Aug 13 01:03:47.226065 systemd[1]: run-containerd-runc-k8s.io-3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4-runc.p5RlTX.mount: Deactivated successfully. Aug 13 01:03:49.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.64:22-147.75.109.163:52976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:49.979018 systemd[1]: Started sshd@12-172.31.21.64:22-147.75.109.163:52976.service. Aug 13 01:03:49.987871 kernel: kauditd_printk_skb: 72 callbacks suppressed Aug 13 01:03:49.997366 kernel: audit: type=1130 audit(1755047029.978:1562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.64:22-147.75.109.163:52976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:50.252000 audit[5768]: USER_ACCT pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:50.259085 sshd[5768]: Accepted publickey for core from 147.75.109.163 port 52976 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:50.263391 kernel: audit: type=1101 audit(1755047030.252:1563): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:50.262000 audit[5768]: CRED_ACQ pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:50.274376 kernel: audit: type=1103 audit(1755047030.262:1564): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:50.291593 kernel: audit: type=1006 audit(1755047030.262:1565): pid=5768 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Aug 13 01:03:50.291735 kernel: audit: type=1300 audit(1755047030.262:1565): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8e0342d0 a2=3 a3=0 items=0 ppid=1 pid=5768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:50.262000 audit[5768]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8e0342d0 a2=3 a3=0 items=0 ppid=1 pid=5768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:50.304908 kernel: audit: type=1327 audit(1755047030.262:1565): proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:50.262000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:50.297408 sshd[5768]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:50.329293 systemd[1]: Started session-13.scope. Aug 13 01:03:50.331331 systemd-logind[1711]: New session 13 of user core. Aug 13 01:03:50.339000 audit[5768]: USER_START pid=5768 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:50.354765 kernel: audit: type=1105 audit(1755047030.339:1566): pid=5768 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:50.352000 audit[5770]: CRED_ACQ pid=5770 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:50.369132 kernel: audit: type=1103 audit(1755047030.352:1567): pid=5770 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.670191 sshd[5768]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:51.686231 kernel: audit: type=1106 audit(1755047031.671:1568): pid=5768 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.671000 audit[5768]: USER_END pid=5768 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.697705 kernel: audit: type=1104 audit(1755047031.684:1569): pid=5768 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.684000 audit[5768]: CRED_DISP pid=5768 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.687671 systemd[1]: sshd@12-172.31.21.64:22-147.75.109.163:52976.service: Deactivated successfully. Aug 13 01:03:51.688889 systemd[1]: session-13.scope: Deactivated successfully. Aug 13 01:03:51.699948 systemd-logind[1711]: Session 13 logged out. Waiting for processes to exit. Aug 13 01:03:51.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.64:22-147.75.109.163:52976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:51.708907 systemd[1]: Started sshd@13-172.31.21.64:22-147.75.109.163:52992.service. Aug 13 01:03:51.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.64:22-147.75.109.163:52992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:51.712813 systemd-logind[1711]: Removed session 13. Aug 13 01:03:51.906000 audit[5786]: USER_ACCT pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.909231 sshd[5786]: Accepted publickey for core from 147.75.109.163 port 52992 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:51.908000 audit[5786]: CRED_ACQ pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.908000 audit[5786]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6cd991e0 a2=3 a3=0 items=0 ppid=1 pid=5786 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:51.908000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:51.909997 sshd[5786]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:51.920409 systemd[1]: Started session-14.scope. Aug 13 01:03:51.921180 systemd-logind[1711]: New session 14 of user core. Aug 13 01:03:51.930000 audit[5786]: USER_START pid=5786 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:51.933000 audit[5788]: CRED_ACQ pid=5788 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:52.853297 sshd[5786]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:52.861370 systemd[1]: Started sshd@14-172.31.21.64:22-147.75.109.163:53000.service. Aug 13 01:03:52.873000 audit[5786]: USER_END pid=5786 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:52.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.64:22-147.75.109.163:53000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:52.876000 audit[5786]: CRED_DISP pid=5786 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:52.893725 systemd[1]: sshd@13-172.31.21.64:22-147.75.109.163:52992.service: Deactivated successfully. Aug 13 01:03:52.894910 systemd[1]: session-14.scope: Deactivated successfully. Aug 13 01:03:52.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.64:22-147.75.109.163:52992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:52.896828 systemd-logind[1711]: Session 14 logged out. Waiting for processes to exit. Aug 13 01:03:52.899861 systemd-logind[1711]: Removed session 14. Aug 13 01:03:53.098000 audit[5796]: USER_ACCT pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:53.100252 sshd[5796]: Accepted publickey for core from 147.75.109.163 port 53000 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:53.101000 audit[5796]: CRED_ACQ pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:53.101000 audit[5796]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda5828d80 a2=3 a3=0 items=0 ppid=1 pid=5796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:53.101000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:53.108164 sshd[5796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:53.117525 systemd[1]: Started session-15.scope. Aug 13 01:03:53.118556 systemd-logind[1711]: New session 15 of user core. Aug 13 01:03:53.124000 audit[5796]: USER_START pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:53.126000 audit[5799]: CRED_ACQ pid=5799 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:54.181500 sshd[5796]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:54.181000 audit[5796]: USER_END pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:54.182000 audit[5796]: CRED_DISP pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:54.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.64:22-147.75.109.163:53000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:54.186360 systemd[1]: sshd@14-172.31.21.64:22-147.75.109.163:53000.service: Deactivated successfully. Aug 13 01:03:54.187265 systemd[1]: session-15.scope: Deactivated successfully. Aug 13 01:03:54.187948 systemd-logind[1711]: Session 15 logged out. Waiting for processes to exit. Aug 13 01:03:54.195305 systemd-logind[1711]: Removed session 15. Aug 13 01:03:54.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.64:22-147.75.109.163:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:54.207907 systemd[1]: Started sshd@15-172.31.21.64:22-147.75.109.163:53006.service. Aug 13 01:03:54.322000 audit[5824]: NETFILTER_CFG table=filter:133 family=2 entries=20 op=nft_register_rule pid=5824 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:54.322000 audit[5824]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc68aa1660 a2=0 a3=7ffc68aa164c items=0 ppid=2710 pid=5824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:54.322000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:54.328000 audit[5824]: NETFILTER_CFG table=nat:134 family=2 entries=26 op=nft_register_rule pid=5824 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:54.328000 audit[5824]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc68aa1660 a2=0 a3=0 items=0 ppid=2710 pid=5824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:54.328000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:54.344000 audit[5826]: NETFILTER_CFG table=filter:135 family=2 entries=32 op=nft_register_rule pid=5826 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:54.344000 audit[5826]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd057fd180 a2=0 a3=7ffd057fd16c items=0 ppid=2710 pid=5826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:54.344000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:54.349000 audit[5826]: NETFILTER_CFG table=nat:136 family=2 entries=26 op=nft_register_rule pid=5826 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:54.349000 audit[5826]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd057fd180 a2=0 a3=0 items=0 ppid=2710 pid=5826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:54.349000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:54.410526 sshd[5821]: Accepted publickey for core from 147.75.109.163 port 53006 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:54.409000 audit[5821]: USER_ACCT pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:54.410000 audit[5821]: CRED_ACQ pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:54.410000 audit[5821]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5250cd20 a2=3 a3=0 items=0 ppid=1 pid=5821 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:54.410000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:54.415286 sshd[5821]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:54.425230 systemd[1]: Started session-16.scope. Aug 13 01:03:54.425485 systemd-logind[1711]: New session 16 of user core. Aug 13 01:03:54.432000 audit[5821]: USER_START pid=5821 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:54.435000 audit[5827]: CRED_ACQ pid=5827 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:55.905897 sshd[5821]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:55.942787 kernel: kauditd_printk_skb: 43 callbacks suppressed Aug 13 01:03:55.960454 kernel: audit: type=1106 audit(1755047035.908:1599): pid=5821 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:55.962134 kernel: audit: type=1104 audit(1755047035.908:1600): pid=5821 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:55.962230 kernel: audit: type=1131 audit(1755047035.920:1601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.64:22-147.75.109.163:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:55.962411 kernel: audit: type=1130 audit(1755047035.942:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.64:22-147.75.109.163:53010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:55.908000 audit[5821]: USER_END pid=5821 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:55.908000 audit[5821]: CRED_DISP pid=5821 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:55.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.64:22-147.75.109.163:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:55.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.64:22-147.75.109.163:53010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:55.911602 systemd[1]: sshd@15-172.31.21.64:22-147.75.109.163:53006.service: Deactivated successfully. Aug 13 01:03:55.923878 systemd[1]: session-16.scope: Deactivated successfully. Aug 13 01:03:55.926589 systemd-logind[1711]: Session 16 logged out. Waiting for processes to exit. Aug 13 01:03:55.943489 systemd[1]: Started sshd@16-172.31.21.64:22-147.75.109.163:53010.service. Aug 13 01:03:55.946198 systemd-logind[1711]: Removed session 16. Aug 13 01:03:56.220000 audit[5841]: USER_ACCT pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:56.247644 kernel: audit: type=1101 audit(1755047036.220:1603): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:56.248575 kernel: audit: type=1103 audit(1755047036.230:1604): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:56.248646 kernel: audit: type=1006 audit(1755047036.230:1605): pid=5841 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Aug 13 01:03:56.230000 audit[5841]: CRED_ACQ pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:56.230000 audit[5841]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4689d580 a2=3 a3=0 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:56.230000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:56.263480 sshd[5841]: Accepted publickey for core from 147.75.109.163 port 53010 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:56.265666 kernel: audit: type=1300 audit(1755047036.230:1605): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4689d580 a2=3 a3=0 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:56.265774 kernel: audit: type=1327 audit(1755047036.230:1605): proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:56.276322 kernel: audit: type=1105 audit(1755047036.265:1606): pid=5841 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:56.265000 audit[5841]: USER_START pid=5841 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:56.233263 sshd[5841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:56.270000 audit[5843]: CRED_ACQ pid=5843 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:56.254582 systemd[1]: Started session-17.scope. Aug 13 01:03:56.256961 systemd-logind[1711]: New session 17 of user core. Aug 13 01:03:57.866792 sshd[5841]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:57.869000 audit[5841]: USER_END pid=5841 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:57.870000 audit[5841]: CRED_DISP pid=5841 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:57.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.64:22-147.75.109.163:53010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:57.873489 systemd[1]: sshd@16-172.31.21.64:22-147.75.109.163:53010.service: Deactivated successfully. Aug 13 01:03:57.874407 systemd[1]: session-17.scope: Deactivated successfully. Aug 13 01:03:57.875202 systemd-logind[1711]: Session 17 logged out. Waiting for processes to exit. Aug 13 01:03:57.876196 systemd-logind[1711]: Removed session 17. Aug 13 01:04:00.510000 audit[5871]: NETFILTER_CFG table=filter:137 family=2 entries=20 op=nft_register_rule pid=5871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:04:00.510000 audit[5871]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcc665cfc0 a2=0 a3=7ffcc665cfac items=0 ppid=2710 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:00.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:04:00.518000 audit[5871]: NETFILTER_CFG table=nat:138 family=2 entries=110 op=nft_register_chain pid=5871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:04:00.518000 audit[5871]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffcc665cfc0 a2=0 a3=7ffcc665cfac items=0 ppid=2710 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:00.518000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:04:02.919733 systemd[1]: Started sshd@17-172.31.21.64:22-147.75.109.163:45396.service. Aug 13 01:04:02.953252 kernel: kauditd_printk_skb: 10 callbacks suppressed Aug 13 01:04:02.968192 kernel: audit: type=1130 audit(1755047042.920:1613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.64:22-147.75.109.163:45396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:02.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.64:22-147.75.109.163:45396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:03.689000 audit[5875]: USER_ACCT pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:03.718169 kernel: audit: type=1101 audit(1755047043.689:1614): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:03.739151 kernel: audit: type=1103 audit(1755047043.717:1615): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:03.717000 audit[5875]: CRED_ACQ pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:03.740099 sshd[5875]: Accepted publickey for core from 147.75.109.163 port 45396 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:04:03.732812 sshd[5875]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:04:03.757353 kernel: audit: type=1006 audit(1755047043.717:1616): pid=5875 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Aug 13 01:04:03.758336 kernel: audit: type=1300 audit(1755047043.717:1616): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff36546090 a2=3 a3=0 items=0 ppid=1 pid=5875 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:03.717000 audit[5875]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff36546090 a2=3 a3=0 items=0 ppid=1 pid=5875 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:03.717000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:03.767842 systemd[1]: Started session-18.scope. Aug 13 01:04:03.780405 systemd-logind[1711]: New session 18 of user core. Aug 13 01:04:03.782347 kernel: audit: type=1327 audit(1755047043.717:1616): proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:03.804000 audit[5875]: USER_START pid=5875 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:03.825147 kernel: audit: type=1105 audit(1755047043.804:1617): pid=5875 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:03.824000 audit[5877]: CRED_ACQ pid=5877 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:03.840173 kernel: audit: type=1103 audit(1755047043.824:1618): pid=5877 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:05.342795 sshd[5875]: pam_unix(sshd:session): session closed for user core Aug 13 01:04:05.368826 kernel: audit: type=1106 audit(1755047045.343:1619): pid=5875 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:05.369640 kernel: audit: type=1104 audit(1755047045.343:1620): pid=5875 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:05.343000 audit[5875]: USER_END pid=5875 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:05.343000 audit[5875]: CRED_DISP pid=5875 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:05.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.64:22-147.75.109.163:45396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:05.348541 systemd[1]: sshd@17-172.31.21.64:22-147.75.109.163:45396.service: Deactivated successfully. Aug 13 01:04:05.353066 systemd[1]: session-18.scope: Deactivated successfully. Aug 13 01:04:05.355809 systemd-logind[1711]: Session 18 logged out. Waiting for processes to exit. Aug 13 01:04:05.358123 systemd-logind[1711]: Removed session 18. Aug 13 01:04:10.380055 systemd[1]: Started sshd@18-172.31.21.64:22-147.75.109.163:46056.service. Aug 13 01:04:10.385034 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 01:04:10.386391 kernel: audit: type=1130 audit(1755047050.379:1622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.64:22-147.75.109.163:46056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:10.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.64:22-147.75.109.163:46056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:10.702000 audit[5888]: USER_ACCT pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:10.739469 kernel: audit: type=1101 audit(1755047050.702:1623): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:10.740245 kernel: audit: type=1103 audit(1755047050.713:1624): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:10.740307 kernel: audit: type=1006 audit(1755047050.714:1625): pid=5888 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Aug 13 01:04:10.740440 kernel: audit: type=1300 audit(1755047050.714:1625): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff20f0f940 a2=3 a3=0 items=0 ppid=1 pid=5888 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:10.740483 kernel: audit: type=1327 audit(1755047050.714:1625): proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:10.713000 audit[5888]: CRED_ACQ pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:10.714000 audit[5888]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff20f0f940 a2=3 a3=0 items=0 ppid=1 pid=5888 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:10.714000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:10.744693 sshd[5888]: Accepted publickey for core from 147.75.109.163 port 46056 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:04:10.730242 sshd[5888]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:04:10.750499 systemd[1]: Started session-19.scope. Aug 13 01:04:10.751092 systemd-logind[1711]: New session 19 of user core. Aug 13 01:04:10.757000 audit[5888]: USER_START pid=5888 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:10.762000 audit[5890]: CRED_ACQ pid=5890 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:10.774365 kernel: audit: type=1105 audit(1755047050.757:1626): pid=5888 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:10.774549 kernel: audit: type=1103 audit(1755047050.762:1627): pid=5890 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:11.610910 sshd[5888]: pam_unix(sshd:session): session closed for user core Aug 13 01:04:11.613000 audit[5888]: USER_END pid=5888 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:11.623147 kernel: audit: type=1106 audit(1755047051.613:1628): pid=5888 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:11.621000 audit[5888]: CRED_DISP pid=5888 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:11.632141 kernel: audit: type=1104 audit(1755047051.621:1629): pid=5888 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:11.632867 systemd[1]: sshd@18-172.31.21.64:22-147.75.109.163:46056.service: Deactivated successfully. Aug 13 01:04:11.635180 systemd[1]: session-19.scope: Deactivated successfully. Aug 13 01:04:11.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.64:22-147.75.109.163:46056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:11.636627 systemd-logind[1711]: Session 19 logged out. Waiting for processes to exit. Aug 13 01:04:11.637745 systemd-logind[1711]: Removed session 19. Aug 13 01:04:14.893333 systemd[1]: run-containerd-runc-k8s.io-dc0840a8da1a1be569b91fcdfee0323d0edabadb0ff62b7b91c5af92251bc009-runc.rJj3gk.mount: Deactivated successfully. Aug 13 01:04:16.639937 systemd[1]: Started sshd@19-172.31.21.64:22-147.75.109.163:46058.service. Aug 13 01:04:16.655136 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 01:04:16.656149 kernel: audit: type=1130 audit(1755047056.639:1631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.64:22-147.75.109.163:46058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:16.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.64:22-147.75.109.163:46058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:16.961000 audit[5944]: USER_ACCT pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:16.966377 sshd[5944]: Accepted publickey for core from 147.75.109.163 port 46058 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:04:16.971000 audit[5944]: CRED_ACQ pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:16.975539 sshd[5944]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:04:16.983451 kernel: audit: type=1101 audit(1755047056.961:1632): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:16.983576 kernel: audit: type=1103 audit(1755047056.971:1633): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:16.983688 kernel: audit: type=1006 audit(1755047056.971:1634): pid=5944 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Aug 13 01:04:16.990035 kernel: audit: type=1300 audit(1755047056.971:1634): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8f096ee0 a2=3 a3=0 items=0 ppid=1 pid=5944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:16.971000 audit[5944]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8f096ee0 a2=3 a3=0 items=0 ppid=1 pid=5944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:16.989440 systemd[1]: Started session-20.scope. Aug 13 01:04:16.990797 systemd-logind[1711]: New session 20 of user core. Aug 13 01:04:16.971000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:16.999000 audit[5944]: USER_START pid=5944 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:17.014022 kernel: audit: type=1327 audit(1755047056.971:1634): proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:17.014768 kernel: audit: type=1105 audit(1755047056.999:1635): pid=5944 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:17.014862 kernel: audit: type=1103 audit(1755047057.005:1636): pid=5946 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:17.005000 audit[5946]: CRED_ACQ pid=5946 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:18.550322 sshd[5944]: pam_unix(sshd:session): session closed for user core Aug 13 01:04:18.553000 audit[5944]: USER_END pid=5944 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:18.565287 kernel: audit: type=1106 audit(1755047058.553:1637): pid=5944 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:18.553000 audit[5944]: CRED_DISP pid=5944 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:18.577784 kernel: audit: type=1104 audit(1755047058.553:1638): pid=5944 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:18.584720 systemd[1]: sshd@19-172.31.21.64:22-147.75.109.163:46058.service: Deactivated successfully. Aug 13 01:04:18.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.64:22-147.75.109.163:46058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:18.587012 systemd[1]: session-20.scope: Deactivated successfully. Aug 13 01:04:18.588153 systemd-logind[1711]: Session 20 logged out. Waiting for processes to exit. Aug 13 01:04:18.589931 systemd-logind[1711]: Removed session 20. Aug 13 01:04:23.613819 systemd[1]: Started sshd@20-172.31.21.64:22-147.75.109.163:57280.service. Aug 13 01:04:23.622388 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 01:04:23.624565 kernel: audit: type=1130 audit(1755047063.612:1640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.21.64:22-147.75.109.163:57280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:23.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.21.64:22-147.75.109.163:57280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:24.008610 sshd[5958]: Accepted publickey for core from 147.75.109.163 port 57280 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:04:24.005000 audit[5958]: USER_ACCT pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:24.026638 kernel: audit: type=1101 audit(1755047064.005:1641): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:24.031633 kernel: audit: type=1103 audit(1755047064.007:1642): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:24.031731 kernel: audit: type=1006 audit(1755047064.007:1643): pid=5958 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Aug 13 01:04:24.007000 audit[5958]: CRED_ACQ pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:24.007000 audit[5958]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd88ef1900 a2=3 a3=0 items=0 ppid=1 pid=5958 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:24.042199 kernel: audit: type=1300 audit(1755047064.007:1643): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd88ef1900 a2=3 a3=0 items=0 ppid=1 pid=5958 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:24.042653 sshd[5958]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:04:24.007000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:24.048401 kernel: audit: type=1327 audit(1755047064.007:1643): proctitle=737368643A20636F7265205B707269765D Aug 13 01:04:24.068390 systemd[1]: Started session-21.scope. Aug 13 01:04:24.068903 systemd-logind[1711]: New session 21 of user core. Aug 13 01:04:24.090980 kernel: audit: type=1105 audit(1755047064.077:1644): pid=5958 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:24.077000 audit[5958]: USER_START pid=5958 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:24.089000 audit[5960]: CRED_ACQ pid=5960 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:24.100159 kernel: audit: type=1103 audit(1755047064.089:1645): pid=5960 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:26.042000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.084225 kernel: audit: type=1400 audit(1755047066.042:1646): avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.087618 kernel: audit: type=1300 audit(1755047066.042:1646): arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c011cf7980 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:04:26.042000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c011cf7980 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:04:26.042000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:04:26.042000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.042000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00a3bcff0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:04:26.042000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:04:26.050000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.050000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00a3bd050 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:04:26.050000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:04:26.063000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.063000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c00fc97800 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:04:26.063000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:04:26.091000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.091000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001d8bf20 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:26.091000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:26.101000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.101000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00154bad0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:26.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:26.113000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.113000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00fc97830 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:04:26.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:04:26.113000 audit[2431]: AVC avc: denied { watch } for pid=2431 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:26.113000 audit[2431]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c011cf7bc0 a2=fc6 a3=0 items=0 ppid=2306 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c736 key=(null) Aug 13 01:04:26.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3634002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 01:04:26.214712 sshd[5958]: pam_unix(sshd:session): session closed for user core Aug 13 01:04:26.227000 audit[5958]: USER_END pid=5958 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:26.228000 audit[5958]: CRED_DISP pid=5958 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:04:26.238062 systemd[1]: sshd@20-172.31.21.64:22-147.75.109.163:57280.service: Deactivated successfully. Aug 13 01:04:26.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.21.64:22-147.75.109.163:57280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:04:26.246364 systemd[1]: session-21.scope: Deactivated successfully. Aug 13 01:04:26.248820 systemd-logind[1711]: Session 21 logged out. Waiting for processes to exit. Aug 13 01:04:26.251401 systemd-logind[1711]: Removed session 21. Aug 13 01:04:33.650161 kernel: kauditd_printk_skb: 25 callbacks suppressed Aug 13 01:04:33.679639 kernel: audit: type=1400 audit(1755047073.645:1657): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.683787 kernel: audit: type=1300 audit(1755047073.645:1657): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e9e5a0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:33.686141 kernel: audit: type=1327 audit(1755047073.645:1657): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:33.687845 kernel: audit: type=1400 audit(1755047073.656:1658): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.687922 kernel: audit: type=1300 audit(1755047073.656:1658): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00203c3c0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:33.645000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.712663 kernel: audit: type=1327 audit(1755047073.656:1658): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:33.715379 kernel: audit: type=1400 audit(1755047073.663:1659): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.715470 kernel: audit: type=1300 audit(1755047073.663:1659): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e9e5c0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:33.715507 kernel: audit: type=1327 audit(1755047073.663:1659): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:33.645000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e9e5a0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:33.735672 kernel: audit: type=1400 audit(1755047073.677:1660): avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.645000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:33.656000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.656000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00203c3c0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:33.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:33.663000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.663000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e9e5c0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:33.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:33.677000 audit[2473]: AVC avc: denied { watch } for pid=2473 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:33.677000 audit[2473]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00203c3e0 a2=fc6 a3=0 items=0 ppid=2283 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:33.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:38.379000 audit[5208]: AVC avc: denied { watch } for pid=5208 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_03_04.1463670398/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c398 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c398 tclass=file permissive=0 Aug 13 01:04:38.379000 audit[5208]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001bf1f00 a2=fc6 a3=0 items=0 ppid=4714 pid=5208 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c398 key=(null) Aug 13 01:04:38.379000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:04:38.529000 audit[5168]: AVC avc: denied { watch } for pid=5168 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_03_04.2761460499/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c242,c772 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c242,c772 tclass=file permissive=0 Aug 13 01:04:38.529000 audit[5168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0018e6160 a2=fc6 a3=0 items=0 ppid=4429 pid=5168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c242,c772 key=(null) Aug 13 01:04:38.529000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:04:40.701460 systemd[1]: cri-containerd-c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6.scope: Deactivated successfully. Aug 13 01:04:40.729570 kernel: kauditd_printk_skb: 8 callbacks suppressed Aug 13 01:04:40.732436 kernel: audit: type=1334 audit(1755047080.709:1663): prog-id=90 op=UNLOAD Aug 13 01:04:40.733334 kernel: audit: type=1334 audit(1755047080.710:1664): prog-id=111 op=UNLOAD Aug 13 01:04:40.709000 audit: BPF prog-id=90 op=UNLOAD Aug 13 01:04:40.710000 audit: BPF prog-id=111 op=UNLOAD Aug 13 01:04:40.704806 systemd[1]: cri-containerd-c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6.scope: Consumed 6.231s CPU time. Aug 13 01:04:40.762381 env[1719]: time="2025-08-13T01:04:40.762301405Z" level=info msg="shim disconnected" id=c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6 Aug 13 01:04:40.762381 env[1719]: time="2025-08-13T01:04:40.762356207Z" level=warning msg="cleaning up after shim disconnected" id=c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6 namespace=k8s.io Aug 13 01:04:40.762381 env[1719]: time="2025-08-13T01:04:40.762366405Z" level=info msg="cleaning up dead shim" Aug 13 01:04:40.769763 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6-rootfs.mount: Deactivated successfully. Aug 13 01:04:40.779558 env[1719]: time="2025-08-13T01:04:40.779497695Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:04:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6010 runtime=io.containerd.runc.v2\n" Aug 13 01:04:40.963474 systemd[1]: cri-containerd-99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5.scope: Deactivated successfully. Aug 13 01:04:40.963000 audit: BPF prog-id=123 op=UNLOAD Aug 13 01:04:40.963961 systemd[1]: cri-containerd-99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5.scope: Consumed 8.456s CPU time. Aug 13 01:04:40.968863 kernel: audit: type=1334 audit(1755047080.963:1665): prog-id=123 op=UNLOAD Aug 13 01:04:40.968000 audit: BPF prog-id=126 op=UNLOAD Aug 13 01:04:40.975896 kernel: audit: type=1334 audit(1755047080.968:1666): prog-id=126 op=UNLOAD Aug 13 01:04:41.007451 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5-rootfs.mount: Deactivated successfully. Aug 13 01:04:41.009934 env[1719]: time="2025-08-13T01:04:41.009880392Z" level=info msg="shim disconnected" id=99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5 Aug 13 01:04:41.010181 env[1719]: time="2025-08-13T01:04:41.009935661Z" level=warning msg="cleaning up after shim disconnected" id=99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5 namespace=k8s.io Aug 13 01:04:41.010181 env[1719]: time="2025-08-13T01:04:41.009947859Z" level=info msg="cleaning up dead shim" Aug 13 01:04:41.020422 env[1719]: time="2025-08-13T01:04:41.020184422Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:04:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6034 runtime=io.containerd.runc.v2\n" Aug 13 01:04:41.832942 kubelet[2607]: I0813 01:04:41.832884 2607 scope.go:117] "RemoveContainer" containerID="c32cbf92f8fc7c07247d669d72e8224e52490a1c33bb9f1c7be6969358e605b6" Aug 13 01:04:41.835447 kubelet[2607]: I0813 01:04:41.834508 2607 scope.go:117] "RemoveContainer" containerID="99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5" Aug 13 01:04:41.864728 env[1719]: time="2025-08-13T01:04:41.864171041Z" level=info msg="CreateContainer within sandbox \"48f859152624e88d8f307fbdba3c6d2e43e123dc43d749acc5aa841d523cb8c9\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Aug 13 01:04:41.864728 env[1719]: time="2025-08-13T01:04:41.864500854Z" level=info msg="CreateContainer within sandbox \"22a7b363fe0a0cb16e77522f251eb343aea4240b8ec8d14bd04cf7705ef7cb66\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Aug 13 01:04:41.916566 env[1719]: time="2025-08-13T01:04:41.914677875Z" level=info msg="CreateContainer within sandbox \"22a7b363fe0a0cb16e77522f251eb343aea4240b8ec8d14bd04cf7705ef7cb66\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"c942c7e79c0dfd650c556bc534dc2024304de17135b05f3f6e087eb111220e0a\"" Aug 13 01:04:41.915403 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3339033824.mount: Deactivated successfully. Aug 13 01:04:41.917065 env[1719]: time="2025-08-13T01:04:41.916617040Z" level=info msg="StartContainer for \"c942c7e79c0dfd650c556bc534dc2024304de17135b05f3f6e087eb111220e0a\"" Aug 13 01:04:41.942294 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount174645314.mount: Deactivated successfully. Aug 13 01:04:41.946513 env[1719]: time="2025-08-13T01:04:41.946464360Z" level=info msg="CreateContainer within sandbox \"48f859152624e88d8f307fbdba3c6d2e43e123dc43d749acc5aa841d523cb8c9\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db\"" Aug 13 01:04:41.947532 env[1719]: time="2025-08-13T01:04:41.947501706Z" level=info msg="StartContainer for \"82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db\"" Aug 13 01:04:41.966984 systemd[1]: Started cri-containerd-c942c7e79c0dfd650c556bc534dc2024304de17135b05f3f6e087eb111220e0a.scope. Aug 13 01:04:41.989349 systemd[1]: Started cri-containerd-82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db.scope. Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.018840 kernel: audit: type=1400 audit(1755047082.004:1667): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.018963 kernel: audit: type=1400 audit(1755047082.004:1668): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.031205 kernel: audit: type=1400 audit(1755047082.004:1669): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.048078 kernel: audit: type=1400 audit(1755047082.004:1670): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.048209 kernel: audit: type=1400 audit(1755047082.004:1671): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.048253 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.019000 audit: BPF prog-id=240 op=LOAD Aug 13 01:04:42.020000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.020000 audit[6056]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2283 pid=6056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343263376537396330646664363530633535366263353334646332 Aug 13 01:04:42.020000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.020000 audit[6056]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2283 pid=6056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343263376537396330646664363530633535366263353334646332 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit: BPF prog-id=241 op=LOAD Aug 13 01:04:42.022000 audit[6056]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ca2d0 items=0 ppid=2283 pid=6056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343263376537396330646664363530633535366263353334646332 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit: BPF prog-id=242 op=LOAD Aug 13 01:04:42.022000 audit[6056]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ca318 items=0 ppid=2283 pid=6056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343263376537396330646664363530633535366263353334646332 Aug 13 01:04:42.022000 audit: BPF prog-id=242 op=UNLOAD Aug 13 01:04:42.022000 audit: BPF prog-id=241 op=UNLOAD Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { perfmon } for pid=6056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit[6056]: AVC avc: denied { bpf } for pid=6056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.022000 audit: BPF prog-id=243 op=LOAD Aug 13 01:04:42.022000 audit[6056]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ca728 items=0 ppid=2283 pid=6056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343263376537396330646664363530633535366263353334646332 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.052000 audit: BPF prog-id=244 op=LOAD Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2731 pid=6081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636631366233306561646338343133333134653634633732636131 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2731 pid=6081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636631366233306561646338343133333134653634633732636131 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.054000 audit: BPF prog-id=245 op=LOAD Aug 13 01:04:42.054000 audit[6081]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000253d0 items=0 ppid=2731 pid=6081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636631366233306561646338343133333134653634633732636131 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit: BPF prog-id=246 op=LOAD Aug 13 01:04:42.055000 audit[6081]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025418 items=0 ppid=2731 pid=6081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636631366233306561646338343133333134653634633732636131 Aug 13 01:04:42.055000 audit: BPF prog-id=246 op=UNLOAD Aug 13 01:04:42.055000 audit: BPF prog-id=245 op=UNLOAD Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { perfmon } for pid=6081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit[6081]: AVC avc: denied { bpf } for pid=6081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:42.055000 audit: BPF prog-id=247 op=LOAD Aug 13 01:04:42.055000 audit[6081]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025828 items=0 ppid=2731 pid=6081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:42.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636631366233306561646338343133333134653634633732636131 Aug 13 01:04:42.099531 env[1719]: time="2025-08-13T01:04:42.094512594Z" level=info msg="StartContainer for \"82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db\" returns successfully" Aug 13 01:04:42.103983 env[1719]: time="2025-08-13T01:04:42.103945448Z" level=info msg="StartContainer for \"c942c7e79c0dfd650c556bc534dc2024304de17135b05f3f6e087eb111220e0a\" returns successfully" Aug 13 01:04:42.906106 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3976370146.mount: Deactivated successfully. Aug 13 01:04:43.540000 audit[6075]: AVC avc: denied { watch } for pid=6075 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:43.540000 audit[6075]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004a6030 a2=fc6 a3=0 items=0 ppid=2283 pid=6075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:43.540000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:43.541000 audit[6075]: AVC avc: denied { watch } for pid=6075 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:04:43.541000 audit[6075]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00047e0a0 a2=fc6 a3=0 items=0 ppid=2283 pid=6075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c373,c877 key=(null) Aug 13 01:04:43.541000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:04:43.768576 systemd[1]: run-containerd-runc-k8s.io-21e13e6398b2c454a20008c2ed8e259835473d19a900b5366ca08941384f95ed-runc.yPi034.mount: Deactivated successfully. Aug 13 01:04:44.896817 systemd[1]: run-containerd-runc-k8s.io-dc0840a8da1a1be569b91fcdfee0323d0edabadb0ff62b7b91c5af92251bc009-runc.l3QhcK.mount: Deactivated successfully. Aug 13 01:04:45.362249 kubelet[2607]: E0813 01:04:45.359280 2607 controller.go:195] "Failed to update lease" err="Put \"https://172.31.21.64:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-64?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Aug 13 01:04:45.901323 systemd[1]: cri-containerd-816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94.scope: Deactivated successfully. Aug 13 01:04:45.901570 systemd[1]: cri-containerd-816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94.scope: Consumed 3.658s CPU time. Aug 13 01:04:45.907147 kernel: kauditd_printk_skb: 116 callbacks suppressed Aug 13 01:04:45.907309 kernel: audit: type=1334 audit(1755047085.904:1704): prog-id=86 op=UNLOAD Aug 13 01:04:45.904000 audit: BPF prog-id=86 op=UNLOAD Aug 13 01:04:45.904000 audit: BPF prog-id=105 op=UNLOAD Aug 13 01:04:45.910815 kernel: audit: type=1334 audit(1755047085.904:1705): prog-id=105 op=UNLOAD Aug 13 01:04:45.932847 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94-rootfs.mount: Deactivated successfully. Aug 13 01:04:45.936656 env[1719]: time="2025-08-13T01:04:45.935088907Z" level=info msg="shim disconnected" id=816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94 Aug 13 01:04:45.936656 env[1719]: time="2025-08-13T01:04:45.935230843Z" level=warning msg="cleaning up after shim disconnected" id=816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94 namespace=k8s.io Aug 13 01:04:45.936656 env[1719]: time="2025-08-13T01:04:45.935247528Z" level=info msg="cleaning up dead shim" Aug 13 01:04:45.944529 env[1719]: time="2025-08-13T01:04:45.944482014Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:04:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6180 runtime=io.containerd.runc.v2\n" Aug 13 01:04:46.844084 kubelet[2607]: I0813 01:04:46.844031 2607 scope.go:117] "RemoveContainer" containerID="816c502b91f8acf77b3621b8dc6c661908d2417578e8324b5d07ebaa37175d94" Aug 13 01:04:46.847399 env[1719]: time="2025-08-13T01:04:46.847350510Z" level=info msg="CreateContainer within sandbox \"f75be048c30e774fa5c779ea064fff9344cd832af8df325ea857fd97d186c6b4\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Aug 13 01:04:46.885808 env[1719]: time="2025-08-13T01:04:46.884074038Z" level=info msg="CreateContainer within sandbox \"f75be048c30e774fa5c779ea064fff9344cd832af8df325ea857fd97d186c6b4\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"d5f42e32153e61e7ddf1cbf86b3a8b8d5b4d6e6a2c6a2e37ed759be7967ed190\"" Aug 13 01:04:46.885808 env[1719]: time="2025-08-13T01:04:46.885326607Z" level=info msg="StartContainer for \"d5f42e32153e61e7ddf1cbf86b3a8b8d5b4d6e6a2c6a2e37ed759be7967ed190\"" Aug 13 01:04:46.885428 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount173413906.mount: Deactivated successfully. Aug 13 01:04:46.916405 systemd[1]: Started cri-containerd-d5f42e32153e61e7ddf1cbf86b3a8b8d5b4d6e6a2c6a2e37ed759be7967ed190.scope. Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954816 kernel: audit: type=1400 audit(1755047086.941:1706): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954959 kernel: audit: type=1400 audit(1755047086.941:1707): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.967528 kernel: audit: type=1400 audit(1755047086.941:1708): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.967861 kernel: audit: type=1400 audit(1755047086.941:1709): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.967913 kernel: audit: type=1400 audit(1755047086.941:1710): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.978971 kernel: audit: type=1400 audit(1755047086.941:1711): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.994097 kernel: audit: type=1400 audit(1755047086.941:1712): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.995049 kernel: audit: type=1400 audit(1755047086.941:1713): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit: BPF prog-id=248 op=LOAD Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2330 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:46.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663432653332313533653631653764646631636266383662336138 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2330 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:46.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663432653332313533653631653764646631636266383662336138 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.948000 audit: BPF prog-id=249 op=LOAD Aug 13 01:04:46.948000 audit[6200]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00037e9d0 items=0 ppid=2330 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:46.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663432653332313533653631653764646631636266383662336138 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.954000 audit: BPF prog-id=250 op=LOAD Aug 13 01:04:46.954000 audit[6200]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00037ea18 items=0 ppid=2330 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:46.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663432653332313533653631653764646631636266383662336138 Aug 13 01:04:46.954000 audit: BPF prog-id=250 op=UNLOAD Aug 13 01:04:46.954000 audit: BPF prog-id=249 op=UNLOAD Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { perfmon } for pid=6200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit[6200]: AVC avc: denied { bpf } for pid=6200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:04:46.955000 audit: BPF prog-id=251 op=LOAD Aug 13 01:04:46.955000 audit[6200]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00037ee28 items=0 ppid=2330 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:04:46.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435663432653332313533653631653764646631636266383662336138 Aug 13 01:04:47.027102 env[1719]: time="2025-08-13T01:04:47.027058556Z" level=info msg="StartContainer for \"d5f42e32153e61e7ddf1cbf86b3a8b8d5b4d6e6a2c6a2e37ed759be7967ed190\" returns successfully" Aug 13 01:04:47.193090 systemd[1]: run-containerd-runc-k8s.io-3dc1d2c261de99e4a5ff18b60639d94e13f9b1b548bb6b34a208e0c09690ddf4-runc.i5suPh.mount: Deactivated successfully. Aug 13 01:04:47.252647 systemd[1]: run-containerd-runc-k8s.io-dc0840a8da1a1be569b91fcdfee0323d0edabadb0ff62b7b91c5af92251bc009-runc.6lYclS.mount: Deactivated successfully. Aug 13 01:04:53.803372 kernel: kauditd_printk_skb: 49 callbacks suppressed Aug 13 01:04:53.804969 kernel: audit: type=1334 audit(1755047093.795:1724): prog-id=244 op=UNLOAD Aug 13 01:04:53.805084 kernel: audit: type=1334 audit(1755047093.803:1725): prog-id=247 op=UNLOAD Aug 13 01:04:53.795000 audit: BPF prog-id=244 op=UNLOAD Aug 13 01:04:53.803000 audit: BPF prog-id=247 op=UNLOAD Aug 13 01:04:53.796729 systemd[1]: cri-containerd-82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db.scope: Deactivated successfully. Aug 13 01:04:53.828826 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db-rootfs.mount: Deactivated successfully. Aug 13 01:04:53.849624 env[1719]: time="2025-08-13T01:04:53.849567172Z" level=info msg="shim disconnected" id=82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db Aug 13 01:04:53.850550 env[1719]: time="2025-08-13T01:04:53.849979832Z" level=warning msg="cleaning up after shim disconnected" id=82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db namespace=k8s.io Aug 13 01:04:53.850550 env[1719]: time="2025-08-13T01:04:53.849997031Z" level=info msg="cleaning up dead shim" Aug 13 01:04:53.860694 env[1719]: time="2025-08-13T01:04:53.860634628Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:04:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6308 runtime=io.containerd.runc.v2\n" Aug 13 01:04:53.890999 kubelet[2607]: I0813 01:04:53.890366 2607 scope.go:117] "RemoveContainer" containerID="99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5" Aug 13 01:04:53.890999 kubelet[2607]: I0813 01:04:53.890725 2607 scope.go:117] "RemoveContainer" containerID="82cf16b30eadc8413314e64c72ca1efd1b2df97c21fd330d22624223abf233db" Aug 13 01:04:53.902637 kubelet[2607]: E0813 01:04:53.902515 2607 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-747864d56d-qm27n_tigera-operator(9504db8b-85f9-411c-95b7-58dcc4e1ef17)\"" pod="tigera-operator/tigera-operator-747864d56d-qm27n" podUID="9504db8b-85f9-411c-95b7-58dcc4e1ef17" Aug 13 01:04:53.912750 env[1719]: time="2025-08-13T01:04:53.912708645Z" level=info msg="RemoveContainer for \"99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5\"" Aug 13 01:04:53.919395 env[1719]: time="2025-08-13T01:04:53.919330764Z" level=info msg="RemoveContainer for \"99386215010b3ac83bd88337719306804665205317d5b2c009829139834fc5d5\" returns successfully" Aug 13 01:04:55.380879 kubelet[2607]: E0813 01:04:55.380621 2607 controller.go:195] "Failed to update lease" err="Put \"https://172.31.21.64:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-64?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)"