Aug 13 00:59:49.008876 kernel: Linux version 5.15.189-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Aug 12 23:01:50 -00 2025 Aug 13 00:59:49.008905 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=8f8aacd9fbcdd713563d390e899e90bedf5577e4b1b261b4e57687d87edd6b57 Aug 13 00:59:49.008922 kernel: BIOS-provided physical RAM map: Aug 13 00:59:49.008932 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Aug 13 00:59:49.008950 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000786cdfff] usable Aug 13 00:59:49.008960 kernel: BIOS-e820: [mem 0x00000000786ce000-0x000000007894dfff] reserved Aug 13 00:59:49.008971 kernel: BIOS-e820: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Aug 13 00:59:49.008981 kernel: BIOS-e820: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Aug 13 00:59:49.008994 kernel: BIOS-e820: [mem 0x00000000789de000-0x000000007c97bfff] usable Aug 13 00:59:49.009004 kernel: BIOS-e820: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Aug 13 00:59:49.009014 kernel: NX (Execute Disable) protection: active Aug 13 00:59:49.009024 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Aug 13 00:59:49.009035 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Aug 13 00:59:49.009045 kernel: extended physical RAM map: Aug 13 00:59:49.009060 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Aug 13 00:59:49.009071 kernel: reserve setup_data: [mem 0x0000000000100000-0x0000000076813017] usable Aug 13 00:59:49.009082 kernel: reserve setup_data: [mem 0x0000000076813018-0x000000007681be57] usable Aug 13 00:59:49.009093 kernel: reserve setup_data: [mem 0x000000007681be58-0x00000000786cdfff] usable Aug 13 00:59:49.009104 kernel: reserve setup_data: [mem 0x00000000786ce000-0x000000007894dfff] reserved Aug 13 00:59:49.009115 kernel: reserve setup_data: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Aug 13 00:59:49.009126 kernel: reserve setup_data: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Aug 13 00:59:49.009137 kernel: reserve setup_data: [mem 0x00000000789de000-0x000000007c97bfff] usable Aug 13 00:59:49.009148 kernel: reserve setup_data: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Aug 13 00:59:49.009158 kernel: efi: EFI v2.70 by EDK II Aug 13 00:59:49.009172 kernel: efi: SMBIOS=0x7886a000 ACPI=0x7895d000 ACPI 2.0=0x7895d014 MEMATTR=0x77004a98 Aug 13 00:59:49.009183 kernel: SMBIOS 2.7 present. Aug 13 00:59:49.009194 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Aug 13 00:59:49.009205 kernel: Hypervisor detected: KVM Aug 13 00:59:49.009215 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Aug 13 00:59:49.009226 kernel: kvm-clock: cpu 0, msr 4919e001, primary cpu clock Aug 13 00:59:49.009237 kernel: kvm-clock: using sched offset of 3976751732 cycles Aug 13 00:59:49.009248 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Aug 13 00:59:49.009259 kernel: tsc: Detected 2499.996 MHz processor Aug 13 00:59:49.009271 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Aug 13 00:59:49.009282 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Aug 13 00:59:49.009295 kernel: last_pfn = 0x7c97c max_arch_pfn = 0x400000000 Aug 13 00:59:49.009306 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Aug 13 00:59:49.009317 kernel: Using GB pages for direct mapping Aug 13 00:59:49.009328 kernel: Secure boot disabled Aug 13 00:59:49.009339 kernel: ACPI: Early table checksum verification disabled Aug 13 00:59:49.009355 kernel: ACPI: RSDP 0x000000007895D014 000024 (v02 AMAZON) Aug 13 00:59:49.009367 kernel: ACPI: XSDT 0x000000007895C0E8 00006C (v01 AMAZON AMZNFACP 00000001 01000013) Aug 13 00:59:49.009382 kernel: ACPI: FACP 0x0000000078955000 000114 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Aug 13 00:59:49.009394 kernel: ACPI: DSDT 0x0000000078956000 00115A (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Aug 13 00:59:49.009406 kernel: ACPI: FACS 0x00000000789D0000 000040 Aug 13 00:59:49.009418 kernel: ACPI: WAET 0x000000007895B000 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Aug 13 00:59:49.009430 kernel: ACPI: SLIT 0x000000007895A000 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Aug 13 00:59:49.009442 kernel: ACPI: APIC 0x0000000078959000 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Aug 13 00:59:49.009454 kernel: ACPI: SRAT 0x0000000078958000 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Aug 13 00:59:49.009468 kernel: ACPI: HPET 0x0000000078954000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Aug 13 00:59:49.009479 kernel: ACPI: SSDT 0x0000000078953000 000759 (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Aug 13 00:59:49.009520 kernel: ACPI: SSDT 0x0000000078952000 00007F (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Aug 13 00:59:49.009531 kernel: ACPI: BGRT 0x0000000078951000 000038 (v01 AMAZON AMAZON 00000002 01000013) Aug 13 00:59:49.009543 kernel: ACPI: Reserving FACP table memory at [mem 0x78955000-0x78955113] Aug 13 00:59:49.009555 kernel: ACPI: Reserving DSDT table memory at [mem 0x78956000-0x78957159] Aug 13 00:59:49.009567 kernel: ACPI: Reserving FACS table memory at [mem 0x789d0000-0x789d003f] Aug 13 00:59:49.009580 kernel: ACPI: Reserving WAET table memory at [mem 0x7895b000-0x7895b027] Aug 13 00:59:49.009592 kernel: ACPI: Reserving SLIT table memory at [mem 0x7895a000-0x7895a06b] Aug 13 00:59:49.009606 kernel: ACPI: Reserving APIC table memory at [mem 0x78959000-0x78959075] Aug 13 00:59:49.009618 kernel: ACPI: Reserving SRAT table memory at [mem 0x78958000-0x7895809f] Aug 13 00:59:49.009630 kernel: ACPI: Reserving HPET table memory at [mem 0x78954000-0x78954037] Aug 13 00:59:49.009642 kernel: ACPI: Reserving SSDT table memory at [mem 0x78953000-0x78953758] Aug 13 00:59:49.009654 kernel: ACPI: Reserving SSDT table memory at [mem 0x78952000-0x7895207e] Aug 13 00:59:49.009666 kernel: ACPI: Reserving BGRT table memory at [mem 0x78951000-0x78951037] Aug 13 00:59:49.009677 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Aug 13 00:59:49.009689 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Aug 13 00:59:49.009701 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Aug 13 00:59:49.009724 kernel: NUMA: Initialized distance table, cnt=1 Aug 13 00:59:49.009735 kernel: NODE_DATA(0) allocated [mem 0x7a8ef000-0x7a8f4fff] Aug 13 00:59:49.009747 kernel: Zone ranges: Aug 13 00:59:49.009759 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Aug 13 00:59:49.009772 kernel: DMA32 [mem 0x0000000001000000-0x000000007c97bfff] Aug 13 00:59:49.009785 kernel: Normal empty Aug 13 00:59:49.009797 kernel: Movable zone start for each node Aug 13 00:59:49.009808 kernel: Early memory node ranges Aug 13 00:59:49.009820 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Aug 13 00:59:49.009835 kernel: node 0: [mem 0x0000000000100000-0x00000000786cdfff] Aug 13 00:59:49.009846 kernel: node 0: [mem 0x00000000789de000-0x000000007c97bfff] Aug 13 00:59:49.009859 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007c97bfff] Aug 13 00:59:49.009870 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Aug 13 00:59:49.009881 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Aug 13 00:59:49.009895 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Aug 13 00:59:49.009906 kernel: On node 0, zone DMA32: 13956 pages in unavailable ranges Aug 13 00:59:49.009922 kernel: ACPI: PM-Timer IO Port: 0xb008 Aug 13 00:59:49.009940 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Aug 13 00:59:49.009955 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Aug 13 00:59:49.009968 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Aug 13 00:59:49.009980 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Aug 13 00:59:49.009992 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Aug 13 00:59:49.010005 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Aug 13 00:59:49.010018 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Aug 13 00:59:49.010030 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Aug 13 00:59:49.010041 kernel: TSC deadline timer available Aug 13 00:59:49.010052 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Aug 13 00:59:49.010063 kernel: [mem 0x7ca00000-0xffffffff] available for PCI devices Aug 13 00:59:49.010076 kernel: Booting paravirtualized kernel on KVM Aug 13 00:59:49.010087 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Aug 13 00:59:49.010100 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Aug 13 00:59:49.010111 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Aug 13 00:59:49.010124 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Aug 13 00:59:49.010136 kernel: pcpu-alloc: [0] 0 1 Aug 13 00:59:49.010147 kernel: kvm-guest: stealtime: cpu 0, msr 7a41c0c0 Aug 13 00:59:49.010157 kernel: kvm-guest: PV spinlocks enabled Aug 13 00:59:49.010169 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Aug 13 00:59:49.010184 kernel: Built 1 zonelists, mobility grouping on. Total pages: 501318 Aug 13 00:59:49.010196 kernel: Policy zone: DMA32 Aug 13 00:59:49.010210 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=8f8aacd9fbcdd713563d390e899e90bedf5577e4b1b261b4e57687d87edd6b57 Aug 13 00:59:49.010222 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Aug 13 00:59:49.010235 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Aug 13 00:59:49.010247 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Aug 13 00:59:49.010261 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Aug 13 00:59:49.010277 kernel: Memory: 1876640K/2037804K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47488K init, 4092K bss, 160904K reserved, 0K cma-reserved) Aug 13 00:59:49.010290 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Aug 13 00:59:49.010303 kernel: Kernel/User page tables isolation: enabled Aug 13 00:59:49.010316 kernel: ftrace: allocating 34608 entries in 136 pages Aug 13 00:59:49.010329 kernel: ftrace: allocated 136 pages with 2 groups Aug 13 00:59:49.010343 kernel: rcu: Hierarchical RCU implementation. Aug 13 00:59:49.010358 kernel: rcu: RCU event tracing is enabled. Aug 13 00:59:49.010386 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Aug 13 00:59:49.010401 kernel: Rude variant of Tasks RCU enabled. Aug 13 00:59:49.010416 kernel: Tracing variant of Tasks RCU enabled. Aug 13 00:59:49.010430 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Aug 13 00:59:49.010445 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Aug 13 00:59:49.010462 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Aug 13 00:59:49.010476 kernel: random: crng init done Aug 13 00:59:49.010508 kernel: Console: colour dummy device 80x25 Aug 13 00:59:49.010542 kernel: printk: console [tty0] enabled Aug 13 00:59:49.010554 kernel: printk: console [ttyS0] enabled Aug 13 00:59:49.010566 kernel: ACPI: Core revision 20210730 Aug 13 00:59:49.010578 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Aug 13 00:59:49.010595 kernel: APIC: Switch to symmetric I/O mode setup Aug 13 00:59:49.010610 kernel: x2apic enabled Aug 13 00:59:49.010624 kernel: Switched APIC routing to physical x2apic. Aug 13 00:59:49.010639 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Aug 13 00:59:49.010654 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499996) Aug 13 00:59:49.010670 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Aug 13 00:59:49.010684 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Aug 13 00:59:49.010702 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Aug 13 00:59:49.010716 kernel: Spectre V2 : Mitigation: Retpolines Aug 13 00:59:49.010731 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Aug 13 00:59:49.010747 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Aug 13 00:59:49.010762 kernel: RETBleed: Vulnerable Aug 13 00:59:49.010776 kernel: Speculative Store Bypass: Vulnerable Aug 13 00:59:49.010791 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Aug 13 00:59:49.010806 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Aug 13 00:59:49.010820 kernel: GDS: Unknown: Dependent on hypervisor status Aug 13 00:59:49.010835 kernel: ITS: Mitigation: Aligned branch/return thunks Aug 13 00:59:49.010850 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Aug 13 00:59:49.010868 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Aug 13 00:59:49.010882 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Aug 13 00:59:49.010897 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Aug 13 00:59:49.010912 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Aug 13 00:59:49.010927 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Aug 13 00:59:49.010942 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Aug 13 00:59:49.010960 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Aug 13 00:59:49.010975 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Aug 13 00:59:49.010989 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Aug 13 00:59:49.011004 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Aug 13 00:59:49.011019 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Aug 13 00:59:49.011037 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Aug 13 00:59:49.011052 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Aug 13 00:59:49.011067 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Aug 13 00:59:49.011082 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Aug 13 00:59:49.011096 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Aug 13 00:59:49.011111 kernel: Freeing SMP alternatives memory: 32K Aug 13 00:59:49.011126 kernel: pid_max: default: 32768 minimum: 301 Aug 13 00:59:49.011141 kernel: LSM: Security Framework initializing Aug 13 00:59:49.011155 kernel: SELinux: Initializing. Aug 13 00:59:49.011170 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Aug 13 00:59:49.011184 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Aug 13 00:59:49.011202 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Aug 13 00:59:49.011217 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Aug 13 00:59:49.011232 kernel: signal: max sigframe size: 3632 Aug 13 00:59:49.011247 kernel: rcu: Hierarchical SRCU implementation. Aug 13 00:59:49.011262 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Aug 13 00:59:49.011277 kernel: smp: Bringing up secondary CPUs ... Aug 13 00:59:49.011291 kernel: x86: Booting SMP configuration: Aug 13 00:59:49.011306 kernel: .... node #0, CPUs: #1 Aug 13 00:59:49.011321 kernel: kvm-clock: cpu 1, msr 4919e041, secondary cpu clock Aug 13 00:59:49.011336 kernel: kvm-guest: stealtime: cpu 1, msr 7a51c0c0 Aug 13 00:59:49.011354 kernel: Transient Scheduler Attacks: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Aug 13 00:59:49.011371 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Aug 13 00:59:49.011386 kernel: smp: Brought up 1 node, 2 CPUs Aug 13 00:59:49.011401 kernel: smpboot: Max logical packages: 1 Aug 13 00:59:49.011415 kernel: smpboot: Total of 2 processors activated (9999.98 BogoMIPS) Aug 13 00:59:49.011430 kernel: devtmpfs: initialized Aug 13 00:59:49.011445 kernel: x86/mm: Memory block size: 128MB Aug 13 00:59:49.011460 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7895e000-0x789ddfff] (524288 bytes) Aug 13 00:59:49.011477 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Aug 13 00:59:49.012532 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Aug 13 00:59:49.012550 kernel: pinctrl core: initialized pinctrl subsystem Aug 13 00:59:49.012566 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Aug 13 00:59:49.012581 kernel: audit: initializing netlink subsys (disabled) Aug 13 00:59:49.012597 kernel: audit: type=2000 audit(1755046789.340:1): state=initialized audit_enabled=0 res=1 Aug 13 00:59:49.012611 kernel: thermal_sys: Registered thermal governor 'step_wise' Aug 13 00:59:49.012626 kernel: thermal_sys: Registered thermal governor 'user_space' Aug 13 00:59:49.012640 kernel: cpuidle: using governor menu Aug 13 00:59:49.012661 kernel: ACPI: bus type PCI registered Aug 13 00:59:49.012675 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Aug 13 00:59:49.012691 kernel: dca service started, version 1.12.1 Aug 13 00:59:49.012705 kernel: PCI: Using configuration type 1 for base access Aug 13 00:59:49.012720 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Aug 13 00:59:49.012736 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Aug 13 00:59:49.012751 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Aug 13 00:59:49.012766 kernel: ACPI: Added _OSI(Module Device) Aug 13 00:59:49.012781 kernel: ACPI: Added _OSI(Processor Device) Aug 13 00:59:49.012799 kernel: ACPI: Added _OSI(Processor Aggregator Device) Aug 13 00:59:49.012814 kernel: ACPI: Added _OSI(Linux-Dell-Video) Aug 13 00:59:49.012829 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Aug 13 00:59:49.012844 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Aug 13 00:59:49.012859 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Aug 13 00:59:49.012873 kernel: ACPI: Interpreter enabled Aug 13 00:59:49.012888 kernel: ACPI: PM: (supports S0 S5) Aug 13 00:59:49.012903 kernel: ACPI: Using IOAPIC for interrupt routing Aug 13 00:59:49.012917 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Aug 13 00:59:49.012935 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Aug 13 00:59:49.012962 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Aug 13 00:59:49.013170 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Aug 13 00:59:49.013304 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Aug 13 00:59:49.013324 kernel: acpiphp: Slot [3] registered Aug 13 00:59:49.013339 kernel: acpiphp: Slot [4] registered Aug 13 00:59:49.013354 kernel: acpiphp: Slot [5] registered Aug 13 00:59:49.013372 kernel: acpiphp: Slot [6] registered Aug 13 00:59:49.013387 kernel: acpiphp: Slot [7] registered Aug 13 00:59:49.013401 kernel: acpiphp: Slot [8] registered Aug 13 00:59:49.013416 kernel: acpiphp: Slot [9] registered Aug 13 00:59:49.013431 kernel: acpiphp: Slot [10] registered Aug 13 00:59:49.013446 kernel: acpiphp: Slot [11] registered Aug 13 00:59:49.013460 kernel: acpiphp: Slot [12] registered Aug 13 00:59:49.013475 kernel: acpiphp: Slot [13] registered Aug 13 00:59:49.013502 kernel: acpiphp: Slot [14] registered Aug 13 00:59:49.013517 kernel: acpiphp: Slot [15] registered Aug 13 00:59:49.013533 kernel: acpiphp: Slot [16] registered Aug 13 00:59:49.013545 kernel: acpiphp: Slot [17] registered Aug 13 00:59:49.013560 kernel: acpiphp: Slot [18] registered Aug 13 00:59:49.013573 kernel: acpiphp: Slot [19] registered Aug 13 00:59:49.013587 kernel: acpiphp: Slot [20] registered Aug 13 00:59:49.013601 kernel: acpiphp: Slot [21] registered Aug 13 00:59:49.013616 kernel: acpiphp: Slot [22] registered Aug 13 00:59:49.013630 kernel: acpiphp: Slot [23] registered Aug 13 00:59:49.013644 kernel: acpiphp: Slot [24] registered Aug 13 00:59:49.013662 kernel: acpiphp: Slot [25] registered Aug 13 00:59:49.013676 kernel: acpiphp: Slot [26] registered Aug 13 00:59:49.013691 kernel: acpiphp: Slot [27] registered Aug 13 00:59:49.013705 kernel: acpiphp: Slot [28] registered Aug 13 00:59:49.013719 kernel: acpiphp: Slot [29] registered Aug 13 00:59:49.013734 kernel: acpiphp: Slot [30] registered Aug 13 00:59:49.013748 kernel: acpiphp: Slot [31] registered Aug 13 00:59:49.013762 kernel: PCI host bridge to bus 0000:00 Aug 13 00:59:49.013899 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Aug 13 00:59:49.014022 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Aug 13 00:59:49.014135 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Aug 13 00:59:49.014243 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Aug 13 00:59:49.014349 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x2000ffffffff window] Aug 13 00:59:49.014456 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Aug 13 00:59:49.014604 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Aug 13 00:59:49.014734 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Aug 13 00:59:49.014873 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Aug 13 00:59:49.014995 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Aug 13 00:59:49.015144 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Aug 13 00:59:49.015276 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Aug 13 00:59:49.015719 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Aug 13 00:59:49.015870 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Aug 13 00:59:49.016017 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Aug 13 00:59:49.016154 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Aug 13 00:59:49.016300 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Aug 13 00:59:49.016434 kernel: pci 0000:00:03.0: reg 0x10: [mem 0x80000000-0x803fffff pref] Aug 13 00:59:49.016591 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Aug 13 00:59:49.016726 kernel: pci 0000:00:03.0: BAR 0: assigned to efifb Aug 13 00:59:49.016864 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Aug 13 00:59:49.017026 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Aug 13 00:59:49.017163 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80404000-0x80407fff] Aug 13 00:59:49.017304 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Aug 13 00:59:49.017437 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80400000-0x80403fff] Aug 13 00:59:49.017456 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Aug 13 00:59:49.017472 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Aug 13 00:59:49.017501 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Aug 13 00:59:49.017521 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Aug 13 00:59:49.017536 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Aug 13 00:59:49.017552 kernel: iommu: Default domain type: Translated Aug 13 00:59:49.017566 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Aug 13 00:59:49.017700 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Aug 13 00:59:49.017835 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Aug 13 00:59:49.017967 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Aug 13 00:59:49.017985 kernel: vgaarb: loaded Aug 13 00:59:49.018001 kernel: pps_core: LinuxPPS API ver. 1 registered Aug 13 00:59:49.018020 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Aug 13 00:59:49.018035 kernel: PTP clock support registered Aug 13 00:59:49.018051 kernel: Registered efivars operations Aug 13 00:59:49.018066 kernel: PCI: Using ACPI for IRQ routing Aug 13 00:59:49.018081 kernel: PCI: pci_cache_line_size set to 64 bytes Aug 13 00:59:49.018097 kernel: e820: reserve RAM buffer [mem 0x76813018-0x77ffffff] Aug 13 00:59:49.018112 kernel: e820: reserve RAM buffer [mem 0x786ce000-0x7bffffff] Aug 13 00:59:49.018126 kernel: e820: reserve RAM buffer [mem 0x7c97c000-0x7fffffff] Aug 13 00:59:49.018141 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Aug 13 00:59:49.018160 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Aug 13 00:59:49.018174 kernel: clocksource: Switched to clocksource kvm-clock Aug 13 00:59:49.018190 kernel: VFS: Disk quotas dquot_6.6.0 Aug 13 00:59:49.018205 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Aug 13 00:59:49.018220 kernel: pnp: PnP ACPI init Aug 13 00:59:49.018235 kernel: pnp: PnP ACPI: found 5 devices Aug 13 00:59:49.018250 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Aug 13 00:59:49.018264 kernel: NET: Registered PF_INET protocol family Aug 13 00:59:49.018275 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Aug 13 00:59:49.018290 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Aug 13 00:59:49.018302 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Aug 13 00:59:49.018315 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Aug 13 00:59:49.018327 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Aug 13 00:59:49.018341 kernel: TCP: Hash tables configured (established 16384 bind 16384) Aug 13 00:59:49.018354 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Aug 13 00:59:49.018367 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Aug 13 00:59:49.018380 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Aug 13 00:59:49.018397 kernel: NET: Registered PF_XDP protocol family Aug 13 00:59:49.018549 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Aug 13 00:59:49.018668 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Aug 13 00:59:49.018786 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Aug 13 00:59:49.018902 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Aug 13 00:59:49.019018 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x2000ffffffff window] Aug 13 00:59:49.019149 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Aug 13 00:59:49.019282 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Aug 13 00:59:49.019302 kernel: PCI: CLS 0 bytes, default 64 Aug 13 00:59:49.019316 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Aug 13 00:59:49.019330 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Aug 13 00:59:49.019344 kernel: clocksource: Switched to clocksource tsc Aug 13 00:59:49.019357 kernel: Initialise system trusted keyrings Aug 13 00:59:49.019370 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Aug 13 00:59:49.019383 kernel: Key type asymmetric registered Aug 13 00:59:49.019395 kernel: Asymmetric key parser 'x509' registered Aug 13 00:59:49.019407 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Aug 13 00:59:49.019423 kernel: io scheduler mq-deadline registered Aug 13 00:59:49.019436 kernel: io scheduler kyber registered Aug 13 00:59:49.019449 kernel: io scheduler bfq registered Aug 13 00:59:49.019462 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Aug 13 00:59:49.019476 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Aug 13 00:59:49.019499 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Aug 13 00:59:49.019512 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Aug 13 00:59:49.019525 kernel: i8042: Warning: Keylock active Aug 13 00:59:49.019538 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Aug 13 00:59:49.019554 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Aug 13 00:59:49.019694 kernel: rtc_cmos 00:00: RTC can wake from S4 Aug 13 00:59:49.019814 kernel: rtc_cmos 00:00: registered as rtc0 Aug 13 00:59:49.019934 kernel: rtc_cmos 00:00: setting system clock to 2025-08-13T00:59:48 UTC (1755046788) Aug 13 00:59:49.020047 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Aug 13 00:59:49.020063 kernel: intel_pstate: CPU model not supported Aug 13 00:59:49.020076 kernel: efifb: probing for efifb Aug 13 00:59:49.020089 kernel: efifb: framebuffer at 0x80000000, using 1876k, total 1875k Aug 13 00:59:49.020106 kernel: efifb: mode is 800x600x32, linelength=3200, pages=1 Aug 13 00:59:49.020119 kernel: efifb: scrolling: redraw Aug 13 00:59:49.020132 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Aug 13 00:59:49.020144 kernel: Console: switching to colour frame buffer device 100x37 Aug 13 00:59:49.020157 kernel: fb0: EFI VGA frame buffer device Aug 13 00:59:49.020170 kernel: pstore: Registered efi as persistent store backend Aug 13 00:59:49.020209 kernel: NET: Registered PF_INET6 protocol family Aug 13 00:59:49.020225 kernel: Segment Routing with IPv6 Aug 13 00:59:49.020238 kernel: In-situ OAM (IOAM) with IPv6 Aug 13 00:59:49.020256 kernel: NET: Registered PF_PACKET protocol family Aug 13 00:59:49.020269 kernel: Key type dns_resolver registered Aug 13 00:59:49.020282 kernel: IPI shorthand broadcast: enabled Aug 13 00:59:49.020296 kernel: sched_clock: Marking stable (356002410, 138881577)->(580752723, -85868736) Aug 13 00:59:49.020309 kernel: registered taskstats version 1 Aug 13 00:59:49.020323 kernel: Loading compiled-in X.509 certificates Aug 13 00:59:49.020336 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.189-flatcar: 1d5a64b5798e654719a8bd91d683e7e9894bd433' Aug 13 00:59:49.020349 kernel: Key type .fscrypt registered Aug 13 00:59:49.020362 kernel: Key type fscrypt-provisioning registered Aug 13 00:59:49.020378 kernel: pstore: Using crash dump compression: deflate Aug 13 00:59:49.020395 kernel: ima: No TPM chip found, activating TPM-bypass! Aug 13 00:59:49.020409 kernel: ima: Allocated hash algorithm: sha1 Aug 13 00:59:49.020422 kernel: ima: No architecture policies found Aug 13 00:59:49.020436 kernel: clk: Disabling unused clocks Aug 13 00:59:49.020449 kernel: Freeing unused kernel image (initmem) memory: 47488K Aug 13 00:59:49.020462 kernel: Write protecting the kernel read-only data: 28672k Aug 13 00:59:49.020475 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Aug 13 00:59:49.022252 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Aug 13 00:59:49.022276 kernel: Run /init as init process Aug 13 00:59:49.022292 kernel: with arguments: Aug 13 00:59:49.022308 kernel: /init Aug 13 00:59:49.022324 kernel: with environment: Aug 13 00:59:49.022340 kernel: HOME=/ Aug 13 00:59:49.022356 kernel: TERM=linux Aug 13 00:59:49.022372 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Aug 13 00:59:49.022392 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:59:49.022415 systemd[1]: Detected virtualization amazon. Aug 13 00:59:49.022432 systemd[1]: Detected architecture x86-64. Aug 13 00:59:49.022448 systemd[1]: Running in initrd. Aug 13 00:59:49.022464 systemd[1]: No hostname configured, using default hostname. Aug 13 00:59:49.022479 systemd[1]: Hostname set to . Aug 13 00:59:49.022543 systemd[1]: Initializing machine ID from VM UUID. Aug 13 00:59:49.022559 systemd[1]: Queued start job for default target initrd.target. Aug 13 00:59:49.022579 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:59:49.022599 systemd[1]: Reached target cryptsetup.target. Aug 13 00:59:49.022615 systemd[1]: Reached target paths.target. Aug 13 00:59:49.022633 systemd[1]: Reached target slices.target. Aug 13 00:59:49.022649 systemd[1]: Reached target swap.target. Aug 13 00:59:49.022666 systemd[1]: Reached target timers.target. Aug 13 00:59:49.022686 systemd[1]: Listening on iscsid.socket. Aug 13 00:59:49.022703 systemd[1]: Listening on iscsiuio.socket. Aug 13 00:59:49.022720 systemd[1]: Listening on systemd-journald-audit.socket. Aug 13 00:59:49.022737 systemd[1]: Listening on systemd-journald-dev-log.socket. Aug 13 00:59:49.022753 systemd[1]: Listening on systemd-journald.socket. Aug 13 00:59:49.022770 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:59:49.022788 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:59:49.022804 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:59:49.022823 systemd[1]: Reached target sockets.target. Aug 13 00:59:49.022840 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:59:49.022857 systemd[1]: Finished network-cleanup.service. Aug 13 00:59:49.022874 systemd[1]: Starting systemd-fsck-usr.service... Aug 13 00:59:49.022891 systemd[1]: Starting systemd-journald.service... Aug 13 00:59:49.022907 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:59:49.022924 systemd[1]: Starting systemd-resolved.service... Aug 13 00:59:49.022941 systemd[1]: Starting systemd-vconsole-setup.service... Aug 13 00:59:49.022958 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:59:49.022979 systemd[1]: Finished systemd-fsck-usr.service. Aug 13 00:59:49.022995 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Aug 13 00:59:49.023013 kernel: audit: type=1130 audit(1755046789.013:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.023035 systemd-journald[185]: Journal started Aug 13 00:59:49.023119 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2800e1c17032f7ac1885404fad9e57) is 4.8M, max 38.3M, 33.5M free. Aug 13 00:59:49.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.010151 systemd-modules-load[186]: Inserted module 'overlay' Aug 13 00:59:49.049633 systemd[1]: Finished systemd-vconsole-setup.service. Aug 13 00:59:49.049670 kernel: audit: type=1130 audit(1755046789.032:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.049693 systemd[1]: Started systemd-journald.service. Aug 13 00:59:49.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.051987 systemd[1]: Starting dracut-cmdline-ask.service... Aug 13 00:59:49.070077 kernel: audit: type=1130 audit(1755046789.049:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.064088 systemd-resolved[187]: Positive Trust Anchors: Aug 13 00:59:49.064099 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 00:59:49.064150 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 00:59:49.090614 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Aug 13 00:59:49.068103 systemd-resolved[187]: Defaulting to hostname 'linux'. Aug 13 00:59:49.101864 kernel: Bridge firewalling registered Aug 13 00:59:49.073731 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 00:59:49.101922 systemd[1]: Started systemd-resolved.service. Aug 13 00:59:49.102553 systemd-modules-load[186]: Inserted module 'br_netfilter' Aug 13 00:59:49.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.107017 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 00:59:49.124288 kernel: audit: type=1130 audit(1755046789.105:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.123909 systemd[1]: Finished dracut-cmdline-ask.service. Aug 13 00:59:49.144707 kernel: audit: type=1130 audit(1755046789.122:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.144744 kernel: SCSI subsystem initialized Aug 13 00:59:49.144765 kernel: audit: type=1130 audit(1755046789.133:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.135096 systemd[1]: Reached target nss-lookup.target. Aug 13 00:59:49.158627 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Aug 13 00:59:49.158662 kernel: device-mapper: uevent: version 1.0.3 Aug 13 00:59:49.158682 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Aug 13 00:59:49.146929 systemd[1]: Starting dracut-cmdline.service... Aug 13 00:59:49.162668 systemd-modules-load[186]: Inserted module 'dm_multipath' Aug 13 00:59:49.175091 kernel: audit: type=1130 audit(1755046789.163:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.163637 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:59:49.176407 dracut-cmdline[201]: dracut-dracut-053 Aug 13 00:59:49.176407 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=8f8aacd9fbcdd713563d390e899e90bedf5577e4b1b261b4e57687d87edd6b57 Aug 13 00:59:49.165799 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:59:49.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.195300 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:59:49.204294 kernel: audit: type=1130 audit(1755046789.194:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.246518 kernel: Loading iSCSI transport class v2.0-870. Aug 13 00:59:49.265513 kernel: iscsi: registered transport (tcp) Aug 13 00:59:49.289525 kernel: iscsi: registered transport (qla4xxx) Aug 13 00:59:49.289607 kernel: QLogic iSCSI HBA Driver Aug 13 00:59:49.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.323266 systemd[1]: Finished dracut-cmdline.service. Aug 13 00:59:49.331910 kernel: audit: type=1130 audit(1755046789.322:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.325360 systemd[1]: Starting dracut-pre-udev.service... Aug 13 00:59:49.381529 kernel: raid6: avx512x4 gen() 15375 MB/s Aug 13 00:59:49.399510 kernel: raid6: avx512x4 xor() 7896 MB/s Aug 13 00:59:49.417519 kernel: raid6: avx512x2 gen() 15512 MB/s Aug 13 00:59:49.435514 kernel: raid6: avx512x2 xor() 24303 MB/s Aug 13 00:59:49.453516 kernel: raid6: avx512x1 gen() 15449 MB/s Aug 13 00:59:49.471510 kernel: raid6: avx512x1 xor() 21725 MB/s Aug 13 00:59:49.489517 kernel: raid6: avx2x4 gen() 15821 MB/s Aug 13 00:59:49.507510 kernel: raid6: avx2x4 xor() 7196 MB/s Aug 13 00:59:49.525518 kernel: raid6: avx2x2 gen() 15348 MB/s Aug 13 00:59:49.543510 kernel: raid6: avx2x2 xor() 17928 MB/s Aug 13 00:59:49.561531 kernel: raid6: avx2x1 gen() 11466 MB/s Aug 13 00:59:49.579513 kernel: raid6: avx2x1 xor() 13438 MB/s Aug 13 00:59:49.597513 kernel: raid6: sse2x4 gen() 9064 MB/s Aug 13 00:59:49.615518 kernel: raid6: sse2x4 xor() 6000 MB/s Aug 13 00:59:49.633509 kernel: raid6: sse2x2 gen() 10464 MB/s Aug 13 00:59:49.651529 kernel: raid6: sse2x2 xor() 6093 MB/s Aug 13 00:59:49.669510 kernel: raid6: sse2x1 gen() 9394 MB/s Aug 13 00:59:49.687828 kernel: raid6: sse2x1 xor() 4811 MB/s Aug 13 00:59:49.687883 kernel: raid6: using algorithm avx2x4 gen() 15821 MB/s Aug 13 00:59:49.687903 kernel: raid6: .... xor() 7196 MB/s, rmw enabled Aug 13 00:59:49.688984 kernel: raid6: using avx512x2 recovery algorithm Aug 13 00:59:49.703514 kernel: xor: automatically using best checksumming function avx Aug 13 00:59:49.806511 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Aug 13 00:59:49.815406 systemd[1]: Finished dracut-pre-udev.service. Aug 13 00:59:49.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.815000 audit: BPF prog-id=7 op=LOAD Aug 13 00:59:49.815000 audit: BPF prog-id=8 op=LOAD Aug 13 00:59:49.817168 systemd[1]: Starting systemd-udevd.service... Aug 13 00:59:49.830878 systemd-udevd[384]: Using default interface naming scheme 'v252'. Aug 13 00:59:49.836248 systemd[1]: Started systemd-udevd.service. Aug 13 00:59:49.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.841982 systemd[1]: Starting dracut-pre-trigger.service... Aug 13 00:59:49.857518 dracut-pre-trigger[393]: rd.md=0: removing MD RAID activation Aug 13 00:59:49.888922 systemd[1]: Finished dracut-pre-trigger.service. Aug 13 00:59:49.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.890463 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:59:49.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:49.933730 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:59:49.995565 kernel: ena 0000:00:05.0: ENA device version: 0.10 Aug 13 00:59:50.038844 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Aug 13 00:59:50.039022 kernel: cryptd: max_cpu_qlen set to 1000 Aug 13 00:59:50.039043 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Aug 13 00:59:50.039185 kernel: AVX2 version of gcm_enc/dec engaged. Aug 13 00:59:50.039204 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80400000, mac addr 06:90:0a:6a:2f:13 Aug 13 00:59:50.039350 kernel: AES CTR mode by8 optimization enabled Aug 13 00:59:50.042038 (udev-worker)[423]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:59:50.050974 kernel: nvme nvme0: pci function 0000:00:04.0 Aug 13 00:59:50.051246 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Aug 13 00:59:50.063513 kernel: nvme nvme0: 2/0/0 default/read/poll queues Aug 13 00:59:50.074523 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Aug 13 00:59:50.074601 kernel: GPT:9289727 != 16777215 Aug 13 00:59:50.074622 kernel: GPT:Alternate GPT header not at the end of the disk. Aug 13 00:59:50.074641 kernel: GPT:9289727 != 16777215 Aug 13 00:59:50.074659 kernel: GPT: Use GNU Parted to correct GPT errors. Aug 13 00:59:50.076643 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:59:50.151513 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (425) Aug 13 00:59:50.179643 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Aug 13 00:59:50.207821 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Aug 13 00:59:50.210813 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Aug 13 00:59:50.221456 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:59:50.226984 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Aug 13 00:59:50.236732 systemd[1]: Starting disk-uuid.service... Aug 13 00:59:50.243710 disk-uuid[586]: Primary Header is updated. Aug 13 00:59:50.243710 disk-uuid[586]: Secondary Entries is updated. Aug 13 00:59:50.243710 disk-uuid[586]: Secondary Header is updated. Aug 13 00:59:50.250529 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:59:50.256511 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:59:51.265113 disk-uuid[587]: The operation has completed successfully. Aug 13 00:59:51.266396 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:59:51.410409 systemd[1]: disk-uuid.service: Deactivated successfully. Aug 13 00:59:51.410551 systemd[1]: Finished disk-uuid.service. Aug 13 00:59:51.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.417538 systemd[1]: Starting verity-setup.service... Aug 13 00:59:51.436905 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Aug 13 00:59:51.549597 systemd[1]: Found device dev-mapper-usr.device. Aug 13 00:59:51.552201 systemd[1]: Mounting sysusr-usr.mount... Aug 13 00:59:51.558648 systemd[1]: Finished verity-setup.service. Aug 13 00:59:51.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.658513 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Aug 13 00:59:51.659127 systemd[1]: Mounted sysusr-usr.mount. Aug 13 00:59:51.660282 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Aug 13 00:59:51.661171 systemd[1]: Starting ignition-setup.service... Aug 13 00:59:51.664337 systemd[1]: Starting parse-ip-for-networkd.service... Aug 13 00:59:51.691307 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Aug 13 00:59:51.691367 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:59:51.691379 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:59:51.703509 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:59:51.718617 systemd[1]: mnt-oem.mount: Deactivated successfully. Aug 13 00:59:51.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.733308 systemd[1]: Finished ignition-setup.service. Aug 13 00:59:51.734963 systemd[1]: Starting ignition-fetch-offline.service... Aug 13 00:59:51.756320 systemd[1]: Finished parse-ip-for-networkd.service. Aug 13 00:59:51.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.756000 audit: BPF prog-id=9 op=LOAD Aug 13 00:59:51.758865 systemd[1]: Starting systemd-networkd.service... Aug 13 00:59:51.784134 systemd-networkd[1100]: lo: Link UP Aug 13 00:59:51.784148 systemd-networkd[1100]: lo: Gained carrier Aug 13 00:59:51.785367 systemd-networkd[1100]: Enumeration completed Aug 13 00:59:51.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.785510 systemd[1]: Started systemd-networkd.service. Aug 13 00:59:51.786616 systemd-networkd[1100]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:59:51.787773 systemd[1]: Reached target network.target. Aug 13 00:59:51.789682 systemd[1]: Starting iscsiuio.service... Aug 13 00:59:51.798290 systemd-networkd[1100]: eth0: Link UP Aug 13 00:59:51.798303 systemd-networkd[1100]: eth0: Gained carrier Aug 13 00:59:51.800254 systemd[1]: Started iscsiuio.service. Aug 13 00:59:51.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.802471 systemd[1]: Starting iscsid.service... Aug 13 00:59:51.807507 iscsid[1105]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:59:51.807507 iscsid[1105]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Aug 13 00:59:51.807507 iscsid[1105]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Aug 13 00:59:51.807507 iscsid[1105]: If using hardware iscsi like qla4xxx this message can be ignored. Aug 13 00:59:51.807507 iscsid[1105]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:59:51.807507 iscsid[1105]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Aug 13 00:59:51.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.812099 systemd[1]: Started iscsid.service. Aug 13 00:59:51.813356 systemd-networkd[1100]: eth0: DHCPv4 address 172.31.17.234/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 00:59:51.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:51.817653 systemd[1]: Starting dracut-initqueue.service... Aug 13 00:59:51.833815 systemd[1]: Finished dracut-initqueue.service. Aug 13 00:59:51.835219 systemd[1]: Reached target remote-fs-pre.target. Aug 13 00:59:51.835967 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:59:51.837237 systemd[1]: Reached target remote-fs.target. Aug 13 00:59:51.840476 systemd[1]: Starting dracut-pre-mount.service... Aug 13 00:59:51.850446 systemd[1]: Finished dracut-pre-mount.service. Aug 13 00:59:51.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.057851 ignition[1080]: Ignition 2.14.0 Aug 13 00:59:52.058553 ignition[1080]: Stage: fetch-offline Aug 13 00:59:52.058683 ignition[1080]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:59:52.058721 ignition[1080]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:59:52.078763 ignition[1080]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:59:52.079310 ignition[1080]: Ignition finished successfully Aug 13 00:59:52.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.080721 systemd[1]: Finished ignition-fetch-offline.service. Aug 13 00:59:52.082414 systemd[1]: Starting ignition-fetch.service... Aug 13 00:59:52.090895 ignition[1124]: Ignition 2.14.0 Aug 13 00:59:52.090906 ignition[1124]: Stage: fetch Aug 13 00:59:52.091050 ignition[1124]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:59:52.091073 ignition[1124]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:59:52.097221 ignition[1124]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:59:52.097897 ignition[1124]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:59:52.115949 ignition[1124]: INFO : PUT result: OK Aug 13 00:59:52.128103 ignition[1124]: DEBUG : parsed url from cmdline: "" Aug 13 00:59:52.128103 ignition[1124]: INFO : no config URL provided Aug 13 00:59:52.128103 ignition[1124]: INFO : reading system config file "/usr/lib/ignition/user.ign" Aug 13 00:59:52.128103 ignition[1124]: INFO : no config at "/usr/lib/ignition/user.ign" Aug 13 00:59:52.128103 ignition[1124]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:59:52.132282 ignition[1124]: INFO : PUT result: OK Aug 13 00:59:52.132282 ignition[1124]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Aug 13 00:59:52.132282 ignition[1124]: INFO : GET result: OK Aug 13 00:59:52.132282 ignition[1124]: DEBUG : parsing config with SHA512: 491da77043e0f695b5ae67947ff5276a44c0d80b9441b95cc3ddac4ecb6587653a63b33fdf6bb2df0f9b9fdaac8704c8cf5ed91524cd7f9404fcedd4c72e9539 Aug 13 00:59:52.136535 unknown[1124]: fetched base config from "system" Aug 13 00:59:52.136546 unknown[1124]: fetched base config from "system" Aug 13 00:59:52.139180 ignition[1124]: fetch: fetch complete Aug 13 00:59:52.136556 unknown[1124]: fetched user config from "aws" Aug 13 00:59:52.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.139201 ignition[1124]: fetch: fetch passed Aug 13 00:59:52.141114 systemd[1]: Finished ignition-fetch.service. Aug 13 00:59:52.139290 ignition[1124]: Ignition finished successfully Aug 13 00:59:52.142936 systemd[1]: Starting ignition-kargs.service... Aug 13 00:59:52.154809 ignition[1130]: Ignition 2.14.0 Aug 13 00:59:52.154821 ignition[1130]: Stage: kargs Aug 13 00:59:52.155028 ignition[1130]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:59:52.155061 ignition[1130]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:59:52.162613 ignition[1130]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:59:52.163371 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:59:52.164600 ignition[1130]: INFO : PUT result: OK Aug 13 00:59:52.167985 ignition[1130]: kargs: kargs passed Aug 13 00:59:52.168052 ignition[1130]: Ignition finished successfully Aug 13 00:59:52.170025 systemd[1]: Finished ignition-kargs.service. Aug 13 00:59:52.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.171431 systemd[1]: Starting ignition-disks.service... Aug 13 00:59:52.179467 ignition[1136]: Ignition 2.14.0 Aug 13 00:59:52.179477 ignition[1136]: Stage: disks Aug 13 00:59:52.179652 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:59:52.179677 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:59:52.186367 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:59:52.187073 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:59:52.188091 ignition[1136]: INFO : PUT result: OK Aug 13 00:59:52.193778 ignition[1136]: disks: disks passed Aug 13 00:59:52.194477 ignition[1136]: Ignition finished successfully Aug 13 00:59:52.196265 systemd[1]: Finished ignition-disks.service. Aug 13 00:59:52.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.197083 systemd[1]: Reached target initrd-root-device.target. Aug 13 00:59:52.198002 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:59:52.198906 systemd[1]: Reached target local-fs.target. Aug 13 00:59:52.199913 systemd[1]: Reached target sysinit.target. Aug 13 00:59:52.200873 systemd[1]: Reached target basic.target. Aug 13 00:59:52.202779 systemd[1]: Starting systemd-fsck-root.service... Aug 13 00:59:52.226255 systemd-fsck[1144]: ROOT: clean, 629/553520 files, 56027/553472 blocks Aug 13 00:59:52.229237 systemd[1]: Finished systemd-fsck-root.service. Aug 13 00:59:52.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.231213 systemd[1]: Mounting sysroot.mount... Aug 13 00:59:52.247566 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Aug 13 00:59:52.248550 systemd[1]: Mounted sysroot.mount. Aug 13 00:59:52.249235 systemd[1]: Reached target initrd-root-fs.target. Aug 13 00:59:52.259079 systemd[1]: Mounting sysroot-usr.mount... Aug 13 00:59:52.260142 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Aug 13 00:59:52.260186 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Aug 13 00:59:52.260216 systemd[1]: Reached target ignition-diskful.target. Aug 13 00:59:52.262718 systemd[1]: Mounted sysroot-usr.mount. Aug 13 00:59:52.267145 systemd[1]: Starting initrd-setup-root.service... Aug 13 00:59:52.273314 initrd-setup-root[1165]: cut: /sysroot/etc/passwd: No such file or directory Aug 13 00:59:52.290113 initrd-setup-root[1173]: cut: /sysroot/etc/group: No such file or directory Aug 13 00:59:52.295527 initrd-setup-root[1181]: cut: /sysroot/etc/shadow: No such file or directory Aug 13 00:59:52.300807 initrd-setup-root[1189]: cut: /sysroot/etc/gshadow: No such file or directory Aug 13 00:59:52.380233 systemd[1]: Finished initrd-setup-root.service. Aug 13 00:59:52.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.381743 systemd[1]: Starting ignition-mount.service... Aug 13 00:59:52.382974 systemd[1]: Starting sysroot-boot.service... Aug 13 00:59:52.389012 bash[1206]: umount: /sysroot/usr/share/oem: not mounted. Aug 13 00:59:52.398978 ignition[1207]: INFO : Ignition 2.14.0 Aug 13 00:59:52.398978 ignition[1207]: INFO : Stage: mount Aug 13 00:59:52.401257 ignition[1207]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:59:52.401257 ignition[1207]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:59:52.412354 ignition[1207]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:59:52.413824 ignition[1207]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:59:52.416001 ignition[1207]: INFO : PUT result: OK Aug 13 00:59:52.419473 ignition[1207]: INFO : mount: mount passed Aug 13 00:59:52.420502 ignition[1207]: INFO : Ignition finished successfully Aug 13 00:59:52.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.422762 systemd[1]: Finished ignition-mount.service. Aug 13 00:59:52.425347 systemd[1]: Finished sysroot-boot.service. Aug 13 00:59:52.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:52.587403 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 00:59:52.606542 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1216) Aug 13 00:59:52.610441 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Aug 13 00:59:52.610514 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:59:52.610530 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:59:52.652529 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:59:52.662775 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 00:59:52.664880 systemd[1]: Starting ignition-files.service... Aug 13 00:59:52.683811 ignition[1236]: INFO : Ignition 2.14.0 Aug 13 00:59:52.683811 ignition[1236]: INFO : Stage: files Aug 13 00:59:52.686229 ignition[1236]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:59:52.686229 ignition[1236]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:59:52.693146 ignition[1236]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:59:52.694111 ignition[1236]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:59:52.695076 ignition[1236]: INFO : PUT result: OK Aug 13 00:59:52.697626 ignition[1236]: DEBUG : files: compiled without relabeling support, skipping Aug 13 00:59:52.704153 ignition[1236]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Aug 13 00:59:52.704153 ignition[1236]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Aug 13 00:59:52.708119 ignition[1236]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Aug 13 00:59:52.709713 ignition[1236]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Aug 13 00:59:52.709713 ignition[1236]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Aug 13 00:59:52.709632 unknown[1236]: wrote ssh authorized keys file for user: core Aug 13 00:59:52.713623 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Aug 13 00:59:52.713623 ignition[1236]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Aug 13 00:59:52.783712 ignition[1236]: INFO : GET result: OK Aug 13 00:59:53.165426 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Aug 13 00:59:53.165426 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 00:59:53.168085 ignition[1236]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:59:53.175386 ignition[1236]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4239292091" Aug 13 00:59:53.176878 ignition[1236]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4239292091": device or resource busy Aug 13 00:59:53.176878 ignition[1236]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4239292091", trying btrfs: device or resource busy Aug 13 00:59:53.176878 ignition[1236]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4239292091" Aug 13 00:59:53.184320 ignition[1236]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4239292091" Aug 13 00:59:53.194243 ignition[1236]: INFO : op(3): [started] unmounting "/mnt/oem4239292091" Aug 13 00:59:53.195462 systemd[1]: mnt-oem4239292091.mount: Deactivated successfully. Aug 13 00:59:53.196313 ignition[1236]: INFO : op(3): [finished] unmounting "/mnt/oem4239292091" Aug 13 00:59:53.196313 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 00:59:53.196313 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Aug 13 00:59:53.196313 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Aug 13 00:59:53.196313 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:59:53.196313 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Aug 13 00:59:53.204231 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 00:59:53.204231 ignition[1236]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:59:53.219728 ignition[1236]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3165967496" Aug 13 00:59:53.219728 ignition[1236]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3165967496": device or resource busy Aug 13 00:59:53.219728 ignition[1236]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3165967496", trying btrfs: device or resource busy Aug 13 00:59:53.219728 ignition[1236]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3165967496" Aug 13 00:59:53.219728 ignition[1236]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3165967496" Aug 13 00:59:53.219728 ignition[1236]: INFO : op(6): [started] unmounting "/mnt/oem3165967496" Aug 13 00:59:53.219728 ignition[1236]: INFO : op(6): [finished] unmounting "/mnt/oem3165967496" Aug 13 00:59:53.219728 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 00:59:53.219728 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 00:59:53.219728 ignition[1236]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:59:53.232808 ignition[1236]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem724540978" Aug 13 00:59:53.232808 ignition[1236]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem724540978": device or resource busy Aug 13 00:59:53.232808 ignition[1236]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem724540978", trying btrfs: device or resource busy Aug 13 00:59:53.232808 ignition[1236]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem724540978" Aug 13 00:59:53.232808 ignition[1236]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem724540978" Aug 13 00:59:53.232808 ignition[1236]: INFO : op(9): [started] unmounting "/mnt/oem724540978" Aug 13 00:59:53.232808 ignition[1236]: INFO : op(9): [finished] unmounting "/mnt/oem724540978" Aug 13 00:59:53.232808 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 00:59:53.232808 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:59:53.232808 ignition[1236]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:59:53.245428 ignition[1236]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2468209438" Aug 13 00:59:53.245428 ignition[1236]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2468209438": device or resource busy Aug 13 00:59:53.245428 ignition[1236]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2468209438", trying btrfs: device or resource busy Aug 13 00:59:53.245428 ignition[1236]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2468209438" Aug 13 00:59:53.245428 ignition[1236]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2468209438" Aug 13 00:59:53.245428 ignition[1236]: INFO : op(c): [started] unmounting "/mnt/oem2468209438" Aug 13 00:59:53.245428 ignition[1236]: INFO : op(c): [finished] unmounting "/mnt/oem2468209438" Aug 13 00:59:53.245428 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:59:53.245428 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Aug 13 00:59:53.245428 ignition[1236]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Aug 13 00:59:53.586067 systemd[1]: mnt-oem3165967496.mount: Deactivated successfully. Aug 13 00:59:53.646578 ignition[1236]: INFO : GET result: OK Aug 13 00:59:53.677634 systemd-networkd[1100]: eth0: Gained IPv6LL Aug 13 00:59:53.982596 ignition[1236]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Aug 13 00:59:53.982596 ignition[1236]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Aug 13 00:59:53.982596 ignition[1236]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Aug 13 00:59:53.982596 ignition[1236]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(12): [started] processing unit "nvidia.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(12): [finished] processing unit "nvidia.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(15): [started] setting preset to enabled for "nvidia.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(15): [finished] setting preset to enabled for "nvidia.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(17): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(17): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(18): [started] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: op(18): [finished] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:59:53.988346 ignition[1236]: INFO : files: files passed Aug 13 00:59:53.988346 ignition[1236]: INFO : Ignition finished successfully Aug 13 00:59:54.043778 kernel: kauditd_printk_skb: 25 callbacks suppressed Aug 13 00:59:54.043804 kernel: audit: type=1130 audit(1755046793.990:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.043818 kernel: audit: type=1130 audit(1755046794.012:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.043831 kernel: audit: type=1130 audit(1755046794.019:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.043843 kernel: audit: type=1131 audit(1755046794.019:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:53.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:53.990903 systemd[1]: Finished ignition-files.service. Aug 13 00:59:53.995658 systemd[1]: Starting initrd-setup-root-after-ignition.service... Aug 13 00:59:54.045671 initrd-setup-root-after-ignition[1261]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Aug 13 00:59:54.004611 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Aug 13 00:59:54.005598 systemd[1]: Starting ignition-quench.service... Aug 13 00:59:54.011953 systemd[1]: Finished initrd-setup-root-after-ignition.service. Aug 13 00:59:54.014084 systemd[1]: ignition-quench.service: Deactivated successfully. Aug 13 00:59:54.014184 systemd[1]: Finished ignition-quench.service. Aug 13 00:59:54.062927 kernel: audit: type=1130 audit(1755046794.050:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.062965 kernel: audit: type=1131 audit(1755046794.050:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.021342 systemd[1]: Reached target ignition-complete.target. Aug 13 00:59:54.034180 systemd[1]: Starting initrd-parse-etc.service... Aug 13 00:59:54.050684 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Aug 13 00:59:54.050804 systemd[1]: Finished initrd-parse-etc.service. Aug 13 00:59:54.052282 systemd[1]: Reached target initrd-fs.target. Aug 13 00:59:54.063778 systemd[1]: Reached target initrd.target. Aug 13 00:59:54.065294 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Aug 13 00:59:54.066654 systemd[1]: Starting dracut-pre-pivot.service... Aug 13 00:59:54.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.081989 systemd[1]: Finished dracut-pre-pivot.service. Aug 13 00:59:54.092282 kernel: audit: type=1130 audit(1755046794.081:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.089751 systemd[1]: Starting initrd-cleanup.service... Aug 13 00:59:54.098935 systemd[1]: Stopped target nss-lookup.target. Aug 13 00:59:54.099805 systemd[1]: Stopped target remote-cryptsetup.target. Aug 13 00:59:54.101310 systemd[1]: Stopped target timers.target. Aug 13 00:59:54.102535 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Aug 13 00:59:54.109233 kernel: audit: type=1131 audit(1755046794.102:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.102757 systemd[1]: Stopped dracut-pre-pivot.service. Aug 13 00:59:54.104054 systemd[1]: Stopped target initrd.target. Aug 13 00:59:54.110175 systemd[1]: Stopped target basic.target. Aug 13 00:59:54.111420 systemd[1]: Stopped target ignition-complete.target. Aug 13 00:59:54.112654 systemd[1]: Stopped target ignition-diskful.target. Aug 13 00:59:54.113950 systemd[1]: Stopped target initrd-root-device.target. Aug 13 00:59:54.115126 systemd[1]: Stopped target remote-fs.target. Aug 13 00:59:54.116320 systemd[1]: Stopped target remote-fs-pre.target. Aug 13 00:59:54.117627 systemd[1]: Stopped target sysinit.target. Aug 13 00:59:54.118820 systemd[1]: Stopped target local-fs.target. Aug 13 00:59:54.119999 systemd[1]: Stopped target local-fs-pre.target. Aug 13 00:59:54.121859 systemd[1]: Stopped target swap.target. Aug 13 00:59:54.129358 kernel: audit: type=1131 audit(1755046794.122:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.122945 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Aug 13 00:59:54.123153 systemd[1]: Stopped dracut-pre-mount.service. Aug 13 00:59:54.136819 kernel: audit: type=1131 audit(1755046794.129:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.124348 systemd[1]: Stopped target cryptsetup.target. Aug 13 00:59:54.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.130145 systemd[1]: dracut-initqueue.service: Deactivated successfully. Aug 13 00:59:54.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.130362 systemd[1]: Stopped dracut-initqueue.service. Aug 13 00:59:54.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.153754 iscsid[1105]: iscsid shutting down. Aug 13 00:59:54.131629 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Aug 13 00:59:54.161713 ignition[1274]: INFO : Ignition 2.14.0 Aug 13 00:59:54.161713 ignition[1274]: INFO : Stage: umount Aug 13 00:59:54.161713 ignition[1274]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:59:54.161713 ignition[1274]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:59:54.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.131847 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Aug 13 00:59:54.137833 systemd[1]: ignition-files.service: Deactivated successfully. Aug 13 00:59:54.137971 systemd[1]: Stopped ignition-files.service. Aug 13 00:59:54.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.181512 ignition[1274]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:59:54.181512 ignition[1274]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:59:54.140683 systemd[1]: Stopping ignition-mount.service... Aug 13 00:59:54.142815 systemd[1]: Stopping iscsid.service... Aug 13 00:59:54.186889 ignition[1274]: INFO : PUT result: OK Aug 13 00:59:54.143776 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Aug 13 00:59:54.143983 systemd[1]: Stopped kmod-static-nodes.service. Aug 13 00:59:54.152320 systemd[1]: Stopping sysroot-boot.service... Aug 13 00:59:54.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.153356 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Aug 13 00:59:54.193856 ignition[1274]: INFO : umount: umount passed Aug 13 00:59:54.193856 ignition[1274]: INFO : Ignition finished successfully Aug 13 00:59:54.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.157709 systemd[1]: Stopped systemd-udev-trigger.service. Aug 13 00:59:54.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.168833 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Aug 13 00:59:54.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.169002 systemd[1]: Stopped dracut-pre-trigger.service. Aug 13 00:59:54.172563 systemd[1]: iscsid.service: Deactivated successfully. Aug 13 00:59:54.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.172697 systemd[1]: Stopped iscsid.service. Aug 13 00:59:54.176812 systemd[1]: initrd-cleanup.service: Deactivated successfully. Aug 13 00:59:54.176933 systemd[1]: Finished initrd-cleanup.service. Aug 13 00:59:54.182622 systemd[1]: sysroot-boot.mount: Deactivated successfully. Aug 13 00:59:54.184809 systemd[1]: Stopping iscsiuio.service... Aug 13 00:59:54.190667 systemd[1]: iscsiuio.service: Deactivated successfully. Aug 13 00:59:54.190807 systemd[1]: Stopped iscsiuio.service. Aug 13 00:59:54.193544 systemd[1]: ignition-mount.service: Deactivated successfully. Aug 13 00:59:54.193664 systemd[1]: Stopped ignition-mount.service. Aug 13 00:59:54.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.194524 systemd[1]: ignition-disks.service: Deactivated successfully. Aug 13 00:59:54.194590 systemd[1]: Stopped ignition-disks.service. Aug 13 00:59:54.195655 systemd[1]: ignition-kargs.service: Deactivated successfully. Aug 13 00:59:54.195716 systemd[1]: Stopped ignition-kargs.service. Aug 13 00:59:54.196838 systemd[1]: ignition-fetch.service: Deactivated successfully. Aug 13 00:59:54.196912 systemd[1]: Stopped ignition-fetch.service. Aug 13 00:59:54.198151 systemd[1]: Stopped target network.target. Aug 13 00:59:54.199270 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Aug 13 00:59:54.199338 systemd[1]: Stopped ignition-fetch-offline.service. Aug 13 00:59:54.200528 systemd[1]: Stopped target paths.target. Aug 13 00:59:54.201795 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Aug 13 00:59:54.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.205549 systemd[1]: Stopped systemd-ask-password-console.path. Aug 13 00:59:54.206580 systemd[1]: Stopped target slices.target. Aug 13 00:59:54.208138 systemd[1]: Stopped target sockets.target. Aug 13 00:59:54.208694 systemd[1]: iscsid.socket: Deactivated successfully. Aug 13 00:59:54.208739 systemd[1]: Closed iscsid.socket. Aug 13 00:59:54.209422 systemd[1]: iscsiuio.socket: Deactivated successfully. Aug 13 00:59:54.209457 systemd[1]: Closed iscsiuio.socket. Aug 13 00:59:54.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.210043 systemd[1]: ignition-setup.service: Deactivated successfully. Aug 13 00:59:54.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.210105 systemd[1]: Stopped ignition-setup.service. Aug 13 00:59:54.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.211046 systemd[1]: Stopping systemd-networkd.service... Aug 13 00:59:54.212172 systemd[1]: Stopping systemd-resolved.service... Aug 13 00:59:54.216784 systemd-networkd[1100]: eth0: DHCPv6 lease lost Aug 13 00:59:54.231000 audit: BPF prog-id=9 op=UNLOAD Aug 13 00:59:54.218261 systemd[1]: systemd-networkd.service: Deactivated successfully. Aug 13 00:59:54.218414 systemd[1]: Stopped systemd-networkd.service. Aug 13 00:59:54.219654 systemd[1]: systemd-networkd.socket: Deactivated successfully. Aug 13 00:59:54.219697 systemd[1]: Closed systemd-networkd.socket. Aug 13 00:59:54.223302 systemd[1]: Stopping network-cleanup.service... Aug 13 00:59:54.226029 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Aug 13 00:59:54.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.226111 systemd[1]: Stopped parse-ip-for-networkd.service. Aug 13 00:59:54.227126 systemd[1]: systemd-sysctl.service: Deactivated successfully. Aug 13 00:59:54.242000 audit: BPF prog-id=6 op=UNLOAD Aug 13 00:59:54.227198 systemd[1]: Stopped systemd-sysctl.service. Aug 13 00:59:54.228227 systemd[1]: systemd-modules-load.service: Deactivated successfully. Aug 13 00:59:54.228322 systemd[1]: Stopped systemd-modules-load.service. Aug 13 00:59:54.234527 systemd[1]: Stopping systemd-udevd.service... Aug 13 00:59:54.239132 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Aug 13 00:59:54.239904 systemd[1]: systemd-resolved.service: Deactivated successfully. Aug 13 00:59:54.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.240039 systemd[1]: Stopped systemd-resolved.service. Aug 13 00:59:54.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.247512 systemd[1]: systemd-udevd.service: Deactivated successfully. Aug 13 00:59:54.247719 systemd[1]: Stopped systemd-udevd.service. Aug 13 00:59:54.250082 systemd[1]: network-cleanup.service: Deactivated successfully. Aug 13 00:59:54.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.250212 systemd[1]: Stopped network-cleanup.service. Aug 13 00:59:54.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.251123 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Aug 13 00:59:54.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.251176 systemd[1]: Closed systemd-udevd-control.socket. Aug 13 00:59:54.252094 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Aug 13 00:59:54.252141 systemd[1]: Closed systemd-udevd-kernel.socket. Aug 13 00:59:54.253296 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Aug 13 00:59:54.253362 systemd[1]: Stopped dracut-pre-udev.service. Aug 13 00:59:54.254386 systemd[1]: dracut-cmdline.service: Deactivated successfully. Aug 13 00:59:54.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.254441 systemd[1]: Stopped dracut-cmdline.service. Aug 13 00:59:54.255530 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Aug 13 00:59:54.255613 systemd[1]: Stopped dracut-cmdline-ask.service. Aug 13 00:59:54.258161 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Aug 13 00:59:54.259051 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Aug 13 00:59:54.259119 systemd[1]: Stopped systemd-vconsole-setup.service. Aug 13 00:59:54.267869 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Aug 13 00:59:54.267965 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Aug 13 00:59:54.322857 systemd[1]: sysroot-boot.service: Deactivated successfully. Aug 13 00:59:54.322992 systemd[1]: Stopped sysroot-boot.service. Aug 13 00:59:54.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.324324 systemd[1]: Reached target initrd-switch-root.target. Aug 13 00:59:54.325454 systemd[1]: initrd-setup-root.service: Deactivated successfully. Aug 13 00:59:54.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.325557 systemd[1]: Stopped initrd-setup-root.service. Aug 13 00:59:54.327741 systemd[1]: Starting initrd-switch-root.service... Aug 13 00:59:54.340797 systemd[1]: Switching root. Aug 13 00:59:54.362778 systemd-journald[185]: Journal stopped Aug 13 00:59:57.862603 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Aug 13 00:59:57.862672 kernel: SELinux: Class mctp_socket not defined in policy. Aug 13 00:59:57.862688 kernel: SELinux: Class anon_inode not defined in policy. Aug 13 00:59:57.862700 kernel: SELinux: the above unknown classes and permissions will be allowed Aug 13 00:59:57.862711 kernel: SELinux: policy capability network_peer_controls=1 Aug 13 00:59:57.862722 kernel: SELinux: policy capability open_perms=1 Aug 13 00:59:57.862735 kernel: SELinux: policy capability extended_socket_class=1 Aug 13 00:59:57.862749 kernel: SELinux: policy capability always_check_network=0 Aug 13 00:59:57.862767 kernel: SELinux: policy capability cgroup_seclabel=1 Aug 13 00:59:57.862778 kernel: SELinux: policy capability nnp_nosuid_transition=1 Aug 13 00:59:57.862790 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Aug 13 00:59:57.862801 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Aug 13 00:59:57.862812 systemd[1]: Successfully loaded SELinux policy in 54.173ms. Aug 13 00:59:57.862830 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.717ms. Aug 13 00:59:57.862843 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:59:57.862858 systemd[1]: Detected virtualization amazon. Aug 13 00:59:57.862870 systemd[1]: Detected architecture x86-64. Aug 13 00:59:57.862882 systemd[1]: Detected first boot. Aug 13 00:59:57.862894 systemd[1]: Initializing machine ID from VM UUID. Aug 13 00:59:57.862907 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Aug 13 00:59:57.862918 systemd[1]: Populated /etc with preset unit settings. Aug 13 00:59:57.862931 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:59:57.862943 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:59:57.862962 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:59:57.862975 systemd[1]: initrd-switch-root.service: Deactivated successfully. Aug 13 00:59:57.862987 systemd[1]: Stopped initrd-switch-root.service. Aug 13 00:59:57.863000 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Aug 13 00:59:57.863012 systemd[1]: Created slice system-addon\x2dconfig.slice. Aug 13 00:59:57.863024 systemd[1]: Created slice system-addon\x2drun.slice. Aug 13 00:59:57.863037 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Aug 13 00:59:57.863049 systemd[1]: Created slice system-getty.slice. Aug 13 00:59:57.863063 systemd[1]: Created slice system-modprobe.slice. Aug 13 00:59:57.863075 systemd[1]: Created slice system-serial\x2dgetty.slice. Aug 13 00:59:57.863087 systemd[1]: Created slice system-system\x2dcloudinit.slice. Aug 13 00:59:57.863099 systemd[1]: Created slice system-systemd\x2dfsck.slice. Aug 13 00:59:57.863111 systemd[1]: Created slice user.slice. Aug 13 00:59:57.863122 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:59:57.863134 systemd[1]: Started systemd-ask-password-wall.path. Aug 13 00:59:57.863146 systemd[1]: Set up automount boot.automount. Aug 13 00:59:57.863158 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Aug 13 00:59:57.863176 systemd[1]: Stopped target initrd-switch-root.target. Aug 13 00:59:57.863187 systemd[1]: Stopped target initrd-fs.target. Aug 13 00:59:57.863202 systemd[1]: Stopped target initrd-root-fs.target. Aug 13 00:59:57.863213 systemd[1]: Reached target integritysetup.target. Aug 13 00:59:57.863224 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:59:57.863236 systemd[1]: Reached target remote-fs.target. Aug 13 00:59:57.863248 systemd[1]: Reached target slices.target. Aug 13 00:59:57.863260 systemd[1]: Reached target swap.target. Aug 13 00:59:57.863274 systemd[1]: Reached target torcx.target. Aug 13 00:59:57.863286 systemd[1]: Reached target veritysetup.target. Aug 13 00:59:57.863298 systemd[1]: Listening on systemd-coredump.socket. Aug 13 00:59:57.863309 systemd[1]: Listening on systemd-initctl.socket. Aug 13 00:59:57.863321 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:59:57.863332 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:59:57.863344 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:59:57.863359 systemd[1]: Listening on systemd-userdbd.socket. Aug 13 00:59:57.863371 systemd[1]: Mounting dev-hugepages.mount... Aug 13 00:59:57.863385 systemd[1]: Mounting dev-mqueue.mount... Aug 13 00:59:57.863396 systemd[1]: Mounting media.mount... Aug 13 00:59:57.863408 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 00:59:57.863420 systemd[1]: Mounting sys-kernel-debug.mount... Aug 13 00:59:57.863432 systemd[1]: Mounting sys-kernel-tracing.mount... Aug 13 00:59:57.863443 systemd[1]: Mounting tmp.mount... Aug 13 00:59:57.863457 systemd[1]: Starting flatcar-tmpfiles.service... Aug 13 00:59:57.863476 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:59:57.863521 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:59:57.863534 systemd[1]: Starting modprobe@configfs.service... Aug 13 00:59:57.863545 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:59:57.863557 systemd[1]: Starting modprobe@drm.service... Aug 13 00:59:57.863569 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:59:57.863582 systemd[1]: Starting modprobe@fuse.service... Aug 13 00:59:57.863596 systemd[1]: Starting modprobe@loop.service... Aug 13 00:59:57.863609 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Aug 13 00:59:57.863620 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Aug 13 00:59:57.863648 systemd[1]: Stopped systemd-fsck-root.service. Aug 13 00:59:57.863660 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Aug 13 00:59:57.863671 systemd[1]: Stopped systemd-fsck-usr.service. Aug 13 00:59:57.863683 systemd[1]: Stopped systemd-journald.service. Aug 13 00:59:57.863695 systemd[1]: Starting systemd-journald.service... Aug 13 00:59:57.863707 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:59:57.863721 systemd[1]: Starting systemd-network-generator.service... Aug 13 00:59:57.863733 systemd[1]: Starting systemd-remount-fs.service... Aug 13 00:59:57.863745 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:59:57.863757 systemd[1]: verity-setup.service: Deactivated successfully. Aug 13 00:59:57.863770 kernel: loop: module loaded Aug 13 00:59:57.863781 systemd[1]: Stopped verity-setup.service. Aug 13 00:59:57.863793 kernel: fuse: init (API version 7.34) Aug 13 00:59:57.863805 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 00:59:57.863819 systemd[1]: Mounted dev-hugepages.mount. Aug 13 00:59:57.863833 systemd[1]: Mounted dev-mqueue.mount. Aug 13 00:59:57.863844 systemd[1]: Mounted media.mount. Aug 13 00:59:57.863856 systemd[1]: Mounted sys-kernel-debug.mount. Aug 13 00:59:57.863867 systemd[1]: Mounted sys-kernel-tracing.mount. Aug 13 00:59:57.863879 systemd[1]: Mounted tmp.mount. Aug 13 00:59:57.863891 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:59:57.863903 systemd[1]: modprobe@configfs.service: Deactivated successfully. Aug 13 00:59:57.863914 systemd[1]: Finished modprobe@configfs.service. Aug 13 00:59:57.863926 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:59:57.863940 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:59:57.863952 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 00:59:57.863964 systemd[1]: Finished modprobe@drm.service. Aug 13 00:59:57.863976 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:59:57.863987 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:59:57.864005 systemd-journald[1394]: Journal started Aug 13 00:59:57.864051 systemd-journald[1394]: Runtime Journal (/run/log/journal/ec2800e1c17032f7ac1885404fad9e57) is 4.8M, max 38.3M, 33.5M free. Aug 13 00:59:54.609000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Aug 13 00:59:54.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:59:54.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:59:54.701000 audit: BPF prog-id=10 op=LOAD Aug 13 00:59:54.701000 audit: BPF prog-id=10 op=UNLOAD Aug 13 00:59:54.701000 audit: BPF prog-id=11 op=LOAD Aug 13 00:59:54.701000 audit: BPF prog-id=11 op=UNLOAD Aug 13 00:59:54.847000 audit[1308]: AVC avc: denied { associate } for pid=1308 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Aug 13 00:59:54.847000 audit[1308]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8b2 a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=1291 pid=1308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:59:54.847000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:59:54.851000 audit[1308]: AVC avc: denied { associate } for pid=1308 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Aug 13 00:59:54.851000 audit[1308]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d999 a2=1ed a3=0 items=2 ppid=1291 pid=1308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:59:54.851000 audit: CWD cwd="/" Aug 13 00:59:54.851000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:54.851000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:54.851000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:59:57.634000 audit: BPF prog-id=12 op=LOAD Aug 13 00:59:57.634000 audit: BPF prog-id=3 op=UNLOAD Aug 13 00:59:57.634000 audit: BPF prog-id=13 op=LOAD Aug 13 00:59:57.634000 audit: BPF prog-id=14 op=LOAD Aug 13 00:59:57.634000 audit: BPF prog-id=4 op=UNLOAD Aug 13 00:59:57.634000 audit: BPF prog-id=5 op=UNLOAD Aug 13 00:59:57.634000 audit: BPF prog-id=15 op=LOAD Aug 13 00:59:57.634000 audit: BPF prog-id=12 op=UNLOAD Aug 13 00:59:57.635000 audit: BPF prog-id=16 op=LOAD Aug 13 00:59:57.635000 audit: BPF prog-id=17 op=LOAD Aug 13 00:59:57.635000 audit: BPF prog-id=13 op=UNLOAD Aug 13 00:59:57.635000 audit: BPF prog-id=14 op=UNLOAD Aug 13 00:59:57.635000 audit: BPF prog-id=18 op=LOAD Aug 13 00:59:57.635000 audit: BPF prog-id=15 op=UNLOAD Aug 13 00:59:57.635000 audit: BPF prog-id=19 op=LOAD Aug 13 00:59:57.635000 audit: BPF prog-id=20 op=LOAD Aug 13 00:59:57.635000 audit: BPF prog-id=16 op=UNLOAD Aug 13 00:59:57.635000 audit: BPF prog-id=17 op=UNLOAD Aug 13 00:59:57.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.643000 audit: BPF prog-id=18 op=UNLOAD Aug 13 00:59:57.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.792000 audit: BPF prog-id=21 op=LOAD Aug 13 00:59:57.792000 audit: BPF prog-id=22 op=LOAD Aug 13 00:59:57.792000 audit: BPF prog-id=23 op=LOAD Aug 13 00:59:57.792000 audit: BPF prog-id=19 op=UNLOAD Aug 13 00:59:57.792000 audit: BPF prog-id=20 op=UNLOAD Aug 13 00:59:57.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.860000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Aug 13 00:59:57.860000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffe76bf0b60 a2=4000 a3=7ffe76bf0bfc items=0 ppid=1 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:59:57.860000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Aug 13 00:59:57.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.866614 systemd[1]: Started systemd-journald.service. Aug 13 00:59:57.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.843591 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:59:57.633527 systemd[1]: Queued start job for default target multi-user.target. Aug 13 00:59:54.844503 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:59:57.633541 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Aug 13 00:59:54.844536 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:59:57.637773 systemd[1]: systemd-journald.service: Deactivated successfully. Aug 13 00:59:54.844580 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Aug 13 00:59:54.844596 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="skipped missing lower profile" missing profile=oem Aug 13 00:59:54.844643 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Aug 13 00:59:54.844663 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Aug 13 00:59:54.844930 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Aug 13 00:59:54.845067 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:59:54.845086 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:59:54.847589 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Aug 13 00:59:54.847654 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Aug 13 00:59:57.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.847687 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Aug 13 00:59:57.869418 systemd[1]: modprobe@fuse.service: Deactivated successfully. Aug 13 00:59:54.847714 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Aug 13 00:59:57.869560 systemd[1]: Finished modprobe@fuse.service. Aug 13 00:59:57.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:54.847744 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Aug 13 00:59:57.870394 systemd[1]: Finished flatcar-tmpfiles.service. Aug 13 00:59:54.847767 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:54Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Aug 13 00:59:57.871172 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:59:57.185412 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:57Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:59:57.871327 systemd[1]: Finished modprobe@loop.service. Aug 13 00:59:57.185857 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:57Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:59:57.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.185972 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:57Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:59:57.186168 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:57Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:59:57.186218 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:57Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Aug 13 00:59:57.186276 /usr/lib/systemd/system-generators/torcx-generator[1308]: time="2025-08-13T00:59:57Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Aug 13 00:59:57.872250 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:59:57.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.873794 systemd[1]: Finished systemd-network-generator.service. Aug 13 00:59:57.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.874529 systemd[1]: Finished systemd-remount-fs.service. Aug 13 00:59:57.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.875582 systemd[1]: Reached target network-pre.target. Aug 13 00:59:57.878310 systemd[1]: Mounting sys-fs-fuse-connections.mount... Aug 13 00:59:57.880613 systemd[1]: Mounting sys-kernel-config.mount... Aug 13 00:59:57.884585 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Aug 13 00:59:57.887370 systemd[1]: Starting systemd-hwdb-update.service... Aug 13 00:59:57.889150 systemd[1]: Starting systemd-journal-flush.service... Aug 13 00:59:57.890033 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:59:57.891465 systemd[1]: Starting systemd-random-seed.service... Aug 13 00:59:57.892560 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:59:57.913561 systemd-journald[1394]: Time spent on flushing to /var/log/journal/ec2800e1c17032f7ac1885404fad9e57 is 33.312ms for 1207 entries. Aug 13 00:59:57.913561 systemd-journald[1394]: System Journal (/var/log/journal/ec2800e1c17032f7ac1885404fad9e57) is 8.0M, max 195.6M, 187.6M free. Aug 13 00:59:57.965201 systemd-journald[1394]: Received client request to flush runtime journal. Aug 13 00:59:57.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.894194 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:59:57.896634 systemd[1]: Starting systemd-sysusers.service... Aug 13 00:59:57.901468 systemd[1]: Mounted sys-fs-fuse-connections.mount. Aug 13 00:59:57.902682 systemd[1]: Mounted sys-kernel-config.mount. Aug 13 00:59:57.966453 udevadm[1427]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Aug 13 00:59:57.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:57.921152 systemd[1]: Finished systemd-random-seed.service. Aug 13 00:59:57.921804 systemd[1]: Reached target first-boot-complete.target. Aug 13 00:59:57.927434 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:59:57.944872 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:59:57.946613 systemd[1]: Starting systemd-udev-settle.service... Aug 13 00:59:57.954944 systemd[1]: Finished systemd-sysusers.service. Aug 13 00:59:57.966125 systemd[1]: Finished systemd-journal-flush.service. Aug 13 00:59:58.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:58.466000 audit: BPF prog-id=24 op=LOAD Aug 13 00:59:58.466000 audit: BPF prog-id=25 op=LOAD Aug 13 00:59:58.466000 audit: BPF prog-id=7 op=UNLOAD Aug 13 00:59:58.466000 audit: BPF prog-id=8 op=UNLOAD Aug 13 00:59:58.466522 systemd[1]: Finished systemd-hwdb-update.service. Aug 13 00:59:58.468340 systemd[1]: Starting systemd-udevd.service... Aug 13 00:59:58.486807 systemd-udevd[1429]: Using default interface naming scheme 'v252'. Aug 13 00:59:58.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:58.532000 audit: BPF prog-id=26 op=LOAD Aug 13 00:59:58.532077 systemd[1]: Started systemd-udevd.service. Aug 13 00:59:58.534507 systemd[1]: Starting systemd-networkd.service... Aug 13 00:59:58.544000 audit: BPF prog-id=27 op=LOAD Aug 13 00:59:58.544000 audit: BPF prog-id=28 op=LOAD Aug 13 00:59:58.544000 audit: BPF prog-id=29 op=LOAD Aug 13 00:59:58.546408 systemd[1]: Starting systemd-userdbd.service... Aug 13 00:59:58.577587 (udev-worker)[1433]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:59:58.579561 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Aug 13 00:59:58.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:58.589480 systemd[1]: Started systemd-userdbd.service. Aug 13 00:59:58.634522 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Aug 13 00:59:58.641503 kernel: ACPI: button: Power Button [PWRF] Aug 13 00:59:58.643508 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Aug 13 00:59:58.656505 kernel: ACPI: button: Sleep Button [SLPF] Aug 13 00:59:58.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:58.678700 systemd-networkd[1437]: lo: Link UP Aug 13 00:59:58.678714 systemd-networkd[1437]: lo: Gained carrier Aug 13 00:59:58.679431 systemd-networkd[1437]: Enumeration completed Aug 13 00:59:58.679641 systemd[1]: Started systemd-networkd.service. Aug 13 00:59:58.682287 systemd[1]: Starting systemd-networkd-wait-online.service... Aug 13 00:59:58.684302 systemd-networkd[1437]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:59:58.690517 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:59:58.690479 systemd-networkd[1437]: eth0: Link UP Aug 13 00:59:58.690981 systemd-networkd[1437]: eth0: Gained carrier Aug 13 00:59:58.708753 systemd-networkd[1437]: eth0: DHCPv4 address 172.31.17.234/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 00:59:58.657000 audit[1432]: AVC avc: denied { confidentiality } for pid=1432 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Aug 13 00:59:58.657000 audit[1432]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=558d9014fc80 a1=338ac a2=7f3ae60ccbc5 a3=5 items=110 ppid=1429 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:59:58.657000 audit: CWD cwd="/" Aug 13 00:59:58.657000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=1 name=(null) inode=13271 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=2 name=(null) inode=13271 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=3 name=(null) inode=13272 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=4 name=(null) inode=13271 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=5 name=(null) inode=13273 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=6 name=(null) inode=13271 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=7 name=(null) inode=13274 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=8 name=(null) inode=13274 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=9 name=(null) inode=13275 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=10 name=(null) inode=13274 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=11 name=(null) inode=13276 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=12 name=(null) inode=13274 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=13 name=(null) inode=13277 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=14 name=(null) inode=13274 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=15 name=(null) inode=13278 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=16 name=(null) inode=13274 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=17 name=(null) inode=13279 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=18 name=(null) inode=13271 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=19 name=(null) inode=13280 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=20 name=(null) inode=13280 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=21 name=(null) inode=13281 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=22 name=(null) inode=13280 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=23 name=(null) inode=13282 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=24 name=(null) inode=13280 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=25 name=(null) inode=13283 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=26 name=(null) inode=13280 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=27 name=(null) inode=13284 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=28 name=(null) inode=13280 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=29 name=(null) inode=13285 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=30 name=(null) inode=13271 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=31 name=(null) inode=13286 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=32 name=(null) inode=13286 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=33 name=(null) inode=13287 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=34 name=(null) inode=13286 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=35 name=(null) inode=13288 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=36 name=(null) inode=13286 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=37 name=(null) inode=13289 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=38 name=(null) inode=13286 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=39 name=(null) inode=13290 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=40 name=(null) inode=13286 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=41 name=(null) inode=13291 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=42 name=(null) inode=13271 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=43 name=(null) inode=13292 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=44 name=(null) inode=13292 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=45 name=(null) inode=13293 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=46 name=(null) inode=13292 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=47 name=(null) inode=13294 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=48 name=(null) inode=13292 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=49 name=(null) inode=13295 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=50 name=(null) inode=13292 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=51 name=(null) inode=13296 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=52 name=(null) inode=13292 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=53 name=(null) inode=13297 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=55 name=(null) inode=13298 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=56 name=(null) inode=13298 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=57 name=(null) inode=13299 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=58 name=(null) inode=13298 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=59 name=(null) inode=13300 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=60 name=(null) inode=13298 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=61 name=(null) inode=13301 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=62 name=(null) inode=13301 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=63 name=(null) inode=13302 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=64 name=(null) inode=13301 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=65 name=(null) inode=13303 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=66 name=(null) inode=13301 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=67 name=(null) inode=13304 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=68 name=(null) inode=13301 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=69 name=(null) inode=13305 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=70 name=(null) inode=13301 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=71 name=(null) inode=13306 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=72 name=(null) inode=13298 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=73 name=(null) inode=13307 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=74 name=(null) inode=13307 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=75 name=(null) inode=13308 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=76 name=(null) inode=13307 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=77 name=(null) inode=13309 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=78 name=(null) inode=13307 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=79 name=(null) inode=13310 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=80 name=(null) inode=13307 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=81 name=(null) inode=13311 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=82 name=(null) inode=13307 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=83 name=(null) inode=13312 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=84 name=(null) inode=13298 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=85 name=(null) inode=15361 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=86 name=(null) inode=15361 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=87 name=(null) inode=15362 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=88 name=(null) inode=15361 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=89 name=(null) inode=15363 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=90 name=(null) inode=15361 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=91 name=(null) inode=15364 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=92 name=(null) inode=15361 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=93 name=(null) inode=15365 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=94 name=(null) inode=15361 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=95 name=(null) inode=15366 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=96 name=(null) inode=13298 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=97 name=(null) inode=15367 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=98 name=(null) inode=15367 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=99 name=(null) inode=15368 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=100 name=(null) inode=15367 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=101 name=(null) inode=15369 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=102 name=(null) inode=15367 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=103 name=(null) inode=15370 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=104 name=(null) inode=15367 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=105 name=(null) inode=15371 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=106 name=(null) inode=15367 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=107 name=(null) inode=15372 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PATH item=109 name=(null) inode=15373 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:59:58.657000 audit: PROCTITLE proctitle="(udev-worker)" Aug 13 00:59:58.761514 kernel: piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr Aug 13 00:59:58.799511 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Aug 13 00:59:58.808515 kernel: mousedev: PS/2 mouse device common for all mice Aug 13 00:59:58.916951 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:59:58.921247 systemd[1]: Finished systemd-udev-settle.service. Aug 13 00:59:58.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:58.923299 systemd[1]: Starting lvm2-activation-early.service... Aug 13 00:59:58.953280 lvm[1543]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:59:58.982008 systemd[1]: Finished lvm2-activation-early.service. Aug 13 00:59:58.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:58.982785 systemd[1]: Reached target cryptsetup.target. Aug 13 00:59:58.984690 systemd[1]: Starting lvm2-activation.service... Aug 13 00:59:58.990170 lvm[1544]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:59:59.012963 systemd[1]: Finished lvm2-activation.service. Aug 13 00:59:59.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.013899 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:59:59.015171 kernel: kauditd_printk_skb: 234 callbacks suppressed Aug 13 00:59:59.015257 kernel: audit: type=1130 audit(1755046799.012:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.020847 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Aug 13 00:59:59.020894 systemd[1]: Reached target local-fs.target. Aug 13 00:59:59.021706 systemd[1]: Reached target machines.target. Aug 13 00:59:59.023578 systemd[1]: Starting ldconfig.service... Aug 13 00:59:59.025256 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:59:59.025333 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:59:59.026629 systemd[1]: Starting systemd-boot-update.service... Aug 13 00:59:59.028627 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Aug 13 00:59:59.032272 systemd[1]: Starting systemd-machine-id-commit.service... Aug 13 00:59:59.036651 systemd[1]: Starting systemd-sysext.service... Aug 13 00:59:59.054855 systemd[1]: Unmounting usr-share-oem.mount... Aug 13 00:59:59.061874 systemd[1]: usr-share-oem.mount: Deactivated successfully. Aug 13 00:59:59.062136 systemd[1]: Unmounted usr-share-oem.mount. Aug 13 00:59:59.068657 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1546 (bootctl) Aug 13 00:59:59.070711 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Aug 13 00:59:59.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.088687 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Aug 13 00:59:59.096518 kernel: audit: type=1130 audit(1755046799.088:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.096594 kernel: loop0: detected capacity change from 0 to 221472 Aug 13 00:59:59.190505 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Aug 13 00:59:59.221527 kernel: loop1: detected capacity change from 0 to 221472 Aug 13 00:59:59.233106 systemd-fsck[1556]: fsck.fat 4.2 (2021-01-31) Aug 13 00:59:59.233106 systemd-fsck[1556]: /dev/nvme0n1p1: 789 files, 119324/258078 clusters Aug 13 00:59:59.244255 kernel: audit: type=1130 audit(1755046799.234:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.235722 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Aug 13 00:59:59.243209 systemd[1]: Mounting boot.mount... Aug 13 00:59:59.259244 (sd-sysext)[1559]: Using extensions 'kubernetes'. Aug 13 00:59:59.260630 (sd-sysext)[1559]: Merged extensions into '/usr'. Aug 13 00:59:59.278860 systemd[1]: Mounted boot.mount. Aug 13 00:59:59.286147 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Aug 13 00:59:59.290705 systemd[1]: Finished systemd-machine-id-commit.service. Aug 13 00:59:59.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.299645 kernel: audit: type=1130 audit(1755046799.290:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.301353 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 00:59:59.303979 systemd[1]: Mounting usr-share-oem.mount... Aug 13 00:59:59.307396 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:59:59.309536 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:59:59.314426 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:59:59.317311 systemd[1]: Starting modprobe@loop.service... Aug 13 00:59:59.318392 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:59:59.318624 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:59:59.318814 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 00:59:59.320230 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:59:59.320418 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:59:59.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.331258 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:59:59.331518 kernel: audit: type=1130 audit(1755046799.322:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.331456 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:59:59.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.339523 kernel: audit: type=1131 audit(1755046799.329:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.342337 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:59:59.342543 systemd[1]: Finished modprobe@loop.service. Aug 13 00:59:59.344040 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:59:59.344195 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:59:59.347851 systemd[1]: Finished systemd-boot-update.service. Aug 13 00:59:59.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.349563 kernel: audit: type=1130 audit(1755046799.338:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.349623 kernel: audit: type=1131 audit(1755046799.338:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.349657 kernel: audit: type=1130 audit(1755046799.342:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.349687 kernel: audit: type=1131 audit(1755046799.342:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.374639 systemd[1]: Mounted usr-share-oem.mount. Aug 13 00:59:59.379225 systemd[1]: Finished systemd-sysext.service. Aug 13 00:59:59.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.382972 systemd[1]: Starting ensure-sysext.service... Aug 13 00:59:59.388173 systemd[1]: Starting systemd-tmpfiles-setup.service... Aug 13 00:59:59.393289 systemd[1]: Reloading. Aug 13 00:59:59.436965 systemd-tmpfiles[1578]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Aug 13 00:59:59.444701 systemd-tmpfiles[1578]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Aug 13 00:59:59.455116 systemd-tmpfiles[1578]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Aug 13 00:59:59.479881 /usr/lib/systemd/system-generators/torcx-generator[1598]: time="2025-08-13T00:59:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:59:59.481230 /usr/lib/systemd/system-generators/torcx-generator[1598]: time="2025-08-13T00:59:59Z" level=info msg="torcx already run" Aug 13 00:59:59.638212 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:59:59.639032 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:59:59.686419 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:59:59.719553 ldconfig[1545]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Aug 13 00:59:59.813000 audit: BPF prog-id=30 op=LOAD Aug 13 00:59:59.813000 audit: BPF prog-id=27 op=UNLOAD Aug 13 00:59:59.814000 audit: BPF prog-id=31 op=LOAD Aug 13 00:59:59.814000 audit: BPF prog-id=32 op=LOAD Aug 13 00:59:59.815000 audit: BPF prog-id=28 op=UNLOAD Aug 13 00:59:59.815000 audit: BPF prog-id=29 op=UNLOAD Aug 13 00:59:59.818000 audit: BPF prog-id=33 op=LOAD Aug 13 00:59:59.818000 audit: BPF prog-id=34 op=LOAD Aug 13 00:59:59.818000 audit: BPF prog-id=24 op=UNLOAD Aug 13 00:59:59.818000 audit: BPF prog-id=25 op=UNLOAD Aug 13 00:59:59.823000 audit: BPF prog-id=35 op=LOAD Aug 13 00:59:59.823000 audit: BPF prog-id=21 op=UNLOAD Aug 13 00:59:59.823000 audit: BPF prog-id=36 op=LOAD Aug 13 00:59:59.823000 audit: BPF prog-id=37 op=LOAD Aug 13 00:59:59.823000 audit: BPF prog-id=22 op=UNLOAD Aug 13 00:59:59.823000 audit: BPF prog-id=23 op=UNLOAD Aug 13 00:59:59.824000 audit: BPF prog-id=38 op=LOAD Aug 13 00:59:59.824000 audit: BPF prog-id=26 op=UNLOAD Aug 13 00:59:59.841507 systemd[1]: Finished ldconfig.service. Aug 13 00:59:59.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.846898 systemd[1]: Finished systemd-tmpfiles-setup.service. Aug 13 00:59:59.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:59:59.853869 systemd[1]: Starting audit-rules.service... Aug 13 00:59:59.857524 systemd[1]: Starting clean-ca-certificates.service... Aug 13 00:59:59.861203 systemd[1]: Starting systemd-journal-catalog-update.service... Aug 13 00:59:59.863000 audit: BPF prog-id=39 op=LOAD Aug 13 00:59:59.866939 systemd[1]: Starting systemd-resolved.service... Aug 13 00:59:59.870000 audit: BPF prog-id=40 op=LOAD Aug 13 00:59:59.874414 systemd[1]: Starting systemd-timesyncd.service... Aug 13 00:59:59.898854 systemd[1]: Starting systemd-update-utmp.service... Aug 13 00:59:59.961238 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:59:59.986227 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:59:59.999713 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:00:00.014000 audit[1660]: SYSTEM_BOOT pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.033977 systemd[1]: Starting modprobe@loop.service... Aug 13 01:00:00.035146 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:00:00.035369 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:00:00.050912 systemd[1]: Finished clean-ca-certificates.service. Aug 13 01:00:00.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.086663 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:00:00.086965 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:00:00.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.097331 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:00:00.098945 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:00:00.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.106986 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:00:00.107184 systemd[1]: Finished modprobe@loop.service. Aug 13 01:00:00.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.149468 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:00:00.161995 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 01:00:00.162243 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 01:00:00.162428 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 01:00:00.167304 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:00:00.195051 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:00:00.195528 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 01:00:00.211870 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 01:00:00.230072 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:00:00.232963 systemd[1]: Starting modprobe@loop.service... Aug 13 01:00:00.234174 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:00:00.234399 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:00:00.234609 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 01:00:00.234737 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:00:00.252839 systemd[1]: Finished systemd-update-utmp.service. Aug 13 01:00:00.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.254372 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:00:00.254584 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:00:00.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.265161 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:00:00.265345 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:00:00.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.278405 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:00:00.278637 systemd[1]: Finished modprobe@loop.service. Aug 13 01:00:00.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.325358 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:00:00.325915 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 01:00:00.349198 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 01:00:00.372117 systemd[1]: Starting modprobe@drm.service... Aug 13 01:00:00.380442 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 01:00:00.400603 systemd[1]: Starting modprobe@loop.service... Aug 13 01:00:00.413779 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 01:00:00.414088 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:00:00.414352 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 01:00:00.414526 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Aug 13 01:00:00.416168 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 01:00:00.416434 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 01:00:00.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.438259 systemd[1]: Finished ensure-sysext.service. Aug 13 01:00:00.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.457219 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 01:00:00.457415 systemd[1]: Finished modprobe@drm.service. Aug 13 01:00:00.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.468788 systemd[1]: Finished systemd-journal-catalog-update.service. Aug 13 01:00:00.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.478613 systemd[1]: Starting systemd-update-done.service... Aug 13 01:00:00.481532 systemd-networkd[1437]: eth0: Gained IPv6LL Aug 13 01:00:00.487804 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 01:00:00.488014 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 01:00:00.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.494931 systemd[1]: Finished systemd-networkd-wait-online.service. Aug 13 01:00:00.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.498867 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 01:00:00.500006 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 01:00:00.500202 systemd[1]: Finished modprobe@loop.service. Aug 13 01:00:00.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.501065 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 01:00:00.591960 systemd[1]: Finished systemd-update-done.service. Aug 13 01:00:00.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:00.748000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Aug 13 01:00:00.748000 audit[1686]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc03ab3b80 a2=420 a3=0 items=0 ppid=1654 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:00.748000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Aug 13 01:00:00.753440 augenrules[1686]: No rules Aug 13 01:00:00.757100 systemd[1]: Finished audit-rules.service. Aug 13 01:00:00.870894 systemd-resolved[1657]: Positive Trust Anchors: Aug 13 01:00:00.870916 systemd-resolved[1657]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 01:00:00.870970 systemd-resolved[1657]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 01:00:00.907537 systemd[1]: Started systemd-timesyncd.service. Aug 13 01:00:00.908223 systemd[1]: Reached target time-set.target. Aug 13 01:00:00.961645 systemd-resolved[1657]: Defaulting to hostname 'linux'. Aug 13 01:00:00.964632 systemd[1]: Started systemd-resolved.service. Aug 13 01:00:00.965251 systemd[1]: Reached target network.target. Aug 13 01:00:00.965711 systemd[1]: Reached target network-online.target. Aug 13 01:00:00.966090 systemd[1]: Reached target nss-lookup.target. Aug 13 01:00:00.974431 systemd[1]: Reached target sysinit.target. Aug 13 01:00:00.976917 systemd[1]: Started motdgen.path. Aug 13 01:00:00.977422 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Aug 13 01:00:00.980015 systemd[1]: Started logrotate.timer. Aug 13 01:00:00.980663 systemd[1]: Started mdadm.timer. Aug 13 01:00:00.981078 systemd[1]: Started systemd-tmpfiles-clean.timer. Aug 13 01:00:00.981472 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Aug 13 01:00:00.985130 systemd[1]: Reached target paths.target. Aug 13 01:00:00.987701 systemd[1]: Reached target timers.target. Aug 13 01:00:00.988843 systemd[1]: Listening on dbus.socket. Aug 13 01:00:00.995474 systemd[1]: Starting docker.socket... Aug 13 01:00:01.003797 systemd[1]: Listening on sshd.socket. Aug 13 01:00:01.004450 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:00:01.009915 systemd[1]: Listening on docker.socket. Aug 13 01:00:01.016399 systemd[1]: Reached target sockets.target. Aug 13 01:00:01.020167 systemd[1]: Reached target basic.target. Aug 13 01:00:01.022857 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 01:00:01.022898 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 01:00:01.027425 systemd[1]: Started amazon-ssm-agent.service. Aug 13 01:00:01.037386 systemd[1]: Starting containerd.service... Aug 13 01:00:01.039914 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Aug 13 01:00:01.062766 systemd[1]: Starting dbus.service... Aug 13 01:00:01.124250 systemd[1]: Starting enable-oem-cloudinit.service... Aug 13 01:00:01.129015 systemd[1]: Starting extend-filesystems.service... Aug 13 01:00:01.129708 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Aug 13 01:00:01.131830 systemd[1]: Starting kubelet.service... Aug 13 01:00:01.153675 systemd[1]: Starting motdgen.service... Aug 13 01:00:01.166188 systemd[1]: Started nvidia.service. Aug 13 01:00:01.178112 systemd[1]: Starting prepare-helm.service... Aug 13 01:00:01.199913 systemd[1]: Starting ssh-key-proc-cmdline.service... Aug 13 01:00:01.520279 jq[1698]: false Aug 13 01:00:01.219348 systemd[1]: Starting sshd-keygen.service... Aug 13 01:00:01.267744 systemd[1]: Starting systemd-logind.service... Aug 13 01:00:01.588037 jq[1709]: true Aug 13 01:00:01.268425 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 01:00:01.268539 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Aug 13 01:00:01.280896 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Aug 13 01:00:01.283089 systemd[1]: Starting update-engine.service... Aug 13 01:00:01.295688 systemd[1]: Starting update-ssh-keys-after-ignition.service... Aug 13 01:00:01.519819 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Aug 13 01:00:01.520052 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Aug 13 01:00:01.541750 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Aug 13 01:00:01.712279 jq[1718]: true Aug 13 01:00:01.541978 systemd[1]: Finished ssh-key-proc-cmdline.service. Aug 13 01:00:03.053510 systemd-timesyncd[1658]: Contacted time server 45.83.234.123:123 (0.flatcar.pool.ntp.org). Aug 13 01:00:03.053589 systemd-resolved[1657]: Clock change detected. Flushing caches. Aug 13 01:00:03.061916 systemd-timesyncd[1658]: Initial clock synchronization to Wed 2025-08-13 01:00:03.053057 UTC. Aug 13 01:00:03.142614 tar[1711]: linux-amd64/helm Aug 13 01:00:03.295914 systemd[1]: motdgen.service: Deactivated successfully. Aug 13 01:00:03.296187 systemd[1]: Finished motdgen.service. Aug 13 01:00:03.371367 dbus-daemon[1697]: [system] SELinux support is enabled Aug 13 01:00:03.390914 systemd[1]: Started dbus.service. Aug 13 01:00:03.417816 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Aug 13 01:00:03.417849 systemd[1]: Reached target system-config.target. Aug 13 01:00:03.418580 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Aug 13 01:00:03.418611 systemd[1]: Reached target user-config.target. Aug 13 01:00:03.465269 dbus-daemon[1697]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1437 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Aug 13 01:00:03.483748 extend-filesystems[1700]: Found loop1 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1p1 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1p2 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1p3 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found usr Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1p4 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1p6 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1p7 Aug 13 01:00:03.483748 extend-filesystems[1700]: Found nvme0n1p9 Aug 13 01:00:03.483748 extend-filesystems[1700]: Checking size of /dev/nvme0n1p9 Aug 13 01:00:03.485516 systemd[1]: Starting systemd-hostnamed.service... Aug 13 01:00:03.563066 amazon-ssm-agent[1694]: 2025/08/13 01:00:03 Failed to load instance info from vault. RegistrationKey does not exist. Aug 13 01:00:03.618856 amazon-ssm-agent[1694]: Initializing new seelog logger Aug 13 01:00:03.618856 amazon-ssm-agent[1694]: New Seelog Logger Creation Complete Aug 13 01:00:03.619072 amazon-ssm-agent[1694]: 2025/08/13 01:00:03 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 01:00:03.619072 amazon-ssm-agent[1694]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 01:00:03.742963 amazon-ssm-agent[1694]: 2025/08/13 01:00:03 processing appconfig overrides Aug 13 01:00:03.987546 extend-filesystems[1700]: Resized partition /dev/nvme0n1p9 Aug 13 01:00:04.012776 extend-filesystems[1770]: resize2fs 1.46.5 (30-Dec-2021) Aug 13 01:00:04.045526 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Aug 13 01:00:04.103948 update_engine[1708]: I0813 01:00:04.103003 1708 main.cc:92] Flatcar Update Engine starting Aug 13 01:00:04.131324 systemd[1]: Started update-engine.service. Aug 13 01:00:04.322663 update_engine[1708]: I0813 01:00:04.139452 1708 update_check_scheduler.cc:74] Next update check in 10m4s Aug 13 01:00:04.135744 systemd[1]: Started locksmithd.service. Aug 13 01:00:04.291661 systemd[1]: Created slice system-sshd.slice. Aug 13 01:00:04.306745 systemd-logind[1707]: Watching system buttons on /dev/input/event1 (Power Button) Aug 13 01:00:04.402597 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Aug 13 01:00:04.306770 systemd-logind[1707]: Watching system buttons on /dev/input/event2 (Sleep Button) Aug 13 01:00:04.306795 systemd-logind[1707]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Aug 13 01:00:04.324139 systemd-logind[1707]: New seat seat0. Aug 13 01:00:04.326531 systemd[1]: Started systemd-logind.service. Aug 13 01:00:04.426517 extend-filesystems[1770]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Aug 13 01:00:04.426517 extend-filesystems[1770]: old_desc_blocks = 1, new_desc_blocks = 1 Aug 13 01:00:04.426517 extend-filesystems[1770]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Aug 13 01:00:04.465696 env[1714]: time="2025-08-13T01:00:04.406747102Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Aug 13 01:00:04.405771 systemd[1]: extend-filesystems.service: Deactivated successfully. Aug 13 01:00:04.466069 extend-filesystems[1700]: Resized filesystem in /dev/nvme0n1p9 Aug 13 01:00:04.486211 bash[1766]: Updated "/home/core/.ssh/authorized_keys" Aug 13 01:00:04.405983 systemd[1]: Finished extend-filesystems.service. Aug 13 01:00:04.445948 systemd[1]: Finished update-ssh-keys-after-ignition.service. Aug 13 01:00:04.626095 dbus-daemon[1697]: [system] Successfully activated service 'org.freedesktop.hostname1' Aug 13 01:00:04.626274 systemd[1]: Started systemd-hostnamed.service. Aug 13 01:00:04.656087 dbus-daemon[1697]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1742 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Aug 13 01:00:04.678678 systemd[1]: Starting polkit.service... Aug 13 01:00:04.950381 systemd[1]: nvidia.service: Deactivated successfully. Aug 13 01:00:04.972356 polkitd[1779]: Started polkitd version 121 Aug 13 01:00:05.128624 polkitd[1779]: Loading rules from directory /etc/polkit-1/rules.d Aug 13 01:00:05.147524 polkitd[1779]: Loading rules from directory /usr/share/polkit-1/rules.d Aug 13 01:00:05.150442 env[1714]: time="2025-08-13T01:00:05.150386062Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Aug 13 01:00:05.155303 polkitd[1779]: Finished loading, compiling and executing 2 rules Aug 13 01:00:05.156857 dbus-daemon[1697]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Aug 13 01:00:05.157044 systemd[1]: Started polkit.service. Aug 13 01:00:05.192279 env[1714]: time="2025-08-13T01:00:05.191679213Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:00:05.193385 polkitd[1779]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Aug 13 01:00:05.248732 env[1714]: time="2025-08-13T01:00:05.248595464Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.189-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Aug 13 01:00:05.264028 systemd-hostnamed[1742]: Hostname set to (transient) Aug 13 01:00:05.264513 systemd-resolved[1657]: System hostname changed to 'ip-172-31-17-234'. Aug 13 01:00:05.286065 env[1714]: time="2025-08-13T01:00:05.285976577Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:00:05.295035 env[1714]: time="2025-08-13T01:00:05.287296899Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 01:00:05.295377 env[1714]: time="2025-08-13T01:00:05.295331540Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Aug 13 01:00:05.295558 env[1714]: time="2025-08-13T01:00:05.295535159Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Aug 13 01:00:05.295759 env[1714]: time="2025-08-13T01:00:05.295741460Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Aug 13 01:00:05.296226 env[1714]: time="2025-08-13T01:00:05.296190767Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:00:05.316509 env[1714]: time="2025-08-13T01:00:05.316191188Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Aug 13 01:00:05.318823 env[1714]: time="2025-08-13T01:00:05.318758543Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 01:00:05.335325 env[1714]: time="2025-08-13T01:00:05.335270165Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Aug 13 01:00:05.335682 env[1714]: time="2025-08-13T01:00:05.335621009Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Aug 13 01:00:05.351442 env[1714]: time="2025-08-13T01:00:05.351385417Z" level=info msg="metadata content store policy set" policy=shared Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.406867488Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.406941459Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.406960443Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407041637Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407090969Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407114933Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407196638Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407233409Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407254303Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407275998Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407309529Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407326699Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407534052Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Aug 13 01:00:05.408983 env[1714]: time="2025-08-13T01:00:05.407670099Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408158058Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408197920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408236043Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408314703Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408333174Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408350571Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408451569Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408472763Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408514911Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408534114Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408551905Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408587345Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408777271Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408799540Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.409575 env[1714]: time="2025-08-13T01:00:05.408830971Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.415802 env[1714]: time="2025-08-13T01:00:05.408848701Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Aug 13 01:00:05.415802 env[1714]: time="2025-08-13T01:00:05.408870715Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Aug 13 01:00:05.415802 env[1714]: time="2025-08-13T01:00:05.408901748Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Aug 13 01:00:05.415802 env[1714]: time="2025-08-13T01:00:05.408926363Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Aug 13 01:00:05.425662 env[1714]: time="2025-08-13T01:00:05.416034901Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Aug 13 01:00:05.426659 env[1714]: time="2025-08-13T01:00:05.416420912Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Aug 13 01:00:05.426659 env[1714]: time="2025-08-13T01:00:05.416543796Z" level=info msg="Connect containerd service" Aug 13 01:00:05.426659 env[1714]: time="2025-08-13T01:00:05.417893772Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Aug 13 01:00:05.439682 env[1714]: time="2025-08-13T01:00:05.438410961Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 01:00:05.439682 env[1714]: time="2025-08-13T01:00:05.438882188Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Aug 13 01:00:05.439682 env[1714]: time="2025-08-13T01:00:05.438960282Z" level=info msg=serving... address=/run/containerd/containerd.sock Aug 13 01:00:05.439152 systemd[1]: Started containerd.service. Aug 13 01:00:05.440706 env[1714]: time="2025-08-13T01:00:05.440676745Z" level=info msg="containerd successfully booted in 1.188593s" Aug 13 01:00:05.460546 env[1714]: time="2025-08-13T01:00:05.460451887Z" level=info msg="Start subscribing containerd event" Aug 13 01:00:05.460670 env[1714]: time="2025-08-13T01:00:05.460581497Z" level=info msg="Start recovering state" Aug 13 01:00:05.460718 env[1714]: time="2025-08-13T01:00:05.460685614Z" level=info msg="Start event monitor" Aug 13 01:00:05.460759 env[1714]: time="2025-08-13T01:00:05.460724347Z" level=info msg="Start snapshots syncer" Aug 13 01:00:05.460759 env[1714]: time="2025-08-13T01:00:05.460740933Z" level=info msg="Start cni network conf syncer for default" Aug 13 01:00:05.460759 env[1714]: time="2025-08-13T01:00:05.460755655Z" level=info msg="Start streaming server" Aug 13 01:00:06.142350 coreos-metadata[1696]: Aug 13 01:00:06.141 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Aug 13 01:00:06.158642 coreos-metadata[1696]: Aug 13 01:00:06.158 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Aug 13 01:00:06.173427 coreos-metadata[1696]: Aug 13 01:00:06.172 INFO Fetch successful Aug 13 01:00:06.173427 coreos-metadata[1696]: Aug 13 01:00:06.172 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Aug 13 01:00:06.174749 coreos-metadata[1696]: Aug 13 01:00:06.174 INFO Fetch successful Aug 13 01:00:06.191031 unknown[1696]: wrote ssh authorized keys file for user: core Aug 13 01:00:06.298611 update-ssh-keys[1834]: Updated "/home/core/.ssh/authorized_keys" Aug 13 01:00:06.299942 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Aug 13 01:00:06.569495 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Create new startup processor Aug 13 01:00:06.617898 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [LongRunningPluginsManager] registered plugins: {} Aug 13 01:00:06.617898 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing bookkeeping folders Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO removing the completed state files Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing bookkeeping folders for long running plugins Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing healthcheck folders for long running plugins Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing locations for inventory plugin Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing default location for custom inventory Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing default location for file inventory Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Initializing default location for role inventory Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Init the cloudwatchlogs publisher Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:runPowerShellScript Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:runDockerAction Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:refreshAssociation Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:configurePackage Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:downloadContent Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:runDocument Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:softwareInventory Aug 13 01:00:06.629644 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:updateSsmAgent Aug 13 01:00:06.643024 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform independent plugin aws:configureDocker Aug 13 01:00:06.643024 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Successfully loaded platform dependent plugin aws:runShellScript Aug 13 01:00:06.643024 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Aug 13 01:00:06.643252 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO OS: linux, Arch: amd64 Aug 13 01:00:06.646196 amazon-ssm-agent[1694]: datastore file /var/lib/amazon/ssm/i-041550244555297c0/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Aug 13 01:00:06.707423 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] Starting document processing engine... Aug 13 01:00:06.947675 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] [EngineProcessor] Starting Aug 13 01:00:07.062308 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Aug 13 01:00:07.190352 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] Starting message polling Aug 13 01:00:07.272898 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] Starting send replies to MDS Aug 13 01:00:07.369424 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [instanceID=i-041550244555297c0] Starting association polling Aug 13 01:00:07.470340 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Aug 13 01:00:07.581946 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] [Association] Launching response handler Aug 13 01:00:07.682872 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Aug 13 01:00:07.778572 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Aug 13 01:00:07.878422 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Aug 13 01:00:07.975586 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessageGatewayService] Starting session document processing engine... Aug 13 01:00:08.071863 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessageGatewayService] [EngineProcessor] Starting Aug 13 01:00:08.168381 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Aug 13 01:00:08.265293 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-041550244555297c0, requestId: 48ee6bd5-ec47-4015-9772-399ba7ea1783 Aug 13 01:00:08.326991 tar[1711]: linux-amd64/LICENSE Aug 13 01:00:08.327404 tar[1711]: linux-amd64/README.md Aug 13 01:00:08.334761 systemd[1]: Finished prepare-helm.service. Aug 13 01:00:08.363371 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [OfflineService] Starting document processing engine... Aug 13 01:00:08.459280 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [OfflineService] [EngineProcessor] Starting Aug 13 01:00:08.566290 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [OfflineService] [EngineProcessor] Initial processing Aug 13 01:00:08.664515 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [OfflineService] Starting message polling Aug 13 01:00:08.705210 locksmithd[1771]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Aug 13 01:00:08.762454 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [OfflineService] Starting send replies to MDS Aug 13 01:00:08.860239 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [LongRunningPluginsManager] starting long running plugin manager Aug 13 01:00:08.958276 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Aug 13 01:00:09.056684 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [HealthCheck] HealthCheck reporting agent health. Aug 13 01:00:09.159510 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessageGatewayService] listening reply. Aug 13 01:00:09.258150 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Aug 13 01:00:09.359975 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [StartupProcessor] Executing startup processor tasks Aug 13 01:00:09.458940 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Aug 13 01:00:09.551619 systemd[1]: Started kubelet.service. Aug 13 01:00:09.559110 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Aug 13 01:00:09.658607 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Aug 13 01:00:09.700985 sshd_keygen[1738]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Aug 13 01:00:09.758120 amazon-ssm-agent[1694]: 2025-08-13 01:00:06 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-041550244555297c0?role=subscribe&stream=input Aug 13 01:00:09.769891 systemd[1]: Finished sshd-keygen.service. Aug 13 01:00:09.778863 systemd[1]: Starting issuegen.service... Aug 13 01:00:09.781712 systemd[1]: Started sshd@0-172.31.17.234:22-147.75.109.163:39312.service. Aug 13 01:00:09.798558 systemd[1]: issuegen.service: Deactivated successfully. Aug 13 01:00:09.798806 systemd[1]: Finished issuegen.service. Aug 13 01:00:09.801920 systemd[1]: Starting systemd-user-sessions.service... Aug 13 01:00:09.827014 systemd[1]: Finished systemd-user-sessions.service. Aug 13 01:00:09.830331 systemd[1]: Started getty@tty1.service. Aug 13 01:00:09.833216 systemd[1]: Started serial-getty@ttyS0.service. Aug 13 01:00:09.834581 systemd[1]: Reached target getty.target. Aug 13 01:00:09.836054 systemd[1]: Reached target multi-user.target. Aug 13 01:00:09.839369 systemd[1]: Starting systemd-update-utmp-runlevel.service... Aug 13 01:00:09.852747 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Aug 13 01:00:09.852950 systemd[1]: Finished systemd-update-utmp-runlevel.service. Aug 13 01:00:09.854026 systemd[1]: Startup finished in 599ms (kernel) + 5.772s (initrd) + 13.983s (userspace) = 20.356s. Aug 13 01:00:09.857959 amazon-ssm-agent[1694]: 2025-08-13 01:00:07 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-041550244555297c0?role=subscribe&stream=input Aug 13 01:00:09.958880 amazon-ssm-agent[1694]: 2025-08-13 01:00:07 INFO [MessageGatewayService] Starting receiving message from control channel Aug 13 01:00:10.010714 sshd[1916]: Accepted publickey for core from 147.75.109.163 port 39312 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:00:10.014175 sshd[1916]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:10.035769 systemd[1]: Created slice user-500.slice. Aug 13 01:00:10.037370 systemd[1]: Starting user-runtime-dir@500.service... Aug 13 01:00:10.044565 systemd-logind[1707]: New session 1 of user core. Aug 13 01:00:10.053023 systemd[1]: Finished user-runtime-dir@500.service. Aug 13 01:00:10.055271 systemd[1]: Starting user@500.service... Aug 13 01:00:10.060250 amazon-ssm-agent[1694]: 2025-08-13 01:00:07 INFO [MessageGatewayService] [EngineProcessor] Initial processing Aug 13 01:00:10.061268 (systemd)[1925]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:10.189132 systemd[1925]: Queued start job for default target default.target. Aug 13 01:00:10.190307 systemd[1925]: Reached target paths.target. Aug 13 01:00:10.190343 systemd[1925]: Reached target sockets.target. Aug 13 01:00:10.190364 systemd[1925]: Reached target timers.target. Aug 13 01:00:10.190382 systemd[1925]: Reached target basic.target. Aug 13 01:00:10.190540 systemd[1]: Started user@500.service. Aug 13 01:00:10.193708 systemd[1]: Started session-1.scope. Aug 13 01:00:10.195426 systemd[1925]: Reached target default.target. Aug 13 01:00:10.195886 systemd[1925]: Startup finished in 124ms. Aug 13 01:00:10.349164 systemd[1]: Started sshd@1-172.31.17.234:22-147.75.109.163:60938.service. Aug 13 01:00:10.527262 sshd[1934]: Accepted publickey for core from 147.75.109.163 port 60938 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:00:10.529295 sshd[1934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:10.536449 systemd[1]: Started session-2.scope. Aug 13 01:00:10.537646 systemd-logind[1707]: New session 2 of user core. Aug 13 01:00:10.671568 sshd[1934]: pam_unix(sshd:session): session closed for user core Aug 13 01:00:10.682922 systemd[1]: sshd@1-172.31.17.234:22-147.75.109.163:60938.service: Deactivated successfully. Aug 13 01:00:10.688847 systemd[1]: session-2.scope: Deactivated successfully. Aug 13 01:00:10.693569 systemd-logind[1707]: Session 2 logged out. Waiting for processes to exit. Aug 13 01:00:10.697686 systemd[1]: Started sshd@2-172.31.17.234:22-147.75.109.163:60946.service. Aug 13 01:00:10.698610 systemd-logind[1707]: Removed session 2. Aug 13 01:00:10.751413 kubelet[1903]: E0813 01:00:10.751363 1903 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 01:00:10.753501 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 01:00:10.753691 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 01:00:10.754072 systemd[1]: kubelet.service: Consumed 1.340s CPU time. Aug 13 01:00:10.870306 sshd[1940]: Accepted publickey for core from 147.75.109.163 port 60946 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:00:10.871254 sshd[1940]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:10.878654 systemd-logind[1707]: New session 3 of user core. Aug 13 01:00:10.879628 systemd[1]: Started session-3.scope. Aug 13 01:00:11.004534 sshd[1940]: pam_unix(sshd:session): session closed for user core Aug 13 01:00:11.012207 systemd[1]: sshd@2-172.31.17.234:22-147.75.109.163:60946.service: Deactivated successfully. Aug 13 01:00:11.013384 systemd[1]: session-3.scope: Deactivated successfully. Aug 13 01:00:11.014622 systemd-logind[1707]: Session 3 logged out. Waiting for processes to exit. Aug 13 01:00:11.015793 systemd-logind[1707]: Removed session 3. Aug 13 01:00:11.032465 systemd[1]: Started sshd@3-172.31.17.234:22-147.75.109.163:60948.service. Aug 13 01:00:11.206023 sshd[1947]: Accepted publickey for core from 147.75.109.163 port 60948 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:00:11.209074 sshd[1947]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:11.216164 systemd[1]: Started session-4.scope. Aug 13 01:00:11.216696 systemd-logind[1707]: New session 4 of user core. Aug 13 01:00:11.343645 sshd[1947]: pam_unix(sshd:session): session closed for user core Aug 13 01:00:11.346985 systemd[1]: sshd@3-172.31.17.234:22-147.75.109.163:60948.service: Deactivated successfully. Aug 13 01:00:11.347854 systemd[1]: session-4.scope: Deactivated successfully. Aug 13 01:00:11.348679 systemd-logind[1707]: Session 4 logged out. Waiting for processes to exit. Aug 13 01:00:11.349728 systemd-logind[1707]: Removed session 4. Aug 13 01:00:11.372466 systemd[1]: Started sshd@4-172.31.17.234:22-147.75.109.163:60954.service. Aug 13 01:00:11.539982 sshd[1953]: Accepted publickey for core from 147.75.109.163 port 60954 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:00:11.541543 sshd[1953]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:11.547380 systemd[1]: Started session-5.scope. Aug 13 01:00:11.547904 systemd-logind[1707]: New session 5 of user core. Aug 13 01:00:11.673431 sudo[1956]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Aug 13 01:00:11.673793 sudo[1956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:00:11.682789 dbus-daemon[1697]: н\xce\u0005SV: received setenforce notice (enforcing=1483043712) Aug 13 01:00:11.685041 sudo[1956]: pam_unix(sudo:session): session closed for user root Aug 13 01:00:11.709584 sshd[1953]: pam_unix(sshd:session): session closed for user core Aug 13 01:00:11.714716 systemd[1]: sshd@4-172.31.17.234:22-147.75.109.163:60954.service: Deactivated successfully. Aug 13 01:00:11.715837 systemd[1]: session-5.scope: Deactivated successfully. Aug 13 01:00:11.716561 systemd-logind[1707]: Session 5 logged out. Waiting for processes to exit. Aug 13 01:00:11.717570 systemd-logind[1707]: Removed session 5. Aug 13 01:00:11.735959 systemd[1]: Started sshd@5-172.31.17.234:22-147.75.109.163:60962.service. Aug 13 01:00:11.897283 sshd[1960]: Accepted publickey for core from 147.75.109.163 port 60962 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:00:11.898787 sshd[1960]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:11.904330 systemd[1]: Started session-6.scope. Aug 13 01:00:11.904869 systemd-logind[1707]: New session 6 of user core. Aug 13 01:00:12.011339 sudo[1964]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Aug 13 01:00:12.012107 sudo[1964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:00:12.015539 sudo[1964]: pam_unix(sudo:session): session closed for user root Aug 13 01:00:12.021055 sudo[1963]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Aug 13 01:00:12.021377 sudo[1963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:00:12.032355 systemd[1]: Stopping audit-rules.service... Aug 13 01:00:12.033000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 01:00:12.035190 kernel: kauditd_printk_skb: 54 callbacks suppressed Aug 13 01:00:12.035278 kernel: audit: type=1305 audit(1755046812.033:220): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 01:00:12.035311 auditctl[1967]: No rules Aug 13 01:00:12.035872 systemd[1]: audit-rules.service: Deactivated successfully. Aug 13 01:00:12.036089 systemd[1]: Stopped audit-rules.service. Aug 13 01:00:12.033000 audit[1967]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffda4dada60 a2=420 a3=0 items=0 ppid=1 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.043961 kernel: audit: type=1300 audit(1755046812.033:220): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffda4dada60 a2=420 a3=0 items=0 ppid=1 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.045044 systemd[1]: Starting audit-rules.service... Aug 13 01:00:12.033000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Aug 13 01:00:12.052736 kernel: audit: type=1327 audit(1755046812.033:220): proctitle=2F7362696E2F617564697463746C002D44 Aug 13 01:00:12.052845 kernel: audit: type=1131 audit(1755046812.035:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.067508 augenrules[1984]: No rules Aug 13 01:00:12.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.069426 sudo[1963]: pam_unix(sudo:session): session closed for user root Aug 13 01:00:12.068168 systemd[1]: Finished audit-rules.service. Aug 13 01:00:12.068000 audit[1963]: USER_END pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.076772 kernel: audit: type=1130 audit(1755046812.067:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.076850 kernel: audit: type=1106 audit(1755046812.068:223): pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.076935 kernel: audit: type=1104 audit(1755046812.069:224): pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.069000 audit[1963]: CRED_DISP pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.092181 sshd[1960]: pam_unix(sshd:session): session closed for user core Aug 13 01:00:12.093000 audit[1960]: USER_END pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.096035 systemd[1]: sshd@5-172.31.17.234:22-147.75.109.163:60962.service: Deactivated successfully. Aug 13 01:00:12.096945 systemd[1]: session-6.scope: Deactivated successfully. Aug 13 01:00:12.098662 systemd-logind[1707]: Session 6 logged out. Waiting for processes to exit. Aug 13 01:00:12.099969 systemd-logind[1707]: Removed session 6. Aug 13 01:00:12.093000 audit[1960]: CRED_DISP pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.104504 kernel: audit: type=1106 audit(1755046812.093:225): pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.104581 kernel: audit: type=1104 audit(1755046812.093:226): pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.104626 kernel: audit: type=1131 audit(1755046812.095:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.17.234:22-147.75.109.163:60962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.17.234:22-147.75.109.163:60962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.234:22-147.75.109.163:60972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.118136 systemd[1]: Started sshd@6-172.31.17.234:22-147.75.109.163:60972.service. Aug 13 01:00:12.285000 audit[1990]: USER_ACCT pid=1990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.286000 audit[1990]: CRED_ACQ pid=1990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.286000 audit[1990]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff58eff010 a2=3 a3=0 items=0 ppid=1 pid=1990 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.286000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:00:12.286962 sshd[1990]: Accepted publickey for core from 147.75.109.163 port 60972 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:00:12.287228 sshd[1990]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:00:12.293007 systemd[1]: Started session-7.scope. Aug 13 01:00:12.293326 systemd-logind[1707]: New session 7 of user core. Aug 13 01:00:12.299000 audit[1990]: USER_START pid=1990 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.300000 audit[1992]: CRED_ACQ pid=1992 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:12.395000 audit[1993]: USER_ACCT pid=1993 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.396000 audit[1993]: CRED_REFR pid=1993 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.396567 sudo[1993]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Aug 13 01:00:12.396814 sudo[1993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 01:00:12.399000 audit[1993]: USER_START pid=1993 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.427843 systemd[1]: Starting docker.service... Aug 13 01:00:12.471596 env[2003]: time="2025-08-13T01:00:12.471555190Z" level=info msg="Starting up" Aug 13 01:00:12.473290 env[2003]: time="2025-08-13T01:00:12.473248759Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 01:00:12.473290 env[2003]: time="2025-08-13T01:00:12.473271199Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 01:00:12.473442 env[2003]: time="2025-08-13T01:00:12.473294474Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 01:00:12.473442 env[2003]: time="2025-08-13T01:00:12.473308893Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 01:00:12.475436 env[2003]: time="2025-08-13T01:00:12.475400053Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 01:00:12.475436 env[2003]: time="2025-08-13T01:00:12.475423101Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 01:00:12.475626 env[2003]: time="2025-08-13T01:00:12.475445723Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 01:00:12.475626 env[2003]: time="2025-08-13T01:00:12.475459303Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 01:00:12.485022 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport132464523-merged.mount: Deactivated successfully. Aug 13 01:00:12.625264 env[2003]: time="2025-08-13T01:00:12.624233408Z" level=info msg="Loading containers: start." Aug 13 01:00:12.700000 audit[2034]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.700000 audit[2034]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffebe2fb4a0 a2=0 a3=7ffebe2fb48c items=0 ppid=2003 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.700000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Aug 13 01:00:12.703000 audit[2036]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.703000 audit[2036]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffecf6bac50 a2=0 a3=7ffecf6bac3c items=0 ppid=2003 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.703000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Aug 13 01:00:12.705000 audit[2038]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.705000 audit[2038]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd1b39d4a0 a2=0 a3=7ffd1b39d48c items=0 ppid=2003 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.705000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 01:00:12.707000 audit[2040]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.707000 audit[2040]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd5d7ef9a0 a2=0 a3=7ffd5d7ef98c items=0 ppid=2003 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.707000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 01:00:12.710000 audit[2042]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.710000 audit[2042]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff791a6940 a2=0 a3=7fff791a692c items=0 ppid=2003 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.710000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Aug 13 01:00:12.729000 audit[2048]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.729000 audit[2048]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe11dfe970 a2=0 a3=7ffe11dfe95c items=0 ppid=2003 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.729000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Aug 13 01:00:12.739000 audit[2050]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.739000 audit[2050]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc9e327f00 a2=0 a3=7ffc9e327eec items=0 ppid=2003 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.739000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Aug 13 01:00:12.741000 audit[2052]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.741000 audit[2052]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fffe32a1780 a2=0 a3=7fffe32a176c items=0 ppid=2003 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.741000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Aug 13 01:00:12.744000 audit[2054]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.744000 audit[2054]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffef99d5730 a2=0 a3=7ffef99d571c items=0 ppid=2003 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.744000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:00:12.755000 audit[2058]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.755000 audit[2058]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffb65a1140 a2=0 a3=7fffb65a112c items=0 ppid=2003 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.755000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:00:12.762000 audit[2059]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.762000 audit[2059]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff09239770 a2=0 a3=7fff0923975c items=0 ppid=2003 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.762000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:00:12.785560 kernel: Initializing XFRM netlink socket Aug 13 01:00:12.841806 env[2003]: time="2025-08-13T01:00:12.841761915Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Aug 13 01:00:12.843140 (udev-worker)[2014]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:00:12.869000 audit[2067]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.869000 audit[2067]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe1b352b70 a2=0 a3=7ffe1b352b5c items=0 ppid=2003 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.869000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Aug 13 01:00:12.885000 audit[2070]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.885000 audit[2070]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd20e214b0 a2=0 a3=7ffd20e2149c items=0 ppid=2003 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.885000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Aug 13 01:00:12.889000 audit[2073]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.889000 audit[2073]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcebeb2160 a2=0 a3=7ffcebeb214c items=0 ppid=2003 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.889000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Aug 13 01:00:12.892000 audit[2075]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.892000 audit[2075]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcdf39efa0 a2=0 a3=7ffcdf39ef8c items=0 ppid=2003 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.892000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Aug 13 01:00:12.894000 audit[2077]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.894000 audit[2077]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffca9a2ac00 a2=0 a3=7ffca9a2abec items=0 ppid=2003 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.894000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Aug 13 01:00:12.897000 audit[2079]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.897000 audit[2079]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffec51cffd0 a2=0 a3=7ffec51cffbc items=0 ppid=2003 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.897000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Aug 13 01:00:12.899000 audit[2081]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.899000 audit[2081]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd9dd54830 a2=0 a3=7ffd9dd5481c items=0 ppid=2003 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.899000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Aug 13 01:00:12.914000 audit[2084]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.914000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffff1e3c540 a2=0 a3=7ffff1e3c52c items=0 ppid=2003 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.914000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Aug 13 01:00:12.916000 audit[2086]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.916000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffcdaa87f60 a2=0 a3=7ffcdaa87f4c items=0 ppid=2003 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.916000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 01:00:12.918000 audit[2088]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.918000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdaea63b70 a2=0 a3=7ffdaea63b5c items=0 ppid=2003 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.918000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 01:00:12.921000 audit[2090]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.921000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd0d9968e0 a2=0 a3=7ffd0d9968cc items=0 ppid=2003 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.921000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Aug 13 01:00:12.922462 systemd-networkd[1437]: docker0: Link UP Aug 13 01:00:12.932000 audit[2094]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.932000 audit[2094]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc3c9e1660 a2=0 a3=7ffc3c9e164c items=0 ppid=2003 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.932000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:00:12.937000 audit[2095]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:12.937000 audit[2095]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdd0d00560 a2=0 a3=7ffdd0d0054c items=0 ppid=2003 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:12.937000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 01:00:12.938151 env[2003]: time="2025-08-13T01:00:12.938100689Z" level=info msg="Loading containers: done." Aug 13 01:00:12.961033 env[2003]: time="2025-08-13T01:00:12.960983174Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Aug 13 01:00:12.961266 env[2003]: time="2025-08-13T01:00:12.961227356Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Aug 13 01:00:12.961384 env[2003]: time="2025-08-13T01:00:12.961357653Z" level=info msg="Daemon has completed initialization" Aug 13 01:00:12.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:12.990322 systemd[1]: Started docker.service. Aug 13 01:00:13.001912 env[2003]: time="2025-08-13T01:00:13.001629780Z" level=info msg="API listen on /run/docker.sock" Aug 13 01:00:14.039004 env[1714]: time="2025-08-13T01:00:14.038944965Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.11\"" Aug 13 01:00:14.600143 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3972336944.mount: Deactivated successfully. Aug 13 01:00:15.997127 env[1714]: time="2025-08-13T01:00:15.997070135Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:15.999655 env[1714]: time="2025-08-13T01:00:15.999606727Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ea7fa3cfabed1b85e7de8e0a02356b6dcb7708442d6e4600d68abaebe1e9b1fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:16.002243 env[1714]: time="2025-08-13T01:00:16.002142976Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:16.004643 env[1714]: time="2025-08-13T01:00:16.004599301Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:a3d1c4440817725a1b503a7ccce94f3dce2b208ebf257b405dc2d97817df3dde,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:16.005762 env[1714]: time="2025-08-13T01:00:16.005726616Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.11\" returns image reference \"sha256:ea7fa3cfabed1b85e7de8e0a02356b6dcb7708442d6e4600d68abaebe1e9b1fc\"" Aug 13 01:00:16.006598 env[1714]: time="2025-08-13T01:00:16.006559240Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.11\"" Aug 13 01:00:17.636808 env[1714]: time="2025-08-13T01:00:17.636744962Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:17.638859 env[1714]: time="2025-08-13T01:00:17.638818957Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c057eceea4b436b01f9ce394734cfb06f13b2a3688c3983270e99743370b6051,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:17.640818 env[1714]: time="2025-08-13T01:00:17.640784753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:17.642517 env[1714]: time="2025-08-13T01:00:17.642459455Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:0f19de157f3d251f5ddeb6e9d026895bc55cb02592874b326fa345c57e5e2848,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:17.643554 env[1714]: time="2025-08-13T01:00:17.643507576Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.11\" returns image reference \"sha256:c057eceea4b436b01f9ce394734cfb06f13b2a3688c3983270e99743370b6051\"" Aug 13 01:00:17.644812 env[1714]: time="2025-08-13T01:00:17.644779792Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.11\"" Aug 13 01:00:18.918131 env[1714]: time="2025-08-13T01:00:18.918074203Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:18.920644 env[1714]: time="2025-08-13T01:00:18.920596849Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64e6a0b453108c87da0bb61473b35fd54078119a09edc56a4c8cb31602437c58,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:18.922701 env[1714]: time="2025-08-13T01:00:18.922649660Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:18.925256 env[1714]: time="2025-08-13T01:00:18.925197678Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:1a9b59b3bfa6c1f1911f6f865a795620c461d079e413061bb71981cadd67f39d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:18.926046 env[1714]: time="2025-08-13T01:00:18.926006424Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.11\" returns image reference \"sha256:64e6a0b453108c87da0bb61473b35fd54078119a09edc56a4c8cb31602437c58\"" Aug 13 01:00:18.926679 env[1714]: time="2025-08-13T01:00:18.926647605Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.11\"" Aug 13 01:00:19.946772 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount636094919.mount: Deactivated successfully. Aug 13 01:00:20.654828 env[1714]: time="2025-08-13T01:00:20.654762013Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:20.656933 env[1714]: time="2025-08-13T01:00:20.656887161Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0cec28fd5c3c446ec52e2886ddea38bf7f7e17755aa5d0095d50d3df5914a8fd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:20.658502 env[1714]: time="2025-08-13T01:00:20.658438897Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:20.660599 env[1714]: time="2025-08-13T01:00:20.660562778Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:a31da847792c5e7e92e91b78da1ad21d693e4b2b48d0e9f4610c8764dc2a5d79,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:20.661325 env[1714]: time="2025-08-13T01:00:20.661183486Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.11\" returns image reference \"sha256:0cec28fd5c3c446ec52e2886ddea38bf7f7e17755aa5d0095d50d3df5914a8fd\"" Aug 13 01:00:20.661952 env[1714]: time="2025-08-13T01:00:20.661927266Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Aug 13 01:00:20.830857 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Aug 13 01:00:20.838996 kernel: kauditd_printk_skb: 84 callbacks suppressed Aug 13 01:00:20.839083 kernel: audit: type=1130 audit(1755046820.830:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:20.839108 kernel: audit: type=1131 audit(1755046820.830:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:20.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:20.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:20.831050 systemd[1]: Stopped kubelet.service. Aug 13 01:00:20.831122 systemd[1]: kubelet.service: Consumed 1.340s CPU time. Aug 13 01:00:20.832628 systemd[1]: Starting kubelet.service... Aug 13 01:00:21.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:21.043693 kernel: audit: type=1130 audit(1755046821.038:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:21.038259 systemd[1]: Started kubelet.service. Aug 13 01:00:21.104330 kubelet[2131]: E0813 01:00:21.104291 2131 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 01:00:21.107644 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 01:00:21.107817 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 01:00:21.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 01:00:21.112629 kernel: audit: type=1131 audit(1755046821.107:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 01:00:21.164005 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1366435136.mount: Deactivated successfully. Aug 13 01:00:22.177863 env[1714]: time="2025-08-13T01:00:22.177804711Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.180861 env[1714]: time="2025-08-13T01:00:22.180812262Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.182602 env[1714]: time="2025-08-13T01:00:22.182562003Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.184789 env[1714]: time="2025-08-13T01:00:22.184744424Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.185733 env[1714]: time="2025-08-13T01:00:22.185700012Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Aug 13 01:00:22.186296 env[1714]: time="2025-08-13T01:00:22.186221105Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Aug 13 01:00:22.637063 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3422564416.mount: Deactivated successfully. Aug 13 01:00:22.641311 env[1714]: time="2025-08-13T01:00:22.641249198Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.643461 env[1714]: time="2025-08-13T01:00:22.643418799Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.645286 env[1714]: time="2025-08-13T01:00:22.645246022Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.647428 env[1714]: time="2025-08-13T01:00:22.647394035Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:22.647841 env[1714]: time="2025-08-13T01:00:22.647817878Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Aug 13 01:00:22.648355 env[1714]: time="2025-08-13T01:00:22.648335731Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Aug 13 01:00:23.162311 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1394474189.mount: Deactivated successfully. Aug 13 01:00:25.451317 env[1714]: time="2025-08-13T01:00:25.451044557Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:25.454522 env[1714]: time="2025-08-13T01:00:25.454448603Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:25.457003 env[1714]: time="2025-08-13T01:00:25.456962096Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:25.458850 env[1714]: time="2025-08-13T01:00:25.458816306Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:25.459796 env[1714]: time="2025-08-13T01:00:25.459758905Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Aug 13 01:00:27.422177 systemd[1]: Stopped kubelet.service. Aug 13 01:00:27.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:27.430311 kernel: audit: type=1130 audit(1755046827.421:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:27.430441 kernel: audit: type=1131 audit(1755046827.425:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:27.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:27.429092 systemd[1]: Starting kubelet.service... Aug 13 01:00:27.466043 systemd[1]: Reloading. Aug 13 01:00:27.572825 /usr/lib/systemd/system-generators/torcx-generator[2181]: time="2025-08-13T01:00:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 01:00:27.573360 /usr/lib/systemd/system-generators/torcx-generator[2181]: time="2025-08-13T01:00:27Z" level=info msg="torcx already run" Aug 13 01:00:27.711466 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 01:00:27.711817 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 01:00:27.739298 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864508 kernel: audit: type=1400 audit(1755046827.841:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871625 kernel: audit: type=1400 audit(1755046827.841:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.884395 kernel: audit: type=1400 audit(1755046827.841:270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.884552 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 01:00:27.884602 kernel: audit: type=1400 audit(1755046827.841:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.884634 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Aug 13 01:00:27.884667 kernel: audit: backlog limit exceeded Aug 13 01:00:27.884703 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.863000 audit: BPF prog-id=49 op=LOAD Aug 13 01:00:27.863000 audit: BPF prog-id=39 op=UNLOAD Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.864000 audit: BPF prog-id=50 op=LOAD Aug 13 01:00:27.864000 audit: BPF prog-id=47 op=UNLOAD Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit: BPF prog-id=51 op=LOAD Aug 13 01:00:27.870000 audit: BPF prog-id=44 op=UNLOAD Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit: BPF prog-id=52 op=LOAD Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.870000 audit: BPF prog-id=53 op=LOAD Aug 13 01:00:27.870000 audit: BPF prog-id=45 op=UNLOAD Aug 13 01:00:27.870000 audit: BPF prog-id=46 op=UNLOAD Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.875000 audit: BPF prog-id=54 op=LOAD Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit: BPF prog-id=55 op=LOAD Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.890000 audit: BPF prog-id=56 op=LOAD Aug 13 01:00:27.890000 audit: BPF prog-id=31 op=UNLOAD Aug 13 01:00:27.890000 audit: BPF prog-id=32 op=UNLOAD Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit: BPF prog-id=57 op=LOAD Aug 13 01:00:27.892000 audit: BPF prog-id=41 op=UNLOAD Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit: BPF prog-id=58 op=LOAD Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.892000 audit: BPF prog-id=59 op=LOAD Aug 13 01:00:27.892000 audit: BPF prog-id=42 op=UNLOAD Aug 13 01:00:27.892000 audit: BPF prog-id=43 op=UNLOAD Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.893000 audit: BPF prog-id=60 op=LOAD Aug 13 01:00:27.893000 audit: BPF prog-id=40 op=UNLOAD Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.894000 audit: BPF prog-id=61 op=LOAD Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.895000 audit: BPF prog-id=62 op=LOAD Aug 13 01:00:27.895000 audit: BPF prog-id=33 op=UNLOAD Aug 13 01:00:27.895000 audit: BPF prog-id=34 op=UNLOAD Aug 13 01:00:27.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit: BPF prog-id=63 op=LOAD Aug 13 01:00:27.897000 audit: BPF prog-id=35 op=UNLOAD Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit: BPF prog-id=64 op=LOAD Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.897000 audit: BPF prog-id=65 op=LOAD Aug 13 01:00:27.897000 audit: BPF prog-id=36 op=UNLOAD Aug 13 01:00:27.897000 audit: BPF prog-id=37 op=UNLOAD Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:27.898000 audit: BPF prog-id=66 op=LOAD Aug 13 01:00:27.898000 audit: BPF prog-id=38 op=UNLOAD Aug 13 01:00:27.929338 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Aug 13 01:00:27.929446 systemd[1]: kubelet.service: Failed with result 'signal'. Aug 13 01:00:27.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 01:00:27.929804 systemd[1]: Stopped kubelet.service. Aug 13 01:00:27.932207 systemd[1]: Starting kubelet.service... Aug 13 01:00:28.173777 systemd[1]: Started kubelet.service. Aug 13 01:00:28.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:28.230961 kubelet[2241]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:00:28.230961 kubelet[2241]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Aug 13 01:00:28.230961 kubelet[2241]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:00:28.231597 kubelet[2241]: I0813 01:00:28.231172 2241 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 01:00:28.557875 kubelet[2241]: I0813 01:00:28.557471 2241 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Aug 13 01:00:28.557875 kubelet[2241]: I0813 01:00:28.557517 2241 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 01:00:28.558088 kubelet[2241]: I0813 01:00:28.558014 2241 server.go:934] "Client rotation is on, will bootstrap in background" Aug 13 01:00:28.593619 kubelet[2241]: E0813 01:00:28.593587 2241 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.17.234:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:28.596406 kubelet[2241]: I0813 01:00:28.596365 2241 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 01:00:28.609590 kubelet[2241]: E0813 01:00:28.609512 2241 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 01:00:28.609590 kubelet[2241]: I0813 01:00:28.609544 2241 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 01:00:28.615141 kubelet[2241]: I0813 01:00:28.615106 2241 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 01:00:28.615324 kubelet[2241]: I0813 01:00:28.615287 2241 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Aug 13 01:00:28.615511 kubelet[2241]: I0813 01:00:28.615455 2241 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 01:00:28.615969 kubelet[2241]: I0813 01:00:28.615502 2241 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-17-234","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 01:00:28.616136 kubelet[2241]: I0813 01:00:28.615972 2241 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 01:00:28.616136 kubelet[2241]: I0813 01:00:28.615993 2241 container_manager_linux.go:300] "Creating device plugin manager" Aug 13 01:00:28.616236 kubelet[2241]: I0813 01:00:28.616144 2241 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:00:28.621646 kubelet[2241]: I0813 01:00:28.621608 2241 kubelet.go:408] "Attempting to sync node with API server" Aug 13 01:00:28.621840 kubelet[2241]: I0813 01:00:28.621826 2241 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 01:00:28.621951 kubelet[2241]: I0813 01:00:28.621942 2241 kubelet.go:314] "Adding apiserver pod source" Aug 13 01:00:28.622512 kubelet[2241]: I0813 01:00:28.622457 2241 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 01:00:28.639822 kubelet[2241]: W0813 01:00:28.639767 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.17.234:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-234&limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:28.640029 kubelet[2241]: E0813 01:00:28.640011 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.17.234:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-234&limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:28.640179 kubelet[2241]: I0813 01:00:28.640167 2241 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 01:00:28.640679 kubelet[2241]: I0813 01:00:28.640647 2241 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Aug 13 01:00:28.642366 kubelet[2241]: W0813 01:00:28.642333 2241 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Aug 13 01:00:28.642845 kubelet[2241]: W0813 01:00:28.642802 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.17.234:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:28.642903 kubelet[2241]: E0813 01:00:28.642858 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.17.234:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:28.646597 kubelet[2241]: I0813 01:00:28.646565 2241 server.go:1274] "Started kubelet" Aug 13 01:00:28.651369 kubelet[2241]: I0813 01:00:28.651326 2241 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 01:00:28.652419 kubelet[2241]: I0813 01:00:28.652390 2241 server.go:449] "Adding debug handlers to kubelet server" Aug 13 01:00:28.656000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:28.656000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:00:28.656000 audit[2241]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007c04e0 a1=c0008ea4f8 a2=c0007c04b0 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.656000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:00:28.656000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:28.656000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:00:28.656000 audit[2241]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006889c0 a1=c0008ea510 a2=c0007c0570 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.656000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:00:28.657356 kubelet[2241]: I0813 01:00:28.656618 2241 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 01:00:28.657356 kubelet[2241]: I0813 01:00:28.656663 2241 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Aug 13 01:00:28.657356 kubelet[2241]: I0813 01:00:28.656715 2241 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 01:00:28.661324 kubelet[2241]: I0813 01:00:28.659138 2241 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 01:00:28.661324 kubelet[2241]: I0813 01:00:28.659349 2241 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 01:00:28.663642 kubelet[2241]: E0813 01:00:28.659554 2241 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.17.234:6443/api/v1/namespaces/default/events\": dial tcp 172.31.17.234:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-17-234.185b2dcac1a7065a default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-17-234,UID:ip-172-31-17-234,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-17-234,},FirstTimestamp:2025-08-13 01:00:28.646532698 +0000 UTC m=+0.466337843,LastTimestamp:2025-08-13 01:00:28.646532698 +0000 UTC m=+0.466337843,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-17-234,}" Aug 13 01:00:28.664000 audit[2253]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.664000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd5b9a1c90 a2=0 a3=7ffd5b9a1c7c items=0 ppid=2241 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.664000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 01:00:28.666193 kubelet[2241]: I0813 01:00:28.666166 2241 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 01:00:28.666000 audit[2254]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.666000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe82c0b250 a2=0 a3=7ffe82c0b23c items=0 ppid=2241 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.666000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 01:00:28.669076 kubelet[2241]: E0813 01:00:28.668933 2241 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ip-172-31-17-234\" not found" Aug 13 01:00:28.669164 kubelet[2241]: I0813 01:00:28.669096 2241 volume_manager.go:289] "Starting Kubelet Volume Manager" Aug 13 01:00:28.669612 kubelet[2241]: I0813 01:00:28.669597 2241 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Aug 13 01:00:28.669720 kubelet[2241]: I0813 01:00:28.669712 2241 reconciler.go:26] "Reconciler: start to sync state" Aug 13 01:00:28.670181 kubelet[2241]: W0813 01:00:28.670147 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.17.234:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:28.670293 kubelet[2241]: E0813 01:00:28.670278 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.17.234:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:28.670419 kubelet[2241]: E0813 01:00:28.670393 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.234:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-234?timeout=10s\": dial tcp 172.31.17.234:6443: connect: connection refused" interval="200ms" Aug 13 01:00:28.670657 kubelet[2241]: I0813 01:00:28.670644 2241 factory.go:221] Registration of the systemd container factory successfully Aug 13 01:00:28.670000 audit[2256]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.670000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffddfab8f40 a2=0 a3=7ffddfab8f2c items=0 ppid=2241 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.670000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:00:28.670941 kubelet[2241]: I0813 01:00:28.670927 2241 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 01:00:28.671479 kubelet[2241]: E0813 01:00:28.671467 2241 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 01:00:28.672634 kubelet[2241]: I0813 01:00:28.672622 2241 factory.go:221] Registration of the containerd container factory successfully Aug 13 01:00:28.672000 audit[2258]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.672000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd788e5b80 a2=0 a3=7ffd788e5b6c items=0 ppid=2241 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:00:28.683000 audit[2261]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.683000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc0ffd9150 a2=0 a3=7ffc0ffd913c items=0 ppid=2241 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.683000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Aug 13 01:00:28.684531 kubelet[2241]: I0813 01:00:28.684469 2241 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Aug 13 01:00:28.685000 audit[2262]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:28.685000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd4edb3950 a2=0 a3=7ffd4edb393c items=0 ppid=2241 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.685000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 01:00:28.686160 kubelet[2241]: I0813 01:00:28.686127 2241 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Aug 13 01:00:28.686160 kubelet[2241]: I0813 01:00:28.686158 2241 status_manager.go:217] "Starting to sync pod status with apiserver" Aug 13 01:00:28.686292 kubelet[2241]: I0813 01:00:28.686185 2241 kubelet.go:2321] "Starting kubelet main sync loop" Aug 13 01:00:28.686292 kubelet[2241]: E0813 01:00:28.686237 2241 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 01:00:28.687000 audit[2263]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.687000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd46a66950 a2=0 a3=7ffd46a6693c items=0 ppid=2241 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.687000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 01:00:28.689000 audit[2264]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.689000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe34f683c0 a2=0 a3=7ffe34f683ac items=0 ppid=2241 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.689000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 01:00:28.690000 audit[2265]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:28.690000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd4c6ade0 a2=0 a3=7fffd4c6adcc items=0 ppid=2241 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.690000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 01:00:28.692000 audit[2267]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:28.692000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc15e54350 a2=0 a3=7ffc15e5433c items=0 ppid=2241 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.692000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 01:00:28.693000 audit[2268]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:28.693000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc5d035850 a2=0 a3=7ffc5d03583c items=0 ppid=2241 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.693000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 01:00:28.694000 audit[2269]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:28.694000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffed9536630 a2=0 a3=7ffed953661c items=0 ppid=2241 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.694000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 01:00:28.696990 kubelet[2241]: W0813 01:00:28.696940 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.17.234:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:28.697140 kubelet[2241]: E0813 01:00:28.697119 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.17.234:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:28.706174 kubelet[2241]: I0813 01:00:28.706150 2241 cpu_manager.go:214] "Starting CPU manager" policy="none" Aug 13 01:00:28.706365 kubelet[2241]: I0813 01:00:28.706351 2241 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Aug 13 01:00:28.706451 kubelet[2241]: I0813 01:00:28.706441 2241 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:00:28.710041 kubelet[2241]: I0813 01:00:28.710020 2241 policy_none.go:49] "None policy: Start" Aug 13 01:00:28.712011 kubelet[2241]: I0813 01:00:28.711994 2241 memory_manager.go:170] "Starting memorymanager" policy="None" Aug 13 01:00:28.712133 kubelet[2241]: I0813 01:00:28.712122 2241 state_mem.go:35] "Initializing new in-memory state store" Aug 13 01:00:28.723626 systemd[1]: Created slice kubepods.slice. Aug 13 01:00:28.728940 systemd[1]: Created slice kubepods-burstable.slice. Aug 13 01:00:28.732342 systemd[1]: Created slice kubepods-besteffort.slice. Aug 13 01:00:28.739413 kubelet[2241]: I0813 01:00:28.739388 2241 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Aug 13 01:00:28.739000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:28.739000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:00:28.739000 audit[2241]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e83980 a1=c000eb36c8 a2=c000e83950 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:28.739000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:00:28.742068 kubelet[2241]: I0813 01:00:28.741576 2241 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Aug 13 01:00:28.742068 kubelet[2241]: I0813 01:00:28.741781 2241 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 01:00:28.742068 kubelet[2241]: I0813 01:00:28.741811 2241 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 01:00:28.742879 kubelet[2241]: I0813 01:00:28.742865 2241 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 01:00:28.756216 kubelet[2241]: E0813 01:00:28.756174 2241 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-17-234\" not found" Aug 13 01:00:28.794969 systemd[1]: Created slice kubepods-burstable-pod0578032a78e5a2b28663615605631837.slice. Aug 13 01:00:28.811193 systemd[1]: Created slice kubepods-burstable-pod2a4e4c663da078e1cbe49cf8cd0f72e9.slice. Aug 13 01:00:28.823214 systemd[1]: Created slice kubepods-burstable-pod3f495afc24643717d976587a4308d171.slice. Aug 13 01:00:28.843931 kubelet[2241]: I0813 01:00:28.843768 2241 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-17-234" Aug 13 01:00:28.844469 kubelet[2241]: E0813 01:00:28.844276 2241 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.17.234:6443/api/v1/nodes\": dial tcp 172.31.17.234:6443: connect: connection refused" node="ip-172-31-17-234" Aug 13 01:00:28.871360 kubelet[2241]: E0813 01:00:28.871284 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.234:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-234?timeout=10s\": dial tcp 172.31.17.234:6443: connect: connection refused" interval="400ms" Aug 13 01:00:28.970833 kubelet[2241]: I0813 01:00:28.970786 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f495afc24643717d976587a4308d171-kubeconfig\") pod \"kube-scheduler-ip-172-31-17-234\" (UID: \"3f495afc24643717d976587a4308d171\") " pod="kube-system/kube-scheduler-ip-172-31-17-234" Aug 13 01:00:28.970833 kubelet[2241]: I0813 01:00:28.970835 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0578032a78e5a2b28663615605631837-ca-certs\") pod \"kube-apiserver-ip-172-31-17-234\" (UID: \"0578032a78e5a2b28663615605631837\") " pod="kube-system/kube-apiserver-ip-172-31-17-234" Aug 13 01:00:28.970833 kubelet[2241]: I0813 01:00:28.970856 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-ca-certs\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:28.971128 kubelet[2241]: I0813 01:00:28.970873 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:28.971128 kubelet[2241]: I0813 01:00:28.970897 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-kubeconfig\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:28.971128 kubelet[2241]: I0813 01:00:28.970918 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0578032a78e5a2b28663615605631837-k8s-certs\") pod \"kube-apiserver-ip-172-31-17-234\" (UID: \"0578032a78e5a2b28663615605631837\") " pod="kube-system/kube-apiserver-ip-172-31-17-234" Aug 13 01:00:28.971128 kubelet[2241]: I0813 01:00:28.970933 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0578032a78e5a2b28663615605631837-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-17-234\" (UID: \"0578032a78e5a2b28663615605631837\") " pod="kube-system/kube-apiserver-ip-172-31-17-234" Aug 13 01:00:28.971128 kubelet[2241]: I0813 01:00:28.970947 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:28.971273 kubelet[2241]: I0813 01:00:28.970963 2241 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-k8s-certs\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:29.046690 kubelet[2241]: I0813 01:00:29.046659 2241 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-17-234" Aug 13 01:00:29.047099 kubelet[2241]: E0813 01:00:29.047049 2241 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.17.234:6443/api/v1/nodes\": dial tcp 172.31.17.234:6443: connect: connection refused" node="ip-172-31-17-234" Aug 13 01:00:29.110026 env[1714]: time="2025-08-13T01:00:29.109770263Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-17-234,Uid:0578032a78e5a2b28663615605631837,Namespace:kube-system,Attempt:0,}" Aug 13 01:00:29.117700 env[1714]: time="2025-08-13T01:00:29.117631512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-17-234,Uid:2a4e4c663da078e1cbe49cf8cd0f72e9,Namespace:kube-system,Attempt:0,}" Aug 13 01:00:29.128066 env[1714]: time="2025-08-13T01:00:29.128009063Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-17-234,Uid:3f495afc24643717d976587a4308d171,Namespace:kube-system,Attempt:0,}" Aug 13 01:00:29.272916 kubelet[2241]: E0813 01:00:29.272864 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.234:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-234?timeout=10s\": dial tcp 172.31.17.234:6443: connect: connection refused" interval="800ms" Aug 13 01:00:29.449201 kubelet[2241]: I0813 01:00:29.448881 2241 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-17-234" Aug 13 01:00:29.449418 kubelet[2241]: E0813 01:00:29.449382 2241 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.17.234:6443/api/v1/nodes\": dial tcp 172.31.17.234:6443: connect: connection refused" node="ip-172-31-17-234" Aug 13 01:00:29.486698 kubelet[2241]: W0813 01:00:29.486603 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.17.234:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:29.486698 kubelet[2241]: E0813 01:00:29.486677 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.17.234:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:29.579871 amazon-ssm-agent[1694]: 2025-08-13 01:00:29 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Aug 13 01:00:29.595018 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1922726042.mount: Deactivated successfully. Aug 13 01:00:29.610558 env[1714]: time="2025-08-13T01:00:29.610507714Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.612649 env[1714]: time="2025-08-13T01:00:29.612609377Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.618841 env[1714]: time="2025-08-13T01:00:29.618799158Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.621229 env[1714]: time="2025-08-13T01:00:29.621183237Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.623230 env[1714]: time="2025-08-13T01:00:29.623189809Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.624927 env[1714]: time="2025-08-13T01:00:29.624896141Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.626890 env[1714]: time="2025-08-13T01:00:29.626862521Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.629407 env[1714]: time="2025-08-13T01:00:29.629358804Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.633350 env[1714]: time="2025-08-13T01:00:29.633312068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.635395 env[1714]: time="2025-08-13T01:00:29.635358264Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.640885 env[1714]: time="2025-08-13T01:00:29.640854153Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.648131 env[1714]: time="2025-08-13T01:00:29.648075064Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:29.684553 env[1714]: time="2025-08-13T01:00:29.684313221Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:00:29.684553 env[1714]: time="2025-08-13T01:00:29.684357357Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:00:29.684553 env[1714]: time="2025-08-13T01:00:29.684368429Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:00:29.684846 env[1714]: time="2025-08-13T01:00:29.684789606Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e92500ab13522f2470262e67bce0640d7422f350243fe10431e7d1df2dddbd4f pid=2279 runtime=io.containerd.runc.v2 Aug 13 01:00:29.697272 env[1714]: time="2025-08-13T01:00:29.697168172Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:00:29.697272 env[1714]: time="2025-08-13T01:00:29.697223477Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:00:29.697461 env[1714]: time="2025-08-13T01:00:29.697234566Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:00:29.697461 env[1714]: time="2025-08-13T01:00:29.697392262Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a12f0b6918edad0cf6985d27041234addd4b13a2184680027f8018ba2e392029 pid=2298 runtime=io.containerd.runc.v2 Aug 13 01:00:29.705226 systemd[1]: Started cri-containerd-e92500ab13522f2470262e67bce0640d7422f350243fe10431e7d1df2dddbd4f.scope. Aug 13 01:00:29.725375 env[1714]: time="2025-08-13T01:00:29.725275178Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:00:29.725375 env[1714]: time="2025-08-13T01:00:29.725353233Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:00:29.725641 env[1714]: time="2025-08-13T01:00:29.725375730Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:00:29.733768 env[1714]: time="2025-08-13T01:00:29.725684262Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b0d89cd603a1f8226304d78680cf06e5c6277d4d1498f041cd907f39ceda02f pid=2326 runtime=io.containerd.runc.v2 Aug 13 01:00:29.726828 systemd[1]: Started cri-containerd-a12f0b6918edad0cf6985d27041234addd4b13a2184680027f8018ba2e392029.scope. Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.736000 audit: BPF prog-id=67 op=LOAD Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2279 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323530306162313335323266323437303236326536376263653036 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2279 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323530306162313335323266323437303236326536376263653036 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.737000 audit: BPF prog-id=68 op=LOAD Aug 13 01:00:29.737000 audit[2297]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b4880 items=0 ppid=2279 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323530306162313335323266323437303236326536376263653036 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.738000 audit: BPF prog-id=69 op=LOAD Aug 13 01:00:29.738000 audit[2297]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b48c8 items=0 ppid=2279 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323530306162313335323266323437303236326536376263653036 Aug 13 01:00:29.741000 audit: BPF prog-id=69 op=UNLOAD Aug 13 01:00:29.741000 audit: BPF prog-id=68 op=UNLOAD Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.741000 audit: BPF prog-id=70 op=LOAD Aug 13 01:00:29.741000 audit[2297]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b4cd8 items=0 ppid=2279 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323530306162313335323266323437303236326536376263653036 Aug 13 01:00:29.743710 systemd[1]: Started cri-containerd-8b0d89cd603a1f8226304d78680cf06e5c6277d4d1498f041cd907f39ceda02f.scope. Aug 13 01:00:29.757449 kubelet[2241]: W0813 01:00:29.757317 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.17.234:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:29.757449 kubelet[2241]: E0813 01:00:29.757406 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.17.234:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.764000 audit: BPF prog-id=71 op=LOAD Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2298 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131326630623639313865646164306366363938356432373034313233 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2298 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131326630623639313865646164306366363938356432373034313233 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.765000 audit: BPF prog-id=72 op=LOAD Aug 13 01:00:29.765000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002f3130 items=0 ppid=2298 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131326630623639313865646164306366363938356432373034313233 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.766000 audit: BPF prog-id=73 op=LOAD Aug 13 01:00:29.766000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002f3178 items=0 ppid=2298 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131326630623639313865646164306366363938356432373034313233 Aug 13 01:00:29.767000 audit: BPF prog-id=73 op=UNLOAD Aug 13 01:00:29.767000 audit: BPF prog-id=72 op=UNLOAD Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.772000 audit: BPF prog-id=74 op=LOAD Aug 13 01:00:29.772000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002f3588 items=0 ppid=2298 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131326630623639313865646164306366363938356432373034313233 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.779000 audit: BPF prog-id=75 op=LOAD Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2326 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862306438396364363033613166383232363330346437383638306366 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2326 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862306438396364363033613166383232363330346437383638306366 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit: BPF prog-id=76 op=LOAD Aug 13 01:00:29.780000 audit[2353]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001e3a10 items=0 ppid=2326 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862306438396364363033613166383232363330346437383638306366 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit: BPF prog-id=77 op=LOAD Aug 13 01:00:29.780000 audit[2353]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001e3a58 items=0 ppid=2326 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862306438396364363033613166383232363330346437383638306366 Aug 13 01:00:29.780000 audit: BPF prog-id=77 op=UNLOAD Aug 13 01:00:29.780000 audit: BPF prog-id=76 op=UNLOAD Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.780000 audit: BPF prog-id=78 op=LOAD Aug 13 01:00:29.780000 audit[2353]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001e3e68 items=0 ppid=2326 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862306438396364363033613166383232363330346437383638306366 Aug 13 01:00:29.809112 env[1714]: time="2025-08-13T01:00:29.809066392Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-17-234,Uid:0578032a78e5a2b28663615605631837,Namespace:kube-system,Attempt:0,} returns sandbox id \"e92500ab13522f2470262e67bce0640d7422f350243fe10431e7d1df2dddbd4f\"" Aug 13 01:00:29.814433 env[1714]: time="2025-08-13T01:00:29.814380864Z" level=info msg="CreateContainer within sandbox \"e92500ab13522f2470262e67bce0640d7422f350243fe10431e7d1df2dddbd4f\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Aug 13 01:00:29.845070 env[1714]: time="2025-08-13T01:00:29.845014729Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-17-234,Uid:2a4e4c663da078e1cbe49cf8cd0f72e9,Namespace:kube-system,Attempt:0,} returns sandbox id \"a12f0b6918edad0cf6985d27041234addd4b13a2184680027f8018ba2e392029\"" Aug 13 01:00:29.848468 env[1714]: time="2025-08-13T01:00:29.848414386Z" level=info msg="CreateContainer within sandbox \"a12f0b6918edad0cf6985d27041234addd4b13a2184680027f8018ba2e392029\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Aug 13 01:00:29.850988 env[1714]: time="2025-08-13T01:00:29.850914175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-17-234,Uid:3f495afc24643717d976587a4308d171,Namespace:kube-system,Attempt:0,} returns sandbox id \"8b0d89cd603a1f8226304d78680cf06e5c6277d4d1498f041cd907f39ceda02f\"" Aug 13 01:00:29.851282 env[1714]: time="2025-08-13T01:00:29.851248187Z" level=info msg="CreateContainer within sandbox \"e92500ab13522f2470262e67bce0640d7422f350243fe10431e7d1df2dddbd4f\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"659df1e4707e04f8eff1a07a45a43507d47a2607e579618d4955bd8608250ed6\"" Aug 13 01:00:29.852137 env[1714]: time="2025-08-13T01:00:29.852106111Z" level=info msg="StartContainer for \"659df1e4707e04f8eff1a07a45a43507d47a2607e579618d4955bd8608250ed6\"" Aug 13 01:00:29.855768 env[1714]: time="2025-08-13T01:00:29.855733236Z" level=info msg="CreateContainer within sandbox \"8b0d89cd603a1f8226304d78680cf06e5c6277d4d1498f041cd907f39ceda02f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Aug 13 01:00:29.877032 systemd[1]: Started cri-containerd-659df1e4707e04f8eff1a07a45a43507d47a2607e579618d4955bd8608250ed6.scope. Aug 13 01:00:29.890531 env[1714]: time="2025-08-13T01:00:29.890468355Z" level=info msg="CreateContainer within sandbox \"a12f0b6918edad0cf6985d27041234addd4b13a2184680027f8018ba2e392029\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f\"" Aug 13 01:00:29.891373 env[1714]: time="2025-08-13T01:00:29.891337542Z" level=info msg="StartContainer for \"464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f\"" Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.898000 audit: BPF prog-id=79 op=LOAD Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2279 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635396466316534373037653034663865666631613037613435613433 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2279 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635396466316534373037653034663865666631613037613435613433 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit: BPF prog-id=80 op=LOAD Aug 13 01:00:29.899000 audit[2408]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000188260 items=0 ppid=2279 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635396466316534373037653034663865666631613037613435613433 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit: BPF prog-id=81 op=LOAD Aug 13 01:00:29.899000 audit[2408]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001882a8 items=0 ppid=2279 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635396466316534373037653034663865666631613037613435613433 Aug 13 01:00:29.899000 audit: BPF prog-id=81 op=UNLOAD Aug 13 01:00:29.899000 audit: BPF prog-id=80 op=UNLOAD Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { perfmon } for pid=2408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit[2408]: AVC avc: denied { bpf } for pid=2408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.899000 audit: BPF prog-id=82 op=LOAD Aug 13 01:00:29.899000 audit[2408]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001886b8 items=0 ppid=2279 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635396466316534373037653034663865666631613037613435613433 Aug 13 01:00:29.908460 env[1714]: time="2025-08-13T01:00:29.908409304Z" level=info msg="CreateContainer within sandbox \"8b0d89cd603a1f8226304d78680cf06e5c6277d4d1498f041cd907f39ceda02f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5\"" Aug 13 01:00:29.909281 env[1714]: time="2025-08-13T01:00:29.909248903Z" level=info msg="StartContainer for \"d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5\"" Aug 13 01:00:29.913572 kubelet[2241]: W0813 01:00:29.913430 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.17.234:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-234&limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:29.913572 kubelet[2241]: E0813 01:00:29.913530 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.17.234:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-234&limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:29.933834 systemd[1]: Started cri-containerd-464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f.scope. Aug 13 01:00:29.941933 systemd[1]: Started cri-containerd-d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5.scope. Aug 13 01:00:29.981311 env[1714]: time="2025-08-13T01:00:29.981192501Z" level=info msg="StartContainer for \"659df1e4707e04f8eff1a07a45a43507d47a2607e579618d4955bd8608250ed6\" returns successfully" Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.991000 audit: BPF prog-id=83 op=LOAD Aug 13 01:00:29.992000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.992000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2298 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436343430306265393639303165356237363939366231373738633634 Aug 13 01:00:29.992000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.992000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2298 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436343430306265393639303165356237363939366231373738633634 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.993000 audit: BPF prog-id=84 op=LOAD Aug 13 01:00:29.993000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00023b360 items=0 ppid=2298 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436343430306265393639303165356237363939366231373738633634 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit: BPF prog-id=85 op=LOAD Aug 13 01:00:29.994000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00023b3a8 items=0 ppid=2298 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436343430306265393639303165356237363939366231373738633634 Aug 13 01:00:29.994000 audit: BPF prog-id=85 op=UNLOAD Aug 13 01:00:29.994000 audit: BPF prog-id=84 op=UNLOAD Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.994000 audit: BPF prog-id=86 op=LOAD Aug 13 01:00:29.994000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00023b7b8 items=0 ppid=2298 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436343430306265393639303165356237363939366231373738633634 Aug 13 01:00:29.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.995000 audit: BPF prog-id=87 op=LOAD Aug 13 01:00:29.997000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.997000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2326 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437623333343935356363316539333438643065373835663065346265 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2326 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437623333343935356363316539333438643065373835663065346265 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.998000 audit: BPF prog-id=88 op=LOAD Aug 13 01:00:29.998000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025220 items=0 ppid=2326 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437623333343935356363316539333438643065373835663065346265 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:29.999000 audit: BPF prog-id=89 op=LOAD Aug 13 01:00:29.999000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025268 items=0 ppid=2326 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:29.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437623333343935356363316539333438643065373835663065346265 Aug 13 01:00:30.000000 audit: BPF prog-id=89 op=UNLOAD Aug 13 01:00:30.000000 audit: BPF prog-id=88 op=UNLOAD Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:30.000000 audit: BPF prog-id=90 op=LOAD Aug 13 01:00:30.000000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025678 items=0 ppid=2326 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:30.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437623333343935356363316539333438643065373835663065346265 Aug 13 01:00:30.055703 env[1714]: time="2025-08-13T01:00:30.055649375Z" level=info msg="StartContainer for \"d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5\" returns successfully" Aug 13 01:00:30.061410 env[1714]: time="2025-08-13T01:00:30.061353834Z" level=info msg="StartContainer for \"464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f\" returns successfully" Aug 13 01:00:30.073776 kubelet[2241]: E0813 01:00:30.073719 2241 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.234:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-234?timeout=10s\": dial tcp 172.31.17.234:6443: connect: connection refused" interval="1.6s" Aug 13 01:00:30.131875 kubelet[2241]: W0813 01:00:30.131786 2241 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.17.234:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.17.234:6443: connect: connection refused Aug 13 01:00:30.132058 kubelet[2241]: E0813 01:00:30.131901 2241 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.17.234:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:30.251593 kubelet[2241]: I0813 01:00:30.251482 2241 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-17-234" Aug 13 01:00:30.255258 kubelet[2241]: E0813 01:00:30.251852 2241 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.17.234:6443/api/v1/nodes\": dial tcp 172.31.17.234:6443: connect: connection refused" node="ip-172-31-17-234" Aug 13 01:00:30.627975 kubelet[2241]: E0813 01:00:30.627929 2241 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.17.234:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.17.234:6443: connect: connection refused" logger="UnhandledError" Aug 13 01:00:31.854458 kubelet[2241]: I0813 01:00:31.853957 2241 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-17-234" Aug 13 01:00:32.454212 kernel: kauditd_printk_skb: 594 callbacks suppressed Aug 13 01:00:32.454379 kernel: audit: type=1400 audit(1755046832.441:597): avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.441000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.441000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004b1bc0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:32.467512 kernel: audit: type=1300 audit(1755046832.441:597): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004b1bc0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:32.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:32.478551 kernel: audit: type=1327 audit(1755046832.441:597): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:32.441000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.487605 kernel: audit: type=1400 audit(1755046832.441:598): avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.441000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0002f2f20 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:32.509733 kernel: audit: type=1300 audit(1755046832.441:598): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0002f2f20 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:32.509882 kernel: audit: type=1327 audit(1755046832.441:598): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:32.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:32.841000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.856717 kernel: audit: type=1400 audit(1755046832.841:599): avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.856856 kernel: audit: type=1300 audit(1755046832.841:599): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c007b763c0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:00:32.841000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c007b763c0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:00:32.867277 kernel: audit: type=1327 audit(1755046832.841:599): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:00:32.841000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:00:32.842000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.842000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c001b1f320 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:00:32.842000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:00:32.842000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.842000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c007b764e0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:00:32.842000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:00:32.859000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.859000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00762fe00 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:00:32.859000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:00:32.877510 kernel: audit: type=1400 audit(1755046832.842:600): avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.865000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.865000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0039298c0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:00:32.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:00:32.866000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:32.866000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00762ff80 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:00:32.866000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:00:32.948073 kubelet[2241]: E0813 01:00:32.948032 2241 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-17-234\" not found" node="ip-172-31-17-234" Aug 13 01:00:33.034103 kubelet[2241]: I0813 01:00:33.034043 2241 kubelet_node_status.go:75] "Successfully registered node" node="ip-172-31-17-234" Aug 13 01:00:33.083834 kubelet[2241]: E0813 01:00:33.083709 2241 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{ip-172-31-17-234.185b2dcac1a7065a default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-17-234,UID:ip-172-31-17-234,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-17-234,},FirstTimestamp:2025-08-13 01:00:28.646532698 +0000 UTC m=+0.466337843,LastTimestamp:2025-08-13 01:00:28.646532698 +0000 UTC m=+0.466337843,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-17-234,}" Aug 13 01:00:33.638436 kubelet[2241]: I0813 01:00:33.638379 2241 apiserver.go:52] "Watching apiserver" Aug 13 01:00:33.670284 kubelet[2241]: I0813 01:00:33.670253 2241 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Aug 13 01:00:33.768400 kubelet[2241]: E0813 01:00:33.768365 2241 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-17-234\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-17-234" Aug 13 01:00:35.142599 systemd[1]: Reloading. Aug 13 01:00:35.235131 /usr/lib/systemd/system-generators/torcx-generator[2528]: time="2025-08-13T01:00:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 01:00:35.241711 /usr/lib/systemd/system-generators/torcx-generator[2528]: time="2025-08-13T01:00:35Z" level=info msg="torcx already run" Aug 13 01:00:35.342152 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 01:00:35.342179 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 01:00:35.368818 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.503000 audit: BPF prog-id=91 op=LOAD Aug 13 01:00:35.503000 audit: BPF prog-id=67 op=UNLOAD Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.504000 audit: BPF prog-id=92 op=LOAD Aug 13 01:00:35.504000 audit: BPF prog-id=75 op=UNLOAD Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.507000 audit: BPF prog-id=93 op=LOAD Aug 13 01:00:35.507000 audit: BPF prog-id=49 op=UNLOAD Aug 13 01:00:35.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.509000 audit: BPF prog-id=94 op=LOAD Aug 13 01:00:35.509000 audit: BPF prog-id=87 op=UNLOAD Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.511000 audit: BPF prog-id=95 op=LOAD Aug 13 01:00:35.511000 audit: BPF prog-id=50 op=UNLOAD Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.513000 audit: BPF prog-id=96 op=LOAD Aug 13 01:00:35.513000 audit: BPF prog-id=71 op=UNLOAD Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit: BPF prog-id=97 op=LOAD Aug 13 01:00:35.515000 audit: BPF prog-id=51 op=UNLOAD Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit: BPF prog-id=98 op=LOAD Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.515000 audit: BPF prog-id=99 op=LOAD Aug 13 01:00:35.515000 audit: BPF prog-id=52 op=UNLOAD Aug 13 01:00:35.515000 audit: BPF prog-id=53 op=UNLOAD Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit: BPF prog-id=100 op=LOAD Aug 13 01:00:35.517000 audit: BPF prog-id=54 op=UNLOAD Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit: BPF prog-id=101 op=LOAD Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.518000 audit: BPF prog-id=102 op=LOAD Aug 13 01:00:35.518000 audit: BPF prog-id=55 op=UNLOAD Aug 13 01:00:35.518000 audit: BPF prog-id=56 op=UNLOAD Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit: BPF prog-id=103 op=LOAD Aug 13 01:00:35.521000 audit: BPF prog-id=57 op=UNLOAD Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit: BPF prog-id=104 op=LOAD Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit: BPF prog-id=105 op=LOAD Aug 13 01:00:35.522000 audit: BPF prog-id=58 op=UNLOAD Aug 13 01:00:35.522000 audit: BPF prog-id=59 op=UNLOAD Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.522000 audit: BPF prog-id=106 op=LOAD Aug 13 01:00:35.522000 audit: BPF prog-id=83 op=UNLOAD Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit: BPF prog-id=107 op=LOAD Aug 13 01:00:35.524000 audit: BPF prog-id=79 op=UNLOAD Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.524000 audit: BPF prog-id=108 op=LOAD Aug 13 01:00:35.524000 audit: BPF prog-id=60 op=UNLOAD Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit: BPF prog-id=109 op=LOAD Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.526000 audit: BPF prog-id=110 op=LOAD Aug 13 01:00:35.526000 audit: BPF prog-id=61 op=UNLOAD Aug 13 01:00:35.526000 audit: BPF prog-id=62 op=UNLOAD Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.528000 audit: BPF prog-id=111 op=LOAD Aug 13 01:00:35.528000 audit: BPF prog-id=63 op=UNLOAD Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit: BPF prog-id=112 op=LOAD Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit: BPF prog-id=113 op=LOAD Aug 13 01:00:35.529000 audit: BPF prog-id=64 op=UNLOAD Aug 13 01:00:35.529000 audit: BPF prog-id=65 op=UNLOAD Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:35.530000 audit: BPF prog-id=114 op=LOAD Aug 13 01:00:35.531000 audit: BPF prog-id=66 op=UNLOAD Aug 13 01:00:35.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:35.547597 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Aug 13 01:00:35.559026 systemd[1]: Stopping kubelet.service... Aug 13 01:00:35.564000 audit: BPF prog-id=99 op=UNLOAD Aug 13 01:00:35.564000 audit: BPF prog-id=98 op=UNLOAD Aug 13 01:00:35.564000 audit: BPF prog-id=97 op=UNLOAD Aug 13 01:00:35.586981 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 01:00:35.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:35.587384 systemd[1]: Stopped kubelet.service. Aug 13 01:00:35.590056 systemd[1]: Starting kubelet.service... Aug 13 01:00:36.362000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Aug 13 01:00:36.362000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000cffb40 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:36.362000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:36.561000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:36.561000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000761ce0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:36.561000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:36.564000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:36.564000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000761ee0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:36.564000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:36.565000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:36.565000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009f4d80 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:36.565000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:36.565000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:00:36.565000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009f4da0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:00:36.565000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:00:37.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:37.188517 systemd[1]: Started kubelet.service. Aug 13 01:00:37.282259 kubelet[2589]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:00:37.282259 kubelet[2589]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Aug 13 01:00:37.282259 kubelet[2589]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 01:00:37.282757 kubelet[2589]: I0813 01:00:37.282370 2589 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 01:00:37.306475 kubelet[2589]: I0813 01:00:37.305869 2589 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Aug 13 01:00:37.306475 kubelet[2589]: I0813 01:00:37.305902 2589 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 01:00:37.306793 kubelet[2589]: I0813 01:00:37.306674 2589 server.go:934] "Client rotation is on, will bootstrap in background" Aug 13 01:00:37.310906 kubelet[2589]: I0813 01:00:37.310875 2589 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Aug 13 01:00:37.330621 kubelet[2589]: I0813 01:00:37.330410 2589 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 01:00:37.355080 kubelet[2589]: E0813 01:00:37.355038 2589 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 01:00:37.355315 kubelet[2589]: I0813 01:00:37.355300 2589 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 01:00:37.362066 kubelet[2589]: I0813 01:00:37.359262 2589 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 01:00:37.362066 kubelet[2589]: I0813 01:00:37.359448 2589 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Aug 13 01:00:37.362066 kubelet[2589]: I0813 01:00:37.359618 2589 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 01:00:37.362066 kubelet[2589]: I0813 01:00:37.359651 2589 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-17-234","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 01:00:37.362443 kubelet[2589]: I0813 01:00:37.360015 2589 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 01:00:37.362443 kubelet[2589]: I0813 01:00:37.360030 2589 container_manager_linux.go:300] "Creating device plugin manager" Aug 13 01:00:37.362443 kubelet[2589]: I0813 01:00:37.360067 2589 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:00:37.362443 kubelet[2589]: I0813 01:00:37.360189 2589 kubelet.go:408] "Attempting to sync node with API server" Aug 13 01:00:37.362443 kubelet[2589]: I0813 01:00:37.360205 2589 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 01:00:37.362443 kubelet[2589]: I0813 01:00:37.360240 2589 kubelet.go:314] "Adding apiserver pod source" Aug 13 01:00:37.362443 kubelet[2589]: I0813 01:00:37.360258 2589 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 01:00:37.364033 kubelet[2589]: I0813 01:00:37.363133 2589 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 01:00:37.364033 kubelet[2589]: I0813 01:00:37.363725 2589 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Aug 13 01:00:37.366208 kubelet[2589]: I0813 01:00:37.365847 2589 server.go:1274] "Started kubelet" Aug 13 01:00:37.394000 audit[2589]: AVC avc: denied { mac_admin } for pid=2589 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:37.394000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:00:37.394000 audit[2589]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000adad80 a1=c0008959f8 a2=c000adad50 a3=25 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:37.394000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:00:37.394000 audit[2589]: AVC avc: denied { mac_admin } for pid=2589 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:37.394000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:00:37.394000 audit[2589]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0003fff40 a1=c000895a10 a2=c000adae10 a3=25 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:37.394000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:00:37.396999 kubelet[2589]: I0813 01:00:37.395583 2589 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 01:00:37.396999 kubelet[2589]: I0813 01:00:37.395647 2589 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Aug 13 01:00:37.396999 kubelet[2589]: I0813 01:00:37.395687 2589 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 01:00:37.405600 kubelet[2589]: I0813 01:00:37.405551 2589 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 01:00:37.406776 kubelet[2589]: I0813 01:00:37.406653 2589 server.go:449] "Adding debug handlers to kubelet server" Aug 13 01:00:37.408631 kubelet[2589]: I0813 01:00:37.407830 2589 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 01:00:37.408631 kubelet[2589]: I0813 01:00:37.408152 2589 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 01:00:37.408631 kubelet[2589]: I0813 01:00:37.408440 2589 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 01:00:37.411921 kubelet[2589]: I0813 01:00:37.411822 2589 volume_manager.go:289] "Starting Kubelet Volume Manager" Aug 13 01:00:37.412229 kubelet[2589]: E0813 01:00:37.412201 2589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ip-172-31-17-234\" not found" Aug 13 01:00:37.415777 kubelet[2589]: I0813 01:00:37.415747 2589 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Aug 13 01:00:37.416137 kubelet[2589]: I0813 01:00:37.416124 2589 reconciler.go:26] "Reconciler: start to sync state" Aug 13 01:00:37.424791 kubelet[2589]: I0813 01:00:37.424740 2589 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Aug 13 01:00:37.431510 kubelet[2589]: I0813 01:00:37.431464 2589 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Aug 13 01:00:37.431675 kubelet[2589]: I0813 01:00:37.431665 2589 status_manager.go:217] "Starting to sync pod status with apiserver" Aug 13 01:00:37.431747 kubelet[2589]: I0813 01:00:37.431741 2589 kubelet.go:2321] "Starting kubelet main sync loop" Aug 13 01:00:37.432694 kubelet[2589]: E0813 01:00:37.432555 2589 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 01:00:37.462742 kubelet[2589]: I0813 01:00:37.459518 2589 factory.go:221] Registration of the systemd container factory successfully Aug 13 01:00:37.462742 kubelet[2589]: I0813 01:00:37.459662 2589 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 01:00:37.505190 kubelet[2589]: I0813 01:00:37.505165 2589 factory.go:221] Registration of the containerd container factory successfully Aug 13 01:00:37.506598 kubelet[2589]: E0813 01:00:37.506529 2589 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 01:00:37.533116 kubelet[2589]: E0813 01:00:37.532796 2589 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Aug 13 01:00:37.555623 kubelet[2589]: I0813 01:00:37.555601 2589 cpu_manager.go:214] "Starting CPU manager" policy="none" Aug 13 01:00:37.555762 kubelet[2589]: I0813 01:00:37.555752 2589 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Aug 13 01:00:37.555829 kubelet[2589]: I0813 01:00:37.555823 2589 state_mem.go:36] "Initialized new in-memory state store" Aug 13 01:00:37.556056 kubelet[2589]: I0813 01:00:37.556040 2589 state_mem.go:88] "Updated default CPUSet" cpuSet="" Aug 13 01:00:37.556168 kubelet[2589]: I0813 01:00:37.556145 2589 state_mem.go:96] "Updated CPUSet assignments" assignments={} Aug 13 01:00:37.556240 kubelet[2589]: I0813 01:00:37.556230 2589 policy_none.go:49] "None policy: Start" Aug 13 01:00:37.557261 kubelet[2589]: I0813 01:00:37.557176 2589 memory_manager.go:170] "Starting memorymanager" policy="None" Aug 13 01:00:37.557261 kubelet[2589]: I0813 01:00:37.557202 2589 state_mem.go:35] "Initializing new in-memory state store" Aug 13 01:00:37.557407 kubelet[2589]: I0813 01:00:37.557392 2589 state_mem.go:75] "Updated machine memory state" Aug 13 01:00:37.566252 kubelet[2589]: I0813 01:00:37.566227 2589 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Aug 13 01:00:37.573531 kernel: kauditd_printk_skb: 321 callbacks suppressed Aug 13 01:00:37.573704 kernel: audit: type=1400 audit(1755046837.564:896): avc: denied { mac_admin } for pid=2589 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:37.564000 audit[2589]: AVC avc: denied { mac_admin } for pid=2589 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:37.573932 kubelet[2589]: I0813 01:00:37.573900 2589 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Aug 13 01:00:37.574241 kubelet[2589]: I0813 01:00:37.574228 2589 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 01:00:37.574362 kubelet[2589]: I0813 01:00:37.574326 2589 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 01:00:37.580165 kernel: audit: type=1401 audit(1755046837.564:896): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:00:37.564000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 01:00:37.580390 kubelet[2589]: I0813 01:00:37.576681 2589 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 01:00:37.564000 audit[2589]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f9e0f0 a1=c000f91fc8 a2=c000f9e0c0 a3=25 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:37.593584 kernel: audit: type=1300 audit(1755046837.564:896): arch=c000003e syscall=188 success=no exit=-22 a0=c000f9e0f0 a1=c000f91fc8 a2=c000f9e0c0 a3=25 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:37.564000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:00:37.605549 kernel: audit: type=1327 audit(1755046837.564:896): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 01:00:37.717393 kubelet[2589]: I0813 01:00:37.717300 2589 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-17-234" Aug 13 01:00:37.728515 kubelet[2589]: I0813 01:00:37.727897 2589 kubelet_node_status.go:111] "Node was previously registered" node="ip-172-31-17-234" Aug 13 01:00:37.728515 kubelet[2589]: I0813 01:00:37.727971 2589 kubelet_node_status.go:75] "Successfully registered node" node="ip-172-31-17-234" Aug 13 01:00:37.747188 kubelet[2589]: E0813 01:00:37.747152 2589 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-17-234\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:37.923533 kubelet[2589]: I0813 01:00:37.923477 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0578032a78e5a2b28663615605631837-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-17-234\" (UID: \"0578032a78e5a2b28663615605631837\") " pod="kube-system/kube-apiserver-ip-172-31-17-234" Aug 13 01:00:37.923749 kubelet[2589]: I0813 01:00:37.923731 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:37.923853 kubelet[2589]: I0813 01:00:37.923829 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-k8s-certs\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:37.923853 kubelet[2589]: I0813 01:00:37.923854 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-kubeconfig\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:37.923999 kubelet[2589]: I0813 01:00:37.923871 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:37.923999 kubelet[2589]: I0813 01:00:37.923890 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f495afc24643717d976587a4308d171-kubeconfig\") pod \"kube-scheduler-ip-172-31-17-234\" (UID: \"3f495afc24643717d976587a4308d171\") " pod="kube-system/kube-scheduler-ip-172-31-17-234" Aug 13 01:00:37.923999 kubelet[2589]: I0813 01:00:37.923906 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0578032a78e5a2b28663615605631837-ca-certs\") pod \"kube-apiserver-ip-172-31-17-234\" (UID: \"0578032a78e5a2b28663615605631837\") " pod="kube-system/kube-apiserver-ip-172-31-17-234" Aug 13 01:00:37.923999 kubelet[2589]: I0813 01:00:37.923921 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0578032a78e5a2b28663615605631837-k8s-certs\") pod \"kube-apiserver-ip-172-31-17-234\" (UID: \"0578032a78e5a2b28663615605631837\") " pod="kube-system/kube-apiserver-ip-172-31-17-234" Aug 13 01:00:37.923999 kubelet[2589]: I0813 01:00:37.923935 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2a4e4c663da078e1cbe49cf8cd0f72e9-ca-certs\") pod \"kube-controller-manager-ip-172-31-17-234\" (UID: \"2a4e4c663da078e1cbe49cf8cd0f72e9\") " pod="kube-system/kube-controller-manager-ip-172-31-17-234" Aug 13 01:00:38.363099 kubelet[2589]: I0813 01:00:38.363071 2589 apiserver.go:52] "Watching apiserver" Aug 13 01:00:38.416202 kubelet[2589]: I0813 01:00:38.416164 2589 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Aug 13 01:00:38.550799 kubelet[2589]: E0813 01:00:38.550770 2589 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-17-234\" already exists" pod="kube-system/kube-scheduler-ip-172-31-17-234" Aug 13 01:00:38.579754 kubelet[2589]: I0813 01:00:38.578329 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-17-234" podStartSLOduration=1.5783101149999998 podStartE2EDuration="1.578310115s" podCreationTimestamp="2025-08-13 01:00:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:00:38.558541702 +0000 UTC m=+1.350768356" watchObservedRunningTime="2025-08-13 01:00:38.578310115 +0000 UTC m=+1.370536764" Aug 13 01:00:38.600834 kubelet[2589]: I0813 01:00:38.600765 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-17-234" podStartSLOduration=3.600741153 podStartE2EDuration="3.600741153s" podCreationTimestamp="2025-08-13 01:00:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:00:38.581573075 +0000 UTC m=+1.373799730" watchObservedRunningTime="2025-08-13 01:00:38.600741153 +0000 UTC m=+1.392967813" Aug 13 01:00:38.629074 kubelet[2589]: I0813 01:00:38.628934 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-17-234" podStartSLOduration=1.628894513 podStartE2EDuration="1.628894513s" podCreationTimestamp="2025-08-13 01:00:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:00:38.601919707 +0000 UTC m=+1.394146371" watchObservedRunningTime="2025-08-13 01:00:38.628894513 +0000 UTC m=+1.421121172" Aug 13 01:00:40.003152 kubelet[2589]: I0813 01:00:40.001582 2589 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Aug 13 01:00:40.003152 kubelet[2589]: I0813 01:00:40.002034 2589 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Aug 13 01:00:40.006854 env[1714]: time="2025-08-13T01:00:40.001884193Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Aug 13 01:00:40.944970 systemd[1]: Created slice kubepods-besteffort-pod310e5582_59be_4a97_919b_f84330a9a90e.slice. Aug 13 01:00:41.045376 kubelet[2589]: I0813 01:00:41.045326 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/310e5582-59be-4a97-919b-f84330a9a90e-kube-proxy\") pod \"kube-proxy-65g9n\" (UID: \"310e5582-59be-4a97-919b-f84330a9a90e\") " pod="kube-system/kube-proxy-65g9n" Aug 13 01:00:41.046070 kubelet[2589]: I0813 01:00:41.046029 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/310e5582-59be-4a97-919b-f84330a9a90e-xtables-lock\") pod \"kube-proxy-65g9n\" (UID: \"310e5582-59be-4a97-919b-f84330a9a90e\") " pod="kube-system/kube-proxy-65g9n" Aug 13 01:00:41.046158 kubelet[2589]: I0813 01:00:41.046113 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/310e5582-59be-4a97-919b-f84330a9a90e-lib-modules\") pod \"kube-proxy-65g9n\" (UID: \"310e5582-59be-4a97-919b-f84330a9a90e\") " pod="kube-system/kube-proxy-65g9n" Aug 13 01:00:41.046158 kubelet[2589]: I0813 01:00:41.046143 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t58zp\" (UniqueName: \"kubernetes.io/projected/310e5582-59be-4a97-919b-f84330a9a90e-kube-api-access-t58zp\") pod \"kube-proxy-65g9n\" (UID: \"310e5582-59be-4a97-919b-f84330a9a90e\") " pod="kube-system/kube-proxy-65g9n" Aug 13 01:00:41.116979 systemd[1]: Created slice kubepods-besteffort-pod687247d8_922c_41cb_8f3e_68fe8db4749a.slice. Aug 13 01:00:41.147048 kubelet[2589]: I0813 01:00:41.146985 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/687247d8-922c-41cb-8f3e-68fe8db4749a-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-kq8gb\" (UID: \"687247d8-922c-41cb-8f3e-68fe8db4749a\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-kq8gb" Aug 13 01:00:41.147514 kubelet[2589]: I0813 01:00:41.147088 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l2stz\" (UniqueName: \"kubernetes.io/projected/687247d8-922c-41cb-8f3e-68fe8db4749a-kube-api-access-l2stz\") pod \"tigera-operator-5bf8dfcb4-kq8gb\" (UID: \"687247d8-922c-41cb-8f3e-68fe8db4749a\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-kq8gb" Aug 13 01:00:41.158808 kubelet[2589]: I0813 01:00:41.158766 2589 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Aug 13 01:00:41.253836 env[1714]: time="2025-08-13T01:00:41.253089691Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-65g9n,Uid:310e5582-59be-4a97-919b-f84330a9a90e,Namespace:kube-system,Attempt:0,}" Aug 13 01:00:41.289526 env[1714]: time="2025-08-13T01:00:41.289292576Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:00:41.289526 env[1714]: time="2025-08-13T01:00:41.289335458Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:00:41.289526 env[1714]: time="2025-08-13T01:00:41.289353756Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:00:41.289912 env[1714]: time="2025-08-13T01:00:41.289571354Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eec8036b4c070801908639ccff322009543023641e75542a6cc2d525f639520f pid=2640 runtime=io.containerd.runc.v2 Aug 13 01:00:41.315447 systemd[1]: Started cri-containerd-eec8036b4c070801908639ccff322009543023641e75542a6cc2d525f639520f.scope. Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.343578 kernel: audit: type=1400 audit(1755046841.334:897): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.352165 kernel: audit: type=1400 audit(1755046841.334:898): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.367221 kernel: audit: type=1400 audit(1755046841.334:899): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.367384 kernel: audit: type=1400 audit(1755046841.334:900): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.381562 kernel: audit: type=1400 audit(1755046841.334:901): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.391535 kernel: audit: type=1400 audit(1755046841.334:902): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.393233 env[1714]: time="2025-08-13T01:00:41.393187479Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-65g9n,Uid:310e5582-59be-4a97-919b-f84330a9a90e,Namespace:kube-system,Attempt:0,} returns sandbox id \"eec8036b4c070801908639ccff322009543023641e75542a6cc2d525f639520f\"" Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.341000 audit: BPF prog-id=115 op=LOAD Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2640 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565633830333662346330373038303139303836333963636666333232 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2640 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565633830333662346330373038303139303836333963636666333232 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit: BPF prog-id=116 op=LOAD Aug 13 01:00:41.342000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003bc5d0 items=0 ppid=2640 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565633830333662346330373038303139303836333963636666333232 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit: BPF prog-id=117 op=LOAD Aug 13 01:00:41.342000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003bc618 items=0 ppid=2640 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565633830333662346330373038303139303836333963636666333232 Aug 13 01:00:41.342000 audit: BPF prog-id=117 op=UNLOAD Aug 13 01:00:41.342000 audit: BPF prog-id=116 op=UNLOAD Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.342000 audit: BPF prog-id=118 op=LOAD Aug 13 01:00:41.342000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003bca28 items=0 ppid=2640 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565633830333662346330373038303139303836333963636666333232 Aug 13 01:00:41.399317 env[1714]: time="2025-08-13T01:00:41.397976870Z" level=info msg="CreateContainer within sandbox \"eec8036b4c070801908639ccff322009543023641e75542a6cc2d525f639520f\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Aug 13 01:00:41.422628 env[1714]: time="2025-08-13T01:00:41.422585168Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-kq8gb,Uid:687247d8-922c-41cb-8f3e-68fe8db4749a,Namespace:tigera-operator,Attempt:0,}" Aug 13 01:00:41.430268 env[1714]: time="2025-08-13T01:00:41.430221961Z" level=info msg="CreateContainer within sandbox \"eec8036b4c070801908639ccff322009543023641e75542a6cc2d525f639520f\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"b899b70a1bda8c6d25aaa37ae8a8c2e67e9b0094a73db3ae79b4d6adeb078a24\"" Aug 13 01:00:41.433110 env[1714]: time="2025-08-13T01:00:41.431418314Z" level=info msg="StartContainer for \"b899b70a1bda8c6d25aaa37ae8a8c2e67e9b0094a73db3ae79b4d6adeb078a24\"" Aug 13 01:00:41.462564 systemd[1]: Started cri-containerd-b899b70a1bda8c6d25aaa37ae8a8c2e67e9b0094a73db3ae79b4d6adeb078a24.scope. Aug 13 01:00:41.470291 env[1714]: time="2025-08-13T01:00:41.470194917Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:00:41.470291 env[1714]: time="2025-08-13T01:00:41.470262927Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:00:41.470636 env[1714]: time="2025-08-13T01:00:41.470578381Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:00:41.470943 env[1714]: time="2025-08-13T01:00:41.470889770Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/44ddcf67a290992ec9ce64d51f2289fc13ebeb55935306dc3b9b4ad80ea6e3fd pid=2700 runtime=io.containerd.runc.v2 Aug 13 01:00:41.489202 systemd[1]: Started cri-containerd-44ddcf67a290992ec9ce64d51f2289fc13ebeb55935306dc3b9b4ad80ea6e3fd.scope. Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f125da7e528 items=0 ppid=2640 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393962373061316264613863366432356161613337616538613863 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.502000 audit: BPF prog-id=119 op=LOAD Aug 13 01:00:41.502000 audit[2683]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00034e078 items=0 ppid=2640 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393962373061316264613863366432356161613337616538613863 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit: BPF prog-id=120 op=LOAD Aug 13 01:00:41.503000 audit[2683]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00034e0c8 items=0 ppid=2640 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393962373061316264613863366432356161613337616538613863 Aug 13 01:00:41.503000 audit: BPF prog-id=120 op=UNLOAD Aug 13 01:00:41.503000 audit: BPF prog-id=119 op=UNLOAD Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { perfmon } for pid=2683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit[2683]: AVC avc: denied { bpf } for pid=2683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.503000 audit: BPF prog-id=121 op=LOAD Aug 13 01:00:41.503000 audit[2683]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00034e158 items=0 ppid=2640 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393962373061316264613863366432356161613337616538613863 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.528000 audit: BPF prog-id=122 op=LOAD Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2700 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646463663637613239303939326563396365363464353166323238 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2700 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646463663637613239303939326563396365363464353166323238 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit: BPF prog-id=123 op=LOAD Aug 13 01:00:41.529000 audit[2710]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000025080 items=0 ppid=2700 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646463663637613239303939326563396365363464353166323238 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit: BPF prog-id=124 op=LOAD Aug 13 01:00:41.529000 audit[2710]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0000250c8 items=0 ppid=2700 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646463663637613239303939326563396365363464353166323238 Aug 13 01:00:41.529000 audit: BPF prog-id=124 op=UNLOAD Aug 13 01:00:41.529000 audit: BPF prog-id=123 op=UNLOAD Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { perfmon } for pid=2710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit[2710]: AVC avc: denied { bpf } for pid=2710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:41.529000 audit: BPF prog-id=125 op=LOAD Aug 13 01:00:41.529000 audit[2710]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0000254d8 items=0 ppid=2700 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:41.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646463663637613239303939326563396365363464353166323238 Aug 13 01:00:41.538772 env[1714]: time="2025-08-13T01:00:41.538725975Z" level=info msg="StartContainer for \"b899b70a1bda8c6d25aaa37ae8a8c2e67e9b0094a73db3ae79b4d6adeb078a24\" returns successfully" Aug 13 01:00:41.579240 env[1714]: time="2025-08-13T01:00:41.578028757Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-kq8gb,Uid:687247d8-922c-41cb-8f3e-68fe8db4749a,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"44ddcf67a290992ec9ce64d51f2289fc13ebeb55935306dc3b9b4ad80ea6e3fd\"" Aug 13 01:00:41.581676 env[1714]: time="2025-08-13T01:00:41.580685873Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Aug 13 01:00:42.169976 systemd[1]: run-containerd-runc-k8s.io-eec8036b4c070801908639ccff322009543023641e75542a6cc2d525f639520f-runc.MJ4NFR.mount: Deactivated successfully. Aug 13 01:00:42.185000 audit[2782]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.185000 audit[2782]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7d47cc70 a2=0 a3=7fff7d47cc5c items=0 ppid=2712 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.185000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 01:00:42.187000 audit[2783]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.187000 audit[2783]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff48321980 a2=0 a3=7fff4832196c items=0 ppid=2712 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.187000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 01:00:42.188000 audit[2784]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.188000 audit[2784]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd96ee7a0 a2=0 a3=7ffdd96ee78c items=0 ppid=2712 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 01:00:42.191000 audit[2785]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.191000 audit[2785]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdbb7770b0 a2=0 a3=7ffdbb77709c items=0 ppid=2712 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 01:00:42.193000 audit[2786]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.193000 audit[2786]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca902dc90 a2=0 a3=7ffca902dc7c items=0 ppid=2712 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 01:00:42.195000 audit[2787]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.195000 audit[2787]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca06b8970 a2=0 a3=7ffca06b895c items=0 ppid=2712 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 01:00:42.294000 audit[2788]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.294000 audit[2788]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe1b262710 a2=0 a3=7ffe1b2626fc items=0 ppid=2712 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.294000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 01:00:42.300000 audit[2790]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2790 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.300000 audit[2790]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff84ed1ec0 a2=0 a3=7fff84ed1eac items=0 ppid=2712 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Aug 13 01:00:42.305000 audit[2793]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.305000 audit[2793]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe7ed37160 a2=0 a3=7ffe7ed3714c items=0 ppid=2712 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.305000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Aug 13 01:00:42.307000 audit[2794]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.307000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe13cc6fa0 a2=0 a3=7ffe13cc6f8c items=0 ppid=2712 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 01:00:42.310000 audit[2796]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.310000 audit[2796]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe8ec10330 a2=0 a3=7ffe8ec1031c items=0 ppid=2712 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.310000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 01:00:42.311000 audit[2797]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.311000 audit[2797]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffefa535040 a2=0 a3=7ffefa53502c items=0 ppid=2712 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 01:00:42.315000 audit[2799]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.315000 audit[2799]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe471f0c80 a2=0 a3=7ffe471f0c6c items=0 ppid=2712 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 01:00:42.320000 audit[2802]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.320000 audit[2802]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe33c19840 a2=0 a3=7ffe33c1982c items=0 ppid=2712 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.320000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Aug 13 01:00:42.321000 audit[2803]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.321000 audit[2803]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8a958710 a2=0 a3=7ffc8a9586fc items=0 ppid=2712 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.321000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 01:00:42.324000 audit[2805]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.324000 audit[2805]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff08d9a910 a2=0 a3=7fff08d9a8fc items=0 ppid=2712 pid=2805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.324000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 01:00:42.326000 audit[2806]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.326000 audit[2806]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcbd3c53d0 a2=0 a3=7ffcbd3c53bc items=0 ppid=2712 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.326000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 01:00:42.329000 audit[2808]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.329000 audit[2808]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe49d1b640 a2=0 a3=7ffe49d1b62c items=0 ppid=2712 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 01:00:42.333000 audit[2811]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.333000 audit[2811]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeefbbaa80 a2=0 a3=7ffeefbbaa6c items=0 ppid=2712 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 01:00:42.338000 audit[2814]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.338000 audit[2814]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea721fc80 a2=0 a3=7ffea721fc6c items=0 ppid=2712 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 01:00:42.339000 audit[2815]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.339000 audit[2815]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff561eb850 a2=0 a3=7fff561eb83c items=0 ppid=2712 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 01:00:42.343000 audit[2817]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.343000 audit[2817]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc4a8a6e10 a2=0 a3=7ffc4a8a6dfc items=0 ppid=2712 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.343000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:00:42.348000 audit[2820]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.348000 audit[2820]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff48c620e0 a2=0 a3=7fff48c620cc items=0 ppid=2712 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.348000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:00:42.350000 audit[2821]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2821 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.350000 audit[2821]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd4a259b40 a2=0 a3=7ffd4a259b2c items=0 ppid=2712 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 01:00:42.353000 audit[2823]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2823 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 01:00:42.353000 audit[2823]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe0d064ee0 a2=0 a3=7ffe0d064ecc items=0 ppid=2712 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.353000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 01:00:42.409000 audit[2829]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2829 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:42.409000 audit[2829]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff5024e5c0 a2=0 a3=7fff5024e5ac items=0 ppid=2712 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.409000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:42.421000 audit[2829]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2829 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:42.421000 audit[2829]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fff5024e5c0 a2=0 a3=7fff5024e5ac items=0 ppid=2712 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.421000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:42.424000 audit[2834]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2834 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.424000 audit[2834]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe8dfa4790 a2=0 a3=7ffe8dfa477c items=0 ppid=2712 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 01:00:42.429000 audit[2836]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2836 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.429000 audit[2836]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd86ae2fd0 a2=0 a3=7ffd86ae2fbc items=0 ppid=2712 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Aug 13 01:00:42.437000 audit[2839]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2839 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.437000 audit[2839]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffad5c21d0 a2=0 a3=7fffad5c21bc items=0 ppid=2712 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.437000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Aug 13 01:00:42.440000 audit[2840]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2840 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.440000 audit[2840]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9bf7f550 a2=0 a3=7ffe9bf7f53c items=0 ppid=2712 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 01:00:42.445000 audit[2842]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.445000 audit[2842]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffe663fbd0 a2=0 a3=7fffe663fbbc items=0 ppid=2712 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.445000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 01:00:42.448000 audit[2843]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2843 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.448000 audit[2843]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9218f140 a2=0 a3=7ffd9218f12c items=0 ppid=2712 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.448000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 01:00:42.455000 audit[2845]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2845 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.455000 audit[2845]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe41cc0280 a2=0 a3=7ffe41cc026c items=0 ppid=2712 pid=2845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Aug 13 01:00:42.461000 audit[2848]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2848 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.461000 audit[2848]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffea8b360e0 a2=0 a3=7ffea8b360cc items=0 ppid=2712 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.461000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 01:00:42.463000 audit[2849]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2849 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.463000 audit[2849]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc92ec40d0 a2=0 a3=7ffc92ec40bc items=0 ppid=2712 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.463000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 01:00:42.467000 audit[2851]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2851 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.467000 audit[2851]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff26252d70 a2=0 a3=7fff26252d5c items=0 ppid=2712 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.467000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 01:00:42.469000 audit[2852]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2852 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.469000 audit[2852]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3eee6d40 a2=0 a3=7ffc3eee6d2c items=0 ppid=2712 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.469000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 01:00:42.472000 audit[2854]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2854 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.472000 audit[2854]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe4103c150 a2=0 a3=7ffe4103c13c items=0 ppid=2712 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.472000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 01:00:42.477000 audit[2857]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2857 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.477000 audit[2857]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd4428a9d0 a2=0 a3=7ffd4428a9bc items=0 ppid=2712 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.477000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 01:00:42.483000 audit[2860]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2860 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.483000 audit[2860]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdf428ea00 a2=0 a3=7ffdf428e9ec items=0 ppid=2712 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.483000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Aug 13 01:00:42.485000 audit[2861]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2861 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.485000 audit[2861]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe1b15f1e0 a2=0 a3=7ffe1b15f1cc items=0 ppid=2712 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.485000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 01:00:42.489000 audit[2863]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2863 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.489000 audit[2863]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc62877670 a2=0 a3=7ffc6287765c items=0 ppid=2712 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.489000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:00:42.493000 audit[2866]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2866 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.493000 audit[2866]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffeb474e1c0 a2=0 a3=7ffeb474e1ac items=0 ppid=2712 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.493000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 01:00:42.495000 audit[2867]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2867 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.495000 audit[2867]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc987a0660 a2=0 a3=7ffc987a064c items=0 ppid=2712 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.495000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 01:00:42.498000 audit[2869]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2869 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.498000 audit[2869]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff1fe14ec0 a2=0 a3=7fff1fe14eac items=0 ppid=2712 pid=2869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.498000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 01:00:42.500000 audit[2870]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2870 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.500000 audit[2870]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde02c07a0 a2=0 a3=7ffde02c078c items=0 ppid=2712 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.500000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 01:00:42.503000 audit[2872]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2872 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.503000 audit[2872]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc40d1fe50 a2=0 a3=7ffc40d1fe3c items=0 ppid=2712 pid=2872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.503000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:00:42.508000 audit[2875]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2875 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 01:00:42.508000 audit[2875]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef5ab3b10 a2=0 a3=7ffef5ab3afc items=0 ppid=2712 pid=2875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.508000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 01:00:42.511000 audit[2877]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2877 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 01:00:42.511000 audit[2877]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffcc46ac8f0 a2=0 a3=7ffcc46ac8dc items=0 ppid=2712 pid=2877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.511000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:42.512000 audit[2877]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2877 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 01:00:42.512000 audit[2877]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffcc46ac8f0 a2=0 a3=7ffcc46ac8dc items=0 ppid=2712 pid=2877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:42.512000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:42.844830 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount876979992.mount: Deactivated successfully. Aug 13 01:00:43.108362 kubelet[2589]: I0813 01:00:43.108004 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-65g9n" podStartSLOduration=3.10797786 podStartE2EDuration="3.10797786s" podCreationTimestamp="2025-08-13 01:00:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:00:42.557081082 +0000 UTC m=+5.349307737" watchObservedRunningTime="2025-08-13 01:00:43.10797786 +0000 UTC m=+5.900204520" Aug 13 01:00:43.753174 env[1714]: time="2025-08-13T01:00:43.753119749Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:43.757550 env[1714]: time="2025-08-13T01:00:43.757482270Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:43.760543 env[1714]: time="2025-08-13T01:00:43.760500061Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:43.763354 env[1714]: time="2025-08-13T01:00:43.763313324Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:43.764120 env[1714]: time="2025-08-13T01:00:43.764009885Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Aug 13 01:00:43.767992 env[1714]: time="2025-08-13T01:00:43.767929867Z" level=info msg="CreateContainer within sandbox \"44ddcf67a290992ec9ce64d51f2289fc13ebeb55935306dc3b9b4ad80ea6e3fd\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Aug 13 01:00:43.793318 env[1714]: time="2025-08-13T01:00:43.793261839Z" level=info msg="CreateContainer within sandbox \"44ddcf67a290992ec9ce64d51f2289fc13ebeb55935306dc3b9b4ad80ea6e3fd\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4\"" Aug 13 01:00:43.795570 env[1714]: time="2025-08-13T01:00:43.795524841Z" level=info msg="StartContainer for \"b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4\"" Aug 13 01:00:43.829632 systemd[1]: Started cri-containerd-b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4.scope. Aug 13 01:00:43.851829 kernel: kauditd_printk_skb: 304 callbacks suppressed Aug 13 01:00:43.852148 kernel: audit: type=1400 audit(1755046843.842:990): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.859508 kernel: audit: type=1400 audit(1755046843.842:991): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.873501 kernel: audit: type=1400 audit(1755046843.842:992): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.873619 kernel: audit: type=1400 audit(1755046843.842:993): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.892601 kernel: audit: type=1400 audit(1755046843.842:994): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.892752 kernel: audit: type=1400 audit(1755046843.842:995): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.903568 kernel: audit: type=1400 audit(1755046843.842:996): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.903866 env[1714]: time="2025-08-13T01:00:43.903030262Z" level=info msg="StartContainer for \"b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4\" returns successfully" Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.919836 kernel: audit: type=1400 audit(1755046843.842:997): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.919990 kernel: audit: type=1400 audit(1755046843.842:998): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.928057 kernel: audit: type=1400 audit(1755046843.851:999): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.851000 audit: BPF prog-id=126 op=LOAD Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2700 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:43.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363664353864646539623734393339393435383035323332326565 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2700 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:43.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363664353864646539623734393339393435383035323332326565 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.852000 audit: BPF prog-id=127 op=LOAD Aug 13 01:00:43.852000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000328260 items=0 ppid=2700 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:43.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363664353864646539623734393339393435383035323332326565 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.858000 audit: BPF prog-id=128 op=LOAD Aug 13 01:00:43.858000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003282a8 items=0 ppid=2700 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:43.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363664353864646539623734393339393435383035323332326565 Aug 13 01:00:43.865000 audit: BPF prog-id=128 op=UNLOAD Aug 13 01:00:43.865000 audit: BPF prog-id=127 op=UNLOAD Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:43.865000 audit: BPF prog-id=129 op=LOAD Aug 13 01:00:43.865000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003286b8 items=0 ppid=2700 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:43.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363664353864646539623734393339393435383035323332326565 Aug 13 01:00:45.314652 kubelet[2589]: I0813 01:00:45.314603 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-kq8gb" podStartSLOduration=2.129473696 podStartE2EDuration="4.314585583s" podCreationTimestamp="2025-08-13 01:00:41 +0000 UTC" firstStartedPulling="2025-08-13 01:00:41.579899389 +0000 UTC m=+4.372126028" lastFinishedPulling="2025-08-13 01:00:43.765011267 +0000 UTC m=+6.557237915" observedRunningTime="2025-08-13 01:00:44.562178034 +0000 UTC m=+7.354404693" watchObservedRunningTime="2025-08-13 01:00:45.314585583 +0000 UTC m=+8.106812240" Aug 13 01:00:49.508585 update_engine[1708]: I0813 01:00:49.507886 1708 update_attempter.cc:509] Updating boot flags... Aug 13 01:00:51.011545 sudo[1993]: pam_unix(sudo:session): session closed for user root Aug 13 01:00:51.011000 audit[1993]: USER_END pid=1993 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:51.014372 kernel: kauditd_printk_skb: 47 callbacks suppressed Aug 13 01:00:51.014516 kernel: audit: type=1106 audit(1755046851.011:1008): pid=1993 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:51.011000 audit[1993]: CRED_DISP pid=1993 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:51.040546 kernel: audit: type=1104 audit(1755046851.011:1009): pid=1993 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 01:00:51.067896 sshd[1990]: pam_unix(sshd:session): session closed for user core Aug 13 01:00:51.070000 audit[1990]: USER_END pid=1990 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:51.079112 systemd[1]: sshd@6-172.31.17.234:22-147.75.109.163:60972.service: Deactivated successfully. Aug 13 01:00:51.081170 systemd[1]: session-7.scope: Deactivated successfully. Aug 13 01:00:51.081351 systemd[1]: session-7.scope: Consumed 4.152s CPU time. Aug 13 01:00:51.082981 kernel: audit: type=1106 audit(1755046851.070:1010): pid=1990 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:51.082164 systemd-logind[1707]: Session 7 logged out. Waiting for processes to exit. Aug 13 01:00:51.084686 systemd-logind[1707]: Removed session 7. Aug 13 01:00:51.071000 audit[1990]: CRED_DISP pid=1990 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:51.095592 kernel: audit: type=1104 audit(1755046851.071:1011): pid=1990 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:00:51.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.234:22-147.75.109.163:60972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:51.108604 kernel: audit: type=1131 audit(1755046851.078:1012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.234:22-147.75.109.163:60972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:00:52.266000 audit[3146]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:52.266000 audit[3146]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffecad428a0 a2=0 a3=7ffecad4288c items=0 ppid=2712 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:52.285357 kernel: audit: type=1325 audit(1755046852.266:1013): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:52.285527 kernel: audit: type=1300 audit(1755046852.266:1013): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffecad428a0 a2=0 a3=7ffecad4288c items=0 ppid=2712 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:52.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:52.295547 kernel: audit: type=1327 audit(1755046852.266:1013): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:52.295000 audit[3146]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:52.303517 kernel: audit: type=1325 audit(1755046852.295:1014): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:52.295000 audit[3146]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffecad428a0 a2=0 a3=0 items=0 ppid=2712 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:52.315512 kernel: audit: type=1300 audit(1755046852.295:1014): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffecad428a0 a2=0 a3=0 items=0 ppid=2712 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:52.295000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:52.419000 audit[3148]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:52.419000 audit[3148]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe8cf59340 a2=0 a3=7ffe8cf5932c items=0 ppid=2712 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:52.419000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:52.424000 audit[3148]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:52.424000 audit[3148]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe8cf59340 a2=0 a3=0 items=0 ppid=2712 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:52.424000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:55.429000 audit[3150]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:55.429000 audit[3150]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffea56bf2d0 a2=0 a3=7ffea56bf2bc items=0 ppid=2712 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:55.429000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:55.441000 audit[3150]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:55.441000 audit[3150]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffea56bf2d0 a2=0 a3=0 items=0 ppid=2712 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:55.441000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:55.463000 audit[3152]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3152 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:55.463000 audit[3152]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc56356690 a2=0 a3=7ffc5635667c items=0 ppid=2712 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:55.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:55.470000 audit[3152]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3152 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:55.470000 audit[3152]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc56356690 a2=0 a3=0 items=0 ppid=2712 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:55.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:55.814641 systemd[1]: Created slice kubepods-besteffort-pod23169eaa_176e_41f2_a701_0d129b0faadb.slice. Aug 13 01:00:55.989024 kubelet[2589]: I0813 01:00:55.988984 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/23169eaa-176e-41f2-a701-0d129b0faadb-typha-certs\") pod \"calico-typha-857c6b7ddc-cvqz6\" (UID: \"23169eaa-176e-41f2-a701-0d129b0faadb\") " pod="calico-system/calico-typha-857c6b7ddc-cvqz6" Aug 13 01:00:55.990001 kubelet[2589]: I0813 01:00:55.989975 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6xnp7\" (UniqueName: \"kubernetes.io/projected/23169eaa-176e-41f2-a701-0d129b0faadb-kube-api-access-6xnp7\") pod \"calico-typha-857c6b7ddc-cvqz6\" (UID: \"23169eaa-176e-41f2-a701-0d129b0faadb\") " pod="calico-system/calico-typha-857c6b7ddc-cvqz6" Aug 13 01:00:55.990100 kubelet[2589]: I0813 01:00:55.990089 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/23169eaa-176e-41f2-a701-0d129b0faadb-tigera-ca-bundle\") pod \"calico-typha-857c6b7ddc-cvqz6\" (UID: \"23169eaa-176e-41f2-a701-0d129b0faadb\") " pod="calico-system/calico-typha-857c6b7ddc-cvqz6" Aug 13 01:00:56.188179 systemd[1]: Created slice kubepods-besteffort-pod1ed3d647_9544_44ec_86fc_4654fb074374.slice. Aug 13 01:00:56.292013 kubelet[2589]: I0813 01:00:56.291978 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-cni-log-dir\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292234 kubelet[2589]: I0813 01:00:56.292217 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1ed3d647-9544-44ec-86fc-4654fb074374-tigera-ca-bundle\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292325 kubelet[2589]: I0813 01:00:56.292315 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-cni-net-dir\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292393 kubelet[2589]: I0813 01:00:56.292384 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-var-lib-calico\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292470 kubelet[2589]: I0813 01:00:56.292458 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xbq6w\" (UniqueName: \"kubernetes.io/projected/1ed3d647-9544-44ec-86fc-4654fb074374-kube-api-access-xbq6w\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292582 kubelet[2589]: I0813 01:00:56.292571 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-flexvol-driver-host\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292663 kubelet[2589]: I0813 01:00:56.292654 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-xtables-lock\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292736 kubelet[2589]: I0813 01:00:56.292727 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-var-run-calico\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292811 kubelet[2589]: I0813 01:00:56.292802 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-cni-bin-dir\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292884 kubelet[2589]: I0813 01:00:56.292875 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-lib-modules\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.292958 kubelet[2589]: I0813 01:00:56.292949 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/1ed3d647-9544-44ec-86fc-4654fb074374-node-certs\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.293034 kubelet[2589]: I0813 01:00:56.293011 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/1ed3d647-9544-44ec-86fc-4654fb074374-policysync\") pod \"calico-node-w6whm\" (UID: \"1ed3d647-9544-44ec-86fc-4654fb074374\") " pod="calico-system/calico-node-w6whm" Aug 13 01:00:56.404748 kubelet[2589]: E0813 01:00:56.404712 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.404886 kubelet[2589]: W0813 01:00:56.404838 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.404886 kubelet[2589]: E0813 01:00:56.404866 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.405327 kubelet[2589]: E0813 01:00:56.405309 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.405327 kubelet[2589]: W0813 01:00:56.405324 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.405442 kubelet[2589]: E0813 01:00:56.405339 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.418887 kubelet[2589]: E0813 01:00:56.418858 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.418887 kubelet[2589]: W0813 01:00:56.418881 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.419049 kubelet[2589]: E0813 01:00:56.418902 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.422172 env[1714]: time="2025-08-13T01:00:56.422129051Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-857c6b7ddc-cvqz6,Uid:23169eaa-176e-41f2-a701-0d129b0faadb,Namespace:calico-system,Attempt:0,}" Aug 13 01:00:56.451611 env[1714]: time="2025-08-13T01:00:56.450590463Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:00:56.451611 env[1714]: time="2025-08-13T01:00:56.450635046Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:00:56.451611 env[1714]: time="2025-08-13T01:00:56.450649330Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:00:56.451934 env[1714]: time="2025-08-13T01:00:56.451864301Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6c8e6323b9333f16011bbe1360cd46fa88ad4efbee2007d594dec875c1341f06 pid=3166 runtime=io.containerd.runc.v2 Aug 13 01:00:56.468291 systemd[1]: Started cri-containerd-6c8e6323b9333f16011bbe1360cd46fa88ad4efbee2007d594dec875c1341f06.scope. Aug 13 01:00:56.493514 env[1714]: time="2025-08-13T01:00:56.491733950Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-w6whm,Uid:1ed3d647-9544-44ec-86fc-4654fb074374,Namespace:calico-system,Attempt:0,}" Aug 13 01:00:56.510690 kernel: kauditd_printk_skb: 19 callbacks suppressed Aug 13 01:00:56.510833 kernel: audit: type=1325 audit(1755046856.502:1021): table=filter:97 family=2 entries=20 op=nft_register_rule pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:56.502000 audit[3185]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:56.502000 audit[3185]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe04183670 a2=0 a3=7ffe0418365c items=0 ppid=2712 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.523572 kernel: audit: type=1300 audit(1755046856.502:1021): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe04183670 a2=0 a3=7ffe0418365c items=0 ppid=2712 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.502000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:56.534294 env[1714]: time="2025-08-13T01:00:56.533192993Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:00:56.534294 env[1714]: time="2025-08-13T01:00:56.533295060Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:00:56.534294 env[1714]: time="2025-08-13T01:00:56.533325583Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:00:56.534294 env[1714]: time="2025-08-13T01:00:56.533791188Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f pid=3196 runtime=io.containerd.runc.v2 Aug 13 01:00:56.534558 kernel: audit: type=1327 audit(1755046856.502:1021): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:56.515000 audit[3185]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:56.547513 kernel: audit: type=1325 audit(1755046856.515:1022): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:00:56.562749 kernel: audit: type=1300 audit(1755046856.515:1022): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe04183670 a2=0 a3=0 items=0 ppid=2712 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.515000 audit[3185]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe04183670 a2=0 a3=0 items=0 ppid=2712 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.568418 systemd[1]: Started cri-containerd-cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f.scope. Aug 13 01:00:56.515000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:56.578512 kernel: audit: type=1327 audit(1755046856.515:1022): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:00:56.587919 kubelet[2589]: E0813 01:00:56.587849 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.608595 kernel: audit: type=1400 audit(1755046856.599:1023): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.618529 kernel: audit: type=1400 audit(1755046856.599:1024): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.626987 kubelet[2589]: E0813 01:00:56.626959 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.627099 kubelet[2589]: W0813 01:00:56.626987 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.627099 kubelet[2589]: E0813 01:00:56.627016 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.627406 kubelet[2589]: E0813 01:00:56.627385 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.627507 kernel: audit: type=1400 audit(1755046856.599:1025): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.627555 kubelet[2589]: W0813 01:00:56.627406 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.627555 kubelet[2589]: E0813 01:00:56.627427 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.627745 kubelet[2589]: E0813 01:00:56.627728 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.627832 kubelet[2589]: W0813 01:00:56.627745 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.627832 kubelet[2589]: E0813 01:00:56.627761 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.627986 kubelet[2589]: E0813 01:00:56.627970 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.628061 kubelet[2589]: W0813 01:00:56.627989 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.628061 kubelet[2589]: E0813 01:00:56.628003 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.636185 kubelet[2589]: E0813 01:00:56.628239 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.636185 kubelet[2589]: W0813 01:00:56.628250 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.636185 kubelet[2589]: E0813 01:00:56.628263 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.636185 kubelet[2589]: E0813 01:00:56.628455 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.636185 kubelet[2589]: W0813 01:00:56.628464 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.636185 kubelet[2589]: E0813 01:00:56.628475 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.636185 kubelet[2589]: E0813 01:00:56.628687 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.636185 kubelet[2589]: W0813 01:00:56.628696 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.636185 kubelet[2589]: E0813 01:00:56.628708 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.636185 kubelet[2589]: E0813 01:00:56.628892 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.636668 kernel: audit: type=1400 audit(1755046856.599:1026): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.636719 kubelet[2589]: W0813 01:00:56.628901 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.636719 kubelet[2589]: E0813 01:00:56.628911 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.636719 kubelet[2589]: E0813 01:00:56.629104 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.636719 kubelet[2589]: W0813 01:00:56.629112 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.636719 kubelet[2589]: E0813 01:00:56.629122 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.636719 kubelet[2589]: E0813 01:00:56.629299 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.636719 kubelet[2589]: W0813 01:00:56.629308 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.636719 kubelet[2589]: E0813 01:00:56.629318 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.636719 kubelet[2589]: E0813 01:00:56.629519 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.636719 kubelet[2589]: W0813 01:00:56.629528 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637109 kubelet[2589]: E0813 01:00:56.629539 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637109 kubelet[2589]: E0813 01:00:56.629731 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637109 kubelet[2589]: W0813 01:00:56.629740 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637109 kubelet[2589]: E0813 01:00:56.629750 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637109 kubelet[2589]: E0813 01:00:56.629939 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637109 kubelet[2589]: W0813 01:00:56.629947 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637109 kubelet[2589]: E0813 01:00:56.629958 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637109 kubelet[2589]: E0813 01:00:56.630128 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637109 kubelet[2589]: W0813 01:00:56.630137 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637109 kubelet[2589]: E0813 01:00:56.630146 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637509 kubelet[2589]: E0813 01:00:56.630329 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637509 kubelet[2589]: W0813 01:00:56.630337 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637509 kubelet[2589]: E0813 01:00:56.630349 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637509 kubelet[2589]: E0813 01:00:56.632642 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637509 kubelet[2589]: W0813 01:00:56.632660 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637509 kubelet[2589]: E0813 01:00:56.632679 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637509 kubelet[2589]: E0813 01:00:56.632922 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637509 kubelet[2589]: W0813 01:00:56.632932 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637509 kubelet[2589]: E0813 01:00:56.632942 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637509 kubelet[2589]: E0813 01:00:56.633119 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637905 kubelet[2589]: W0813 01:00:56.633127 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637905 kubelet[2589]: E0813 01:00:56.633136 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.637905 kubelet[2589]: E0813 01:00:56.633302 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.637905 kubelet[2589]: W0813 01:00:56.633311 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.637905 kubelet[2589]: E0813 01:00:56.633320 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.638721 kubelet[2589]: E0813 01:00:56.638683 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.638721 kubelet[2589]: W0813 01:00:56.638706 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.638929 kubelet[2589]: E0813 01:00:56.638732 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.600000 audit: BPF prog-id=130 op=LOAD Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3166 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386536333233623933333366313630313162626531333630636434 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3166 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386536333233623933333366313630313162626531333630636434 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit: BPF prog-id=131 op=LOAD Aug 13 01:00:56.609000 audit[3175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028b210 items=0 ppid=3166 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386536333233623933333366313630313162626531333630636434 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit: BPF prog-id=132 op=LOAD Aug 13 01:00:56.609000 audit[3175]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028b258 items=0 ppid=3166 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386536333233623933333366313630313162626531333630636434 Aug 13 01:00:56.609000 audit: BPF prog-id=132 op=UNLOAD Aug 13 01:00:56.609000 audit: BPF prog-id=131 op=UNLOAD Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { perfmon } for pid=3175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit[3175]: AVC avc: denied { bpf } for pid=3175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.609000 audit: BPF prog-id=133 op=LOAD Aug 13 01:00:56.609000 audit[3175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028b668 items=0 ppid=3166 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386536333233623933333366313630313162626531333630636434 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.663000 audit: BPF prog-id=134 op=LOAD Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3196 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626238313034353937333938303832653633326662346663653066 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3196 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626238313034353937333938303832653633326662346663653066 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit: BPF prog-id=135 op=LOAD Aug 13 01:00:56.664000 audit[3208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d4c50 items=0 ppid=3196 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626238313034353937333938303832653633326662346663653066 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit: BPF prog-id=136 op=LOAD Aug 13 01:00:56.664000 audit[3208]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d4c98 items=0 ppid=3196 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626238313034353937333938303832653633326662346663653066 Aug 13 01:00:56.664000 audit: BPF prog-id=136 op=UNLOAD Aug 13 01:00:56.664000 audit: BPF prog-id=135 op=UNLOAD Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:56.664000 audit: BPF prog-id=137 op=LOAD Aug 13 01:00:56.664000 audit[3208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d50a8 items=0 ppid=3196 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:56.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626238313034353937333938303832653633326662346663653066 Aug 13 01:00:56.681869 env[1714]: time="2025-08-13T01:00:56.681822256Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-w6whm,Uid:1ed3d647-9544-44ec-86fc-4654fb074374,Namespace:calico-system,Attempt:0,} returns sandbox id \"cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f\"" Aug 13 01:00:56.690271 env[1714]: time="2025-08-13T01:00:56.689994249Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Aug 13 01:00:56.696261 kubelet[2589]: E0813 01:00:56.696229 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.696261 kubelet[2589]: W0813 01:00:56.696259 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.696498 kubelet[2589]: E0813 01:00:56.696284 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.696498 kubelet[2589]: I0813 01:00:56.696319 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/b8eb7ae6-f7c7-4789-8cce-a6a4550419c1-varrun\") pod \"csi-node-driver-6jvvc\" (UID: \"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1\") " pod="calico-system/csi-node-driver-6jvvc" Aug 13 01:00:56.696624 kubelet[2589]: E0813 01:00:56.696606 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.696624 kubelet[2589]: W0813 01:00:56.696621 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.696734 kubelet[2589]: E0813 01:00:56.696640 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.696734 kubelet[2589]: I0813 01:00:56.696665 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/b8eb7ae6-f7c7-4789-8cce-a6a4550419c1-kubelet-dir\") pod \"csi-node-driver-6jvvc\" (UID: \"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1\") " pod="calico-system/csi-node-driver-6jvvc" Aug 13 01:00:56.696930 kubelet[2589]: E0813 01:00:56.696916 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.697013 kubelet[2589]: W0813 01:00:56.696932 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.697013 kubelet[2589]: E0813 01:00:56.696950 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.697013 kubelet[2589]: I0813 01:00:56.696972 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/b8eb7ae6-f7c7-4789-8cce-a6a4550419c1-socket-dir\") pod \"csi-node-driver-6jvvc\" (UID: \"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1\") " pod="calico-system/csi-node-driver-6jvvc" Aug 13 01:00:56.697234 kubelet[2589]: E0813 01:00:56.697219 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.697356 kubelet[2589]: W0813 01:00:56.697237 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.697356 kubelet[2589]: E0813 01:00:56.697255 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.697356 kubelet[2589]: I0813 01:00:56.697278 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zkh6z\" (UniqueName: \"kubernetes.io/projected/b8eb7ae6-f7c7-4789-8cce-a6a4550419c1-kube-api-access-zkh6z\") pod \"csi-node-driver-6jvvc\" (UID: \"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1\") " pod="calico-system/csi-node-driver-6jvvc" Aug 13 01:00:56.697712 kubelet[2589]: E0813 01:00:56.697625 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.697712 kubelet[2589]: W0813 01:00:56.697643 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.697712 kubelet[2589]: E0813 01:00:56.697662 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.697712 kubelet[2589]: I0813 01:00:56.697686 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/b8eb7ae6-f7c7-4789-8cce-a6a4550419c1-registration-dir\") pod \"csi-node-driver-6jvvc\" (UID: \"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1\") " pod="calico-system/csi-node-driver-6jvvc" Aug 13 01:00:56.698003 kubelet[2589]: E0813 01:00:56.697931 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.698003 kubelet[2589]: W0813 01:00:56.697943 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.698111 kubelet[2589]: E0813 01:00:56.698034 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.698371 kubelet[2589]: E0813 01:00:56.698167 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.698371 kubelet[2589]: W0813 01:00:56.698178 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.698371 kubelet[2589]: E0813 01:00:56.698267 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.698564 kubelet[2589]: E0813 01:00:56.698400 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.698564 kubelet[2589]: W0813 01:00:56.698410 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.698564 kubelet[2589]: E0813 01:00:56.698512 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.698708 kubelet[2589]: E0813 01:00:56.698647 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.698708 kubelet[2589]: W0813 01:00:56.698657 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.698806 kubelet[2589]: E0813 01:00:56.698744 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.698882 kubelet[2589]: E0813 01:00:56.698868 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.698958 kubelet[2589]: W0813 01:00:56.698883 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.699030 kubelet[2589]: E0813 01:00:56.698969 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.699113 kubelet[2589]: E0813 01:00:56.699100 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.699179 kubelet[2589]: W0813 01:00:56.699114 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.699179 kubelet[2589]: E0813 01:00:56.699127 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.699372 kubelet[2589]: E0813 01:00:56.699346 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.699372 kubelet[2589]: W0813 01:00:56.699361 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.699504 kubelet[2589]: E0813 01:00:56.699373 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.700961 kubelet[2589]: E0813 01:00:56.700941 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.700961 kubelet[2589]: W0813 01:00:56.700961 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.700961 kubelet[2589]: E0813 01:00:56.700976 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.701220 kubelet[2589]: E0813 01:00:56.701201 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.701220 kubelet[2589]: W0813 01:00:56.701218 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.701473 kubelet[2589]: E0813 01:00:56.701231 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.701473 kubelet[2589]: E0813 01:00:56.701467 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.701596 kubelet[2589]: W0813 01:00:56.701478 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.701596 kubelet[2589]: E0813 01:00:56.701524 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.759807 env[1714]: time="2025-08-13T01:00:56.755191794Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-857c6b7ddc-cvqz6,Uid:23169eaa-176e-41f2-a701-0d129b0faadb,Namespace:calico-system,Attempt:0,} returns sandbox id \"6c8e6323b9333f16011bbe1360cd46fa88ad4efbee2007d594dec875c1341f06\"" Aug 13 01:00:56.798245 kubelet[2589]: E0813 01:00:56.798212 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.798245 kubelet[2589]: W0813 01:00:56.798233 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.798245 kubelet[2589]: E0813 01:00:56.798254 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.798518 kubelet[2589]: E0813 01:00:56.798478 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.798518 kubelet[2589]: W0813 01:00:56.798496 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.798518 kubelet[2589]: E0813 01:00:56.798519 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.798776 kubelet[2589]: E0813 01:00:56.798760 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.798776 kubelet[2589]: W0813 01:00:56.798774 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.798871 kubelet[2589]: E0813 01:00:56.798788 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.798995 kubelet[2589]: E0813 01:00:56.798971 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.798995 kubelet[2589]: W0813 01:00:56.798982 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.798995 kubelet[2589]: E0813 01:00:56.798993 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.799191 kubelet[2589]: E0813 01:00:56.799172 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.799191 kubelet[2589]: W0813 01:00:56.799182 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.799191 kubelet[2589]: E0813 01:00:56.799192 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.799457 kubelet[2589]: E0813 01:00:56.799436 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.799457 kubelet[2589]: W0813 01:00:56.799446 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.799457 kubelet[2589]: E0813 01:00:56.799457 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.799675 kubelet[2589]: E0813 01:00:56.799658 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.799675 kubelet[2589]: W0813 01:00:56.799667 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.799759 kubelet[2589]: E0813 01:00:56.799734 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.799842 kubelet[2589]: E0813 01:00:56.799829 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.799842 kubelet[2589]: W0813 01:00:56.799841 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.799918 kubelet[2589]: E0813 01:00:56.799900 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.800008 kubelet[2589]: E0813 01:00:56.799994 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.800008 kubelet[2589]: W0813 01:00:56.800006 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.800077 kubelet[2589]: E0813 01:00:56.800065 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.800167 kubelet[2589]: E0813 01:00:56.800155 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.800167 kubelet[2589]: W0813 01:00:56.800166 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.800236 kubelet[2589]: E0813 01:00:56.800225 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.800324 kubelet[2589]: E0813 01:00:56.800312 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.800324 kubelet[2589]: W0813 01:00:56.800323 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.800404 kubelet[2589]: E0813 01:00:56.800382 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.800504 kubelet[2589]: E0813 01:00:56.800475 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.800504 kubelet[2589]: W0813 01:00:56.800481 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.800557 kubelet[2589]: E0813 01:00:56.800511 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.800788 kubelet[2589]: E0813 01:00:56.800774 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.800788 kubelet[2589]: W0813 01:00:56.800786 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.800876 kubelet[2589]: E0813 01:00:56.800797 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.800999 kubelet[2589]: E0813 01:00:56.800974 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.800999 kubelet[2589]: W0813 01:00:56.800985 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.800999 kubelet[2589]: E0813 01:00:56.800995 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.801170 kubelet[2589]: E0813 01:00:56.801149 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.801170 kubelet[2589]: W0813 01:00:56.801160 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.801236 kubelet[2589]: E0813 01:00:56.801220 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.801334 kubelet[2589]: E0813 01:00:56.801322 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.801334 kubelet[2589]: W0813 01:00:56.801333 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.801405 kubelet[2589]: E0813 01:00:56.801390 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.801510 kubelet[2589]: E0813 01:00:56.801478 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.801734 kubelet[2589]: W0813 01:00:56.801716 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.801883 kubelet[2589]: E0813 01:00:56.801807 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.801932 kubelet[2589]: E0813 01:00:56.801910 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.801932 kubelet[2589]: W0813 01:00:56.801916 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.802024 kubelet[2589]: E0813 01:00:56.802000 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.802113 kubelet[2589]: E0813 01:00:56.802095 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.802113 kubelet[2589]: W0813 01:00:56.802108 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.802190 kubelet[2589]: E0813 01:00:56.802117 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.802328 kubelet[2589]: E0813 01:00:56.802311 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.802328 kubelet[2589]: W0813 01:00:56.802323 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.802399 kubelet[2589]: E0813 01:00:56.802334 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.802561 kubelet[2589]: E0813 01:00:56.802542 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.802561 kubelet[2589]: W0813 01:00:56.802553 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.802642 kubelet[2589]: E0813 01:00:56.802563 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.802740 kubelet[2589]: E0813 01:00:56.802727 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.802740 kubelet[2589]: W0813 01:00:56.802739 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.802812 kubelet[2589]: E0813 01:00:56.802748 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.802941 kubelet[2589]: E0813 01:00:56.802913 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.802941 kubelet[2589]: W0813 01:00:56.802927 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.802941 kubelet[2589]: E0813 01:00:56.802934 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.803128 kubelet[2589]: E0813 01:00:56.803104 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.803128 kubelet[2589]: W0813 01:00:56.803116 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.803128 kubelet[2589]: E0813 01:00:56.803125 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.803901 kubelet[2589]: E0813 01:00:56.803883 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.803901 kubelet[2589]: W0813 01:00:56.803898 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.804002 kubelet[2589]: E0813 01:00:56.803911 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:56.818662 kubelet[2589]: E0813 01:00:56.818626 2589 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 01:00:56.818662 kubelet[2589]: W0813 01:00:56.818653 2589 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 01:00:56.818895 kubelet[2589]: E0813 01:00:56.818679 2589 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 01:00:58.170608 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1131636596.mount: Deactivated successfully. Aug 13 01:00:58.316784 env[1714]: time="2025-08-13T01:00:58.316738663Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:58.320917 env[1714]: time="2025-08-13T01:00:58.320872357Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:58.323767 env[1714]: time="2025-08-13T01:00:58.323729070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:58.326454 env[1714]: time="2025-08-13T01:00:58.326405937Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:00:58.327101 env[1714]: time="2025-08-13T01:00:58.327060924Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Aug 13 01:00:58.336361 env[1714]: time="2025-08-13T01:00:58.333992623Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Aug 13 01:00:58.336361 env[1714]: time="2025-08-13T01:00:58.335907763Z" level=info msg="CreateContainer within sandbox \"cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Aug 13 01:00:58.369175 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4254883994.mount: Deactivated successfully. Aug 13 01:00:58.386071 env[1714]: time="2025-08-13T01:00:58.380830649Z" level=info msg="CreateContainer within sandbox \"cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb\"" Aug 13 01:00:58.386526 env[1714]: time="2025-08-13T01:00:58.386467133Z" level=info msg="StartContainer for \"c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb\"" Aug 13 01:00:58.428854 systemd[1]: Started cri-containerd-c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb.scope. Aug 13 01:00:58.435220 kubelet[2589]: E0813 01:00:58.432169 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f39499fba18 items=0 ppid=3196 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:58.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338303536363065323131623832323134336463363833373861616336 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit: BPF prog-id=138 op=LOAD Aug 13 01:00:58.451000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000179b18 items=0 ppid=3196 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:58.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338303536363065323131623832323134336463363833373861616336 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit: BPF prog-id=139 op=LOAD Aug 13 01:00:58.451000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000179b68 items=0 ppid=3196 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:58.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338303536363065323131623832323134336463363833373861616336 Aug 13 01:00:58.451000 audit: BPF prog-id=139 op=UNLOAD Aug 13 01:00:58.451000 audit: BPF prog-id=138 op=UNLOAD Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:00:58.451000 audit: BPF prog-id=140 op=LOAD Aug 13 01:00:58.451000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000179bf8 items=0 ppid=3196 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:00:58.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338303536363065323131623832323134336463363833373861616336 Aug 13 01:00:58.472705 env[1714]: time="2025-08-13T01:00:58.472652792Z" level=info msg="StartContainer for \"c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb\" returns successfully" Aug 13 01:00:58.490511 systemd[1]: cri-containerd-c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb.scope: Deactivated successfully. Aug 13 01:00:58.494000 audit: BPF prog-id=140 op=UNLOAD Aug 13 01:00:58.562378 env[1714]: time="2025-08-13T01:00:58.562321822Z" level=info msg="shim disconnected" id=c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb Aug 13 01:00:58.562378 env[1714]: time="2025-08-13T01:00:58.562366294Z" level=warning msg="cleaning up after shim disconnected" id=c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb namespace=k8s.io Aug 13 01:00:58.562378 env[1714]: time="2025-08-13T01:00:58.562375889Z" level=info msg="cleaning up dead shim" Aug 13 01:00:58.571908 env[1714]: time="2025-08-13T01:00:58.571856439Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:00:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3348 runtime=io.containerd.runc.v2\n" Aug 13 01:00:59.118502 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c805660e211b822143dc68378aac64f029a6ba67960ac5ad01075ad749ffd8cb-rootfs.mount: Deactivated successfully. Aug 13 01:00:59.605982 amazon-ssm-agent[1694]: 2025-08-13 01:00:59 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Aug 13 01:01:00.432980 kubelet[2589]: E0813 01:01:00.432571 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:01.300450 env[1714]: time="2025-08-13T01:01:01.300398086Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:01.324787 env[1714]: time="2025-08-13T01:01:01.324642993Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:01.353191 env[1714]: time="2025-08-13T01:01:01.353126418Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:01.358742 env[1714]: time="2025-08-13T01:01:01.358315658Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:01.359246 env[1714]: time="2025-08-13T01:01:01.359066590Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Aug 13 01:01:01.491057 env[1714]: time="2025-08-13T01:01:01.490427759Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Aug 13 01:01:01.525525 kubelet[2589]: E0813 01:01:01.491859 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:01.636551 env[1714]: time="2025-08-13T01:01:01.635730585Z" level=info msg="CreateContainer within sandbox \"6c8e6323b9333f16011bbe1360cd46fa88ad4efbee2007d594dec875c1341f06\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Aug 13 01:01:01.753017 env[1714]: time="2025-08-13T01:01:01.752792085Z" level=info msg="CreateContainer within sandbox \"6c8e6323b9333f16011bbe1360cd46fa88ad4efbee2007d594dec875c1341f06\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"ee6eed6a1cf059fb17debc8286644216d0eea0a130de7649cbc327b5f3bca4ad\"" Aug 13 01:01:01.756696 env[1714]: time="2025-08-13T01:01:01.756645369Z" level=info msg="StartContainer for \"ee6eed6a1cf059fb17debc8286644216d0eea0a130de7649cbc327b5f3bca4ad\"" Aug 13 01:01:01.891867 systemd[1]: Started cri-containerd-ee6eed6a1cf059fb17debc8286644216d0eea0a130de7649cbc327b5f3bca4ad.scope. Aug 13 01:01:02.009111 kernel: kauditd_printk_skb: 154 callbacks suppressed Aug 13 01:01:02.009277 kernel: audit: type=1400 audit(1755046861.992:1066): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.035541 kernel: audit: type=1400 audit(1755046861.992:1067): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.053323 kernel: audit: type=1400 audit(1755046861.992:1068): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.074653 kernel: audit: type=1400 audit(1755046861.992:1069): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.074814 kernel: audit: type=1400 audit(1755046861.992:1070): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.116330 kernel: audit: type=1400 audit(1755046861.992:1071): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.116947 kernel: audit: type=1400 audit(1755046861.992:1072): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.158602 kernel: audit: type=1400 audit(1755046861.992:1073): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:01.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.182516 kernel: audit: type=1400 audit(1755046861.992:1074): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.213507 kernel: audit: type=1400 audit(1755046862.009:1075): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.009000 audit: BPF prog-id=141 op=LOAD Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3166 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:02.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565366565643661316366303539666231376465626338323836363434 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3166 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:02.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565366565643661316366303539666231376465626338323836363434 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.016000 audit: BPF prog-id=142 op=LOAD Aug 13 01:01:02.016000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c8b00 items=0 ppid=3166 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:02.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565366565643661316366303539666231376465626338323836363434 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit: BPF prog-id=143 op=LOAD Aug 13 01:01:02.017000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c8b48 items=0 ppid=3166 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:02.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565366565643661316366303539666231376465626338323836363434 Aug 13 01:01:02.017000 audit: BPF prog-id=143 op=UNLOAD Aug 13 01:01:02.017000 audit: BPF prog-id=142 op=UNLOAD Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:02.017000 audit: BPF prog-id=144 op=LOAD Aug 13 01:01:02.017000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c8f58 items=0 ppid=3166 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:02.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565366565643661316366303539666231376465626338323836363434 Aug 13 01:01:02.276825 env[1714]: time="2025-08-13T01:01:02.276401793Z" level=info msg="StartContainer for \"ee6eed6a1cf059fb17debc8286644216d0eea0a130de7649cbc327b5f3bca4ad\" returns successfully" Aug 13 01:01:02.468213 systemd[1]: run-containerd-runc-k8s.io-ee6eed6a1cf059fb17debc8286644216d0eea0a130de7649cbc327b5f3bca4ad-runc.pFHTOk.mount: Deactivated successfully. Aug 13 01:01:03.440339 kubelet[2589]: E0813 01:01:03.440287 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:03.631863 kubelet[2589]: I0813 01:01:03.631827 2589 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:01:05.433737 kubelet[2589]: E0813 01:01:05.433690 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:07.433219 kubelet[2589]: E0813 01:01:07.432904 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:09.434084 kubelet[2589]: E0813 01:01:09.434029 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:10.339033 env[1714]: time="2025-08-13T01:01:10.338977337Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:10.340976 env[1714]: time="2025-08-13T01:01:10.340936234Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:10.342871 env[1714]: time="2025-08-13T01:01:10.342827839Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:10.344561 env[1714]: time="2025-08-13T01:01:10.344522317Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:10.345253 env[1714]: time="2025-08-13T01:01:10.345203700Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Aug 13 01:01:10.350391 env[1714]: time="2025-08-13T01:01:10.350353071Z" level=info msg="CreateContainer within sandbox \"cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Aug 13 01:01:10.366859 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1286494468.mount: Deactivated successfully. Aug 13 01:01:10.374823 env[1714]: time="2025-08-13T01:01:10.374759153Z" level=info msg="CreateContainer within sandbox \"cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749\"" Aug 13 01:01:10.376954 env[1714]: time="2025-08-13T01:01:10.376623913Z" level=info msg="StartContainer for \"d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749\"" Aug 13 01:01:10.414222 systemd[1]: run-containerd-runc-k8s.io-d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749-runc.83zKSg.mount: Deactivated successfully. Aug 13 01:01:10.418239 systemd[1]: Started cri-containerd-d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749.scope. Aug 13 01:01:10.455818 kernel: kauditd_printk_skb: 47 callbacks suppressed Aug 13 01:01:10.456014 kernel: audit: type=1400 audit(1755046870.445:1084): avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.466721 kernel: audit: type=1300 audit(1755046870.445:1084): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f623914a358 items=0 ppid=3196 pid=3414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:10.445000 audit[3414]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f623914a358 items=0 ppid=3196 pid=3414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:10.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333936396566373735333664343936393334303466326438666162 Aug 13 01:01:10.475789 kernel: audit: type=1327 audit(1755046870.445:1084): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333936396566373735333664343936393334303466326438666162 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.488567 kernel: audit: type=1400 audit(1755046870.445:1085): avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.488764 kernel: audit: type=1400 audit(1755046870.445:1085): avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.513592 kernel: audit: type=1400 audit(1755046870.445:1085): avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.513713 kernel: audit: type=1400 audit(1755046870.445:1085): avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.522061 kernel: audit: type=1400 audit(1755046870.445:1085): avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.535880 kernel: audit: type=1400 audit(1755046870.445:1085): avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.535965 kernel: audit: type=1400 audit(1755046870.445:1085): avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.445000 audit: BPF prog-id=145 op=LOAD Aug 13 01:01:10.445000 audit[3414]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00027fa38 items=0 ppid=3196 pid=3414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:10.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333936396566373735333664343936393334303466326438666162 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit: BPF prog-id=146 op=LOAD Aug 13 01:01:10.454000 audit[3414]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00027fa88 items=0 ppid=3196 pid=3414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:10.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333936396566373735333664343936393334303466326438666162 Aug 13 01:01:10.454000 audit: BPF prog-id=146 op=UNLOAD Aug 13 01:01:10.454000 audit: BPF prog-id=145 op=UNLOAD Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { perfmon } for pid=3414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit[3414]: AVC avc: denied { bpf } for pid=3414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:10.454000 audit: BPF prog-id=147 op=LOAD Aug 13 01:01:10.454000 audit[3414]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00027fb18 items=0 ppid=3196 pid=3414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:10.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333936396566373735333664343936393334303466326438666162 Aug 13 01:01:10.551951 env[1714]: time="2025-08-13T01:01:10.551885013Z" level=info msg="StartContainer for \"d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749\" returns successfully" Aug 13 01:01:10.692253 kubelet[2589]: I0813 01:01:10.692083 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-857c6b7ddc-cvqz6" podStartSLOduration=11.082750243 podStartE2EDuration="15.692054921s" podCreationTimestamp="2025-08-13 01:00:55 +0000 UTC" firstStartedPulling="2025-08-13 01:00:56.76151681 +0000 UTC m=+19.553743463" lastFinishedPulling="2025-08-13 01:01:01.370821491 +0000 UTC m=+24.163048141" observedRunningTime="2025-08-13 01:01:02.695829242 +0000 UTC m=+25.488055902" watchObservedRunningTime="2025-08-13 01:01:10.692054921 +0000 UTC m=+33.484281581" Aug 13 01:01:11.434067 kubelet[2589]: E0813 01:01:11.434010 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:11.450401 env[1714]: time="2025-08-13T01:01:11.450336103Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 01:01:11.453777 systemd[1]: cri-containerd-d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749.scope: Deactivated successfully. Aug 13 01:01:11.456000 audit: BPF prog-id=147 op=UNLOAD Aug 13 01:01:11.485727 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749-rootfs.mount: Deactivated successfully. Aug 13 01:01:11.497463 env[1714]: time="2025-08-13T01:01:11.497405714Z" level=info msg="shim disconnected" id=d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749 Aug 13 01:01:11.497463 env[1714]: time="2025-08-13T01:01:11.497459783Z" level=warning msg="cleaning up after shim disconnected" id=d63969ef77536d49693404f2d8fab60020b350790fba74723f2bec4320dae749 namespace=k8s.io Aug 13 01:01:11.497463 env[1714]: time="2025-08-13T01:01:11.497473377Z" level=info msg="cleaning up dead shim" Aug 13 01:01:11.507432 env[1714]: time="2025-08-13T01:01:11.507387174Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:01:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3456 runtime=io.containerd.runc.v2\n" Aug 13 01:01:11.546084 kubelet[2589]: I0813 01:01:11.545937 2589 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Aug 13 01:01:11.622577 systemd[1]: Created slice kubepods-burstable-poda42dde36_77be_4d3c_9660_9471372fa9f3.slice. Aug 13 01:01:11.633804 kubelet[2589]: W0813 01:01:11.630952 2589 reflector.go:561] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-17-234" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-17-234' and this object Aug 13 01:01:11.633804 kubelet[2589]: E0813 01:01:11.631026 2589 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"calico-apiserver-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:ip-172-31-17-234\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ip-172-31-17-234' and this object" logger="UnhandledError" Aug 13 01:01:11.638430 systemd[1]: Created slice kubepods-besteffort-pod1b35ace9_10fb_4507_aa56_59cb685fb902.slice. Aug 13 01:01:11.650388 systemd[1]: Created slice kubepods-besteffort-pod209fc8a0_729c_4aee_bbdd_8adc41725a94.slice. Aug 13 01:01:11.657277 systemd[1]: Created slice kubepods-besteffort-pod0285aa98_0d0d_45d0_9ddd_b0347bbd6a54.slice. Aug 13 01:01:11.666872 systemd[1]: Created slice kubepods-burstable-podd8889dc4_f418_48a4_9d9a_eba6c73b2145.slice. Aug 13 01:01:11.674320 env[1714]: time="2025-08-13T01:01:11.672437744Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Aug 13 01:01:11.685457 systemd[1]: Created slice kubepods-besteffort-poda524319c_5d30_44a0_a41e_3169292765bb.slice. Aug 13 01:01:11.711978 systemd[1]: Created slice kubepods-besteffort-podfd0a9d27_2ec4_4c57_81af_fe6b91808fba.slice. Aug 13 01:01:11.777848 kubelet[2589]: I0813 01:01:11.777793 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0285aa98-0d0d-45d0-9ddd-b0347bbd6a54-tigera-ca-bundle\") pod \"calico-kube-controllers-54f7bf87dc-k7mns\" (UID: \"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54\") " pod="calico-system/calico-kube-controllers-54f7bf87dc-k7mns" Aug 13 01:01:11.777848 kubelet[2589]: I0813 01:01:11.777850 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-ca-bundle\") pod \"whisker-67d4d6876-njm4k\" (UID: \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\") " pod="calico-system/whisker-67d4d6876-njm4k" Aug 13 01:01:11.778387 kubelet[2589]: I0813 01:01:11.777901 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/d8889dc4-f418-48a4-9d9a-eba6c73b2145-config-volume\") pod \"coredns-7c65d6cfc9-mdb6c\" (UID: \"d8889dc4-f418-48a4-9d9a-eba6c73b2145\") " pod="kube-system/coredns-7c65d6cfc9-mdb6c" Aug 13 01:01:11.778387 kubelet[2589]: I0813 01:01:11.777928 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kzzpw\" (UniqueName: \"kubernetes.io/projected/d8889dc4-f418-48a4-9d9a-eba6c73b2145-kube-api-access-kzzpw\") pod \"coredns-7c65d6cfc9-mdb6c\" (UID: \"d8889dc4-f418-48a4-9d9a-eba6c73b2145\") " pod="kube-system/coredns-7c65d6cfc9-mdb6c" Aug 13 01:01:11.778387 kubelet[2589]: I0813 01:01:11.777951 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a42dde36-77be-4d3c-9660-9471372fa9f3-config-volume\") pod \"coredns-7c65d6cfc9-gcpkq\" (UID: \"a42dde36-77be-4d3c-9660-9471372fa9f3\") " pod="kube-system/coredns-7c65d6cfc9-gcpkq" Aug 13 01:01:11.778387 kubelet[2589]: I0813 01:01:11.777996 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8q7mx\" (UniqueName: \"kubernetes.io/projected/a524319c-5d30-44a0-a41e-3169292765bb-kube-api-access-8q7mx\") pod \"goldmane-58fd7646b9-g29zb\" (UID: \"a524319c-5d30-44a0-a41e-3169292765bb\") " pod="calico-system/goldmane-58fd7646b9-g29zb" Aug 13 01:01:11.778387 kubelet[2589]: I0813 01:01:11.778026 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9zrfb\" (UniqueName: \"kubernetes.io/projected/209fc8a0-729c-4aee-bbdd-8adc41725a94-kube-api-access-9zrfb\") pod \"calico-apiserver-5d6885cd44-tftgx\" (UID: \"209fc8a0-729c-4aee-bbdd-8adc41725a94\") " pod="calico-apiserver/calico-apiserver-5d6885cd44-tftgx" Aug 13 01:01:11.778661 kubelet[2589]: I0813 01:01:11.778049 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1b35ace9-10fb-4507-aa56-59cb685fb902-calico-apiserver-certs\") pod \"calico-apiserver-5d6885cd44-m24jr\" (UID: \"1b35ace9-10fb-4507-aa56-59cb685fb902\") " pod="calico-apiserver/calico-apiserver-5d6885cd44-m24jr" Aug 13 01:01:11.778661 kubelet[2589]: I0813 01:01:11.778077 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jj692\" (UniqueName: \"kubernetes.io/projected/1b35ace9-10fb-4507-aa56-59cb685fb902-kube-api-access-jj692\") pod \"calico-apiserver-5d6885cd44-m24jr\" (UID: \"1b35ace9-10fb-4507-aa56-59cb685fb902\") " pod="calico-apiserver/calico-apiserver-5d6885cd44-m24jr" Aug 13 01:01:11.778661 kubelet[2589]: I0813 01:01:11.778106 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dd94b\" (UniqueName: \"kubernetes.io/projected/a42dde36-77be-4d3c-9660-9471372fa9f3-kube-api-access-dd94b\") pod \"coredns-7c65d6cfc9-gcpkq\" (UID: \"a42dde36-77be-4d3c-9660-9471372fa9f3\") " pod="kube-system/coredns-7c65d6cfc9-gcpkq" Aug 13 01:01:11.778661 kubelet[2589]: I0813 01:01:11.778132 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-backend-key-pair\") pod \"whisker-67d4d6876-njm4k\" (UID: \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\") " pod="calico-system/whisker-67d4d6876-njm4k" Aug 13 01:01:11.778661 kubelet[2589]: I0813 01:01:11.778164 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a524319c-5d30-44a0-a41e-3169292765bb-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-g29zb\" (UID: \"a524319c-5d30-44a0-a41e-3169292765bb\") " pod="calico-system/goldmane-58fd7646b9-g29zb" Aug 13 01:01:11.778911 kubelet[2589]: I0813 01:01:11.778188 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/209fc8a0-729c-4aee-bbdd-8adc41725a94-calico-apiserver-certs\") pod \"calico-apiserver-5d6885cd44-tftgx\" (UID: \"209fc8a0-729c-4aee-bbdd-8adc41725a94\") " pod="calico-apiserver/calico-apiserver-5d6885cd44-tftgx" Aug 13 01:01:11.778911 kubelet[2589]: I0813 01:01:11.778238 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/a524319c-5d30-44a0-a41e-3169292765bb-goldmane-key-pair\") pod \"goldmane-58fd7646b9-g29zb\" (UID: \"a524319c-5d30-44a0-a41e-3169292765bb\") " pod="calico-system/goldmane-58fd7646b9-g29zb" Aug 13 01:01:11.778911 kubelet[2589]: I0813 01:01:11.778277 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zn4v8\" (UniqueName: \"kubernetes.io/projected/0285aa98-0d0d-45d0-9ddd-b0347bbd6a54-kube-api-access-zn4v8\") pod \"calico-kube-controllers-54f7bf87dc-k7mns\" (UID: \"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54\") " pod="calico-system/calico-kube-controllers-54f7bf87dc-k7mns" Aug 13 01:01:11.778911 kubelet[2589]: I0813 01:01:11.778302 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/a524319c-5d30-44a0-a41e-3169292765bb-config\") pod \"goldmane-58fd7646b9-g29zb\" (UID: \"a524319c-5d30-44a0-a41e-3169292765bb\") " pod="calico-system/goldmane-58fd7646b9-g29zb" Aug 13 01:01:11.778911 kubelet[2589]: I0813 01:01:11.778325 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-stzkh\" (UniqueName: \"kubernetes.io/projected/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-kube-api-access-stzkh\") pod \"whisker-67d4d6876-njm4k\" (UID: \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\") " pod="calico-system/whisker-67d4d6876-njm4k" Aug 13 01:01:11.957019 env[1714]: time="2025-08-13T01:01:11.956908294Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gcpkq,Uid:a42dde36-77be-4d3c-9660-9471372fa9f3,Namespace:kube-system,Attempt:0,}" Aug 13 01:01:11.965861 env[1714]: time="2025-08-13T01:01:11.965811300Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54f7bf87dc-k7mns,Uid:0285aa98-0d0d-45d0-9ddd-b0347bbd6a54,Namespace:calico-system,Attempt:0,}" Aug 13 01:01:11.985945 env[1714]: time="2025-08-13T01:01:11.985885583Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mdb6c,Uid:d8889dc4-f418-48a4-9d9a-eba6c73b2145,Namespace:kube-system,Attempt:0,}" Aug 13 01:01:12.008867 env[1714]: time="2025-08-13T01:01:12.008817435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-g29zb,Uid:a524319c-5d30-44a0-a41e-3169292765bb,Namespace:calico-system,Attempt:0,}" Aug 13 01:01:12.016863 env[1714]: time="2025-08-13T01:01:12.016818517Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-67d4d6876-njm4k,Uid:fd0a9d27-2ec4-4c57-81af-fe6b91808fba,Namespace:calico-system,Attempt:0,}" Aug 13 01:01:12.368364 env[1714]: time="2025-08-13T01:01:12.368282627Z" level=error msg="Failed to destroy network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.369107 env[1714]: time="2025-08-13T01:01:12.369054448Z" level=error msg="encountered an error cleaning up failed sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.369384 env[1714]: time="2025-08-13T01:01:12.369283575Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54f7bf87dc-k7mns,Uid:0285aa98-0d0d-45d0-9ddd-b0347bbd6a54,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.373462 kubelet[2589]: E0813 01:01:12.369796 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.375636 kubelet[2589]: E0813 01:01:12.373411 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-54f7bf87dc-k7mns" Aug 13 01:01:12.375636 kubelet[2589]: E0813 01:01:12.375404 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-54f7bf87dc-k7mns" Aug 13 01:01:12.375636 kubelet[2589]: E0813 01:01:12.375575 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-54f7bf87dc-k7mns_calico-system(0285aa98-0d0d-45d0-9ddd-b0347bbd6a54)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-54f7bf87dc-k7mns_calico-system(0285aa98-0d0d-45d0-9ddd-b0347bbd6a54)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-54f7bf87dc-k7mns" podUID="0285aa98-0d0d-45d0-9ddd-b0347bbd6a54" Aug 13 01:01:12.415375 env[1714]: time="2025-08-13T01:01:12.415310309Z" level=error msg="Failed to destroy network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.415756 env[1714]: time="2025-08-13T01:01:12.415720076Z" level=error msg="encountered an error cleaning up failed sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.415860 env[1714]: time="2025-08-13T01:01:12.415789320Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gcpkq,Uid:a42dde36-77be-4d3c-9660-9471372fa9f3,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.416726 kubelet[2589]: E0813 01:01:12.416096 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.416726 kubelet[2589]: E0813 01:01:12.416243 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-gcpkq" Aug 13 01:01:12.416726 kubelet[2589]: E0813 01:01:12.416270 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-gcpkq" Aug 13 01:01:12.417032 kubelet[2589]: E0813 01:01:12.416336 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-gcpkq_kube-system(a42dde36-77be-4d3c-9660-9471372fa9f3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-gcpkq_kube-system(a42dde36-77be-4d3c-9660-9471372fa9f3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-gcpkq" podUID="a42dde36-77be-4d3c-9660-9471372fa9f3" Aug 13 01:01:12.423666 env[1714]: time="2025-08-13T01:01:12.423595460Z" level=error msg="Failed to destroy network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.424011 env[1714]: time="2025-08-13T01:01:12.423962342Z" level=error msg="encountered an error cleaning up failed sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.424105 env[1714]: time="2025-08-13T01:01:12.424027577Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-g29zb,Uid:a524319c-5d30-44a0-a41e-3169292765bb,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.425553 kubelet[2589]: E0813 01:01:12.424319 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.425553 kubelet[2589]: E0813 01:01:12.424389 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-g29zb" Aug 13 01:01:12.425553 kubelet[2589]: E0813 01:01:12.424415 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-g29zb" Aug 13 01:01:12.425897 kubelet[2589]: E0813 01:01:12.424463 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-g29zb_calico-system(a524319c-5d30-44a0-a41e-3169292765bb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-g29zb_calico-system(a524319c-5d30-44a0-a41e-3169292765bb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-g29zb" podUID="a524319c-5d30-44a0-a41e-3169292765bb" Aug 13 01:01:12.433797 env[1714]: time="2025-08-13T01:01:12.433642052Z" level=error msg="Failed to destroy network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.434442 env[1714]: time="2025-08-13T01:01:12.434386107Z" level=error msg="encountered an error cleaning up failed sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.434656 env[1714]: time="2025-08-13T01:01:12.434615895Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mdb6c,Uid:d8889dc4-f418-48a4-9d9a-eba6c73b2145,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.434902 env[1714]: time="2025-08-13T01:01:12.434795640Z" level=error msg="Failed to destroy network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.435148 kubelet[2589]: E0813 01:01:12.435085 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.435242 kubelet[2589]: E0813 01:01:12.435156 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-mdb6c" Aug 13 01:01:12.435242 kubelet[2589]: E0813 01:01:12.435186 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-mdb6c" Aug 13 01:01:12.435328 kubelet[2589]: E0813 01:01:12.435239 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-mdb6c_kube-system(d8889dc4-f418-48a4-9d9a-eba6c73b2145)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-mdb6c_kube-system(d8889dc4-f418-48a4-9d9a-eba6c73b2145)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-mdb6c" podUID="d8889dc4-f418-48a4-9d9a-eba6c73b2145" Aug 13 01:01:12.436067 env[1714]: time="2025-08-13T01:01:12.436030291Z" level=error msg="encountered an error cleaning up failed sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.436287 env[1714]: time="2025-08-13T01:01:12.436224316Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-67d4d6876-njm4k,Uid:fd0a9d27-2ec4-4c57-81af-fe6b91808fba,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.436841 kubelet[2589]: E0813 01:01:12.436627 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.436841 kubelet[2589]: E0813 01:01:12.436694 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-67d4d6876-njm4k" Aug 13 01:01:12.437066 kubelet[2589]: E0813 01:01:12.436718 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-67d4d6876-njm4k" Aug 13 01:01:12.437182 kubelet[2589]: E0813 01:01:12.437117 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-67d4d6876-njm4k_calico-system(fd0a9d27-2ec4-4c57-81af-fe6b91808fba)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-67d4d6876-njm4k_calico-system(fd0a9d27-2ec4-4c57-81af-fe6b91808fba)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-67d4d6876-njm4k" podUID="fd0a9d27-2ec4-4c57-81af-fe6b91808fba" Aug 13 01:01:12.666585 kubelet[2589]: I0813 01:01:12.664584 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:12.666585 kubelet[2589]: I0813 01:01:12.666072 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:12.681038 kubelet[2589]: I0813 01:01:12.681005 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:12.682881 kubelet[2589]: I0813 01:01:12.682841 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:12.684289 env[1714]: time="2025-08-13T01:01:12.683459899Z" level=info msg="StopPodSandbox for \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\"" Aug 13 01:01:12.684289 env[1714]: time="2025-08-13T01:01:12.684024385Z" level=info msg="StopPodSandbox for \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\"" Aug 13 01:01:12.684839 env[1714]: time="2025-08-13T01:01:12.684415834Z" level=info msg="StopPodSandbox for \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\"" Aug 13 01:01:12.684904 env[1714]: time="2025-08-13T01:01:12.684841627Z" level=info msg="StopPodSandbox for \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\"" Aug 13 01:01:12.689405 kubelet[2589]: I0813 01:01:12.689047 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:12.692851 env[1714]: time="2025-08-13T01:01:12.692810316Z" level=info msg="StopPodSandbox for \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\"" Aug 13 01:01:12.787809 env[1714]: time="2025-08-13T01:01:12.787743140Z" level=error msg="StopPodSandbox for \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\" failed" error="failed to destroy network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.788031 kubelet[2589]: E0813 01:01:12.787993 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:12.789978 kubelet[2589]: E0813 01:01:12.788068 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d"} Aug 13 01:01:12.790101 kubelet[2589]: E0813 01:01:12.790024 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:12.790101 kubelet[2589]: E0813 01:01:12.790060 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-67d4d6876-njm4k" podUID="fd0a9d27-2ec4-4c57-81af-fe6b91808fba" Aug 13 01:01:12.791656 env[1714]: time="2025-08-13T01:01:12.791593838Z" level=error msg="StopPodSandbox for \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\" failed" error="failed to destroy network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.793828 kubelet[2589]: E0813 01:01:12.791845 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:12.793828 kubelet[2589]: E0813 01:01:12.791893 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1"} Aug 13 01:01:12.793828 kubelet[2589]: E0813 01:01:12.791940 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:12.793828 kubelet[2589]: E0813 01:01:12.791972 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-54f7bf87dc-k7mns" podUID="0285aa98-0d0d-45d0-9ddd-b0347bbd6a54" Aug 13 01:01:12.816038 env[1714]: time="2025-08-13T01:01:12.815972707Z" level=error msg="StopPodSandbox for \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\" failed" error="failed to destroy network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.816314 kubelet[2589]: E0813 01:01:12.816253 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:12.816507 kubelet[2589]: E0813 01:01:12.816324 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e"} Aug 13 01:01:12.816507 kubelet[2589]: E0813 01:01:12.816368 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d8889dc4-f418-48a4-9d9a-eba6c73b2145\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:12.816507 kubelet[2589]: E0813 01:01:12.816403 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d8889dc4-f418-48a4-9d9a-eba6c73b2145\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-mdb6c" podUID="d8889dc4-f418-48a4-9d9a-eba6c73b2145" Aug 13 01:01:12.818712 env[1714]: time="2025-08-13T01:01:12.818651804Z" level=error msg="StopPodSandbox for \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\" failed" error="failed to destroy network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.819223 kubelet[2589]: E0813 01:01:12.818959 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:12.819223 kubelet[2589]: E0813 01:01:12.819016 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183"} Aug 13 01:01:12.819223 kubelet[2589]: E0813 01:01:12.819147 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a524319c-5d30-44a0-a41e-3169292765bb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:12.819223 kubelet[2589]: E0813 01:01:12.819177 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a524319c-5d30-44a0-a41e-3169292765bb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-g29zb" podUID="a524319c-5d30-44a0-a41e-3169292765bb" Aug 13 01:01:12.834418 env[1714]: time="2025-08-13T01:01:12.834366316Z" level=error msg="StopPodSandbox for \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\" failed" error="failed to destroy network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:12.834822 kubelet[2589]: E0813 01:01:12.834779 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:12.834968 kubelet[2589]: E0813 01:01:12.834833 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8"} Aug 13 01:01:12.834968 kubelet[2589]: E0813 01:01:12.834880 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a42dde36-77be-4d3c-9660-9471372fa9f3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:12.834968 kubelet[2589]: E0813 01:01:12.834911 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a42dde36-77be-4d3c-9660-9471372fa9f3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-gcpkq" podUID="a42dde36-77be-4d3c-9660-9471372fa9f3" Aug 13 01:01:12.885688 kubelet[2589]: E0813 01:01:12.885505 2589 secret.go:189] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Aug 13 01:01:12.885688 kubelet[2589]: E0813 01:01:12.885646 2589 secret.go:189] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Aug 13 01:01:12.890964 kubelet[2589]: E0813 01:01:12.890866 2589 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/209fc8a0-729c-4aee-bbdd-8adc41725a94-calico-apiserver-certs podName:209fc8a0-729c-4aee-bbdd-8adc41725a94 nodeName:}" failed. No retries permitted until 2025-08-13 01:01:13.385577172 +0000 UTC m=+36.177803808 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/209fc8a0-729c-4aee-bbdd-8adc41725a94-calico-apiserver-certs") pod "calico-apiserver-5d6885cd44-tftgx" (UID: "209fc8a0-729c-4aee-bbdd-8adc41725a94") : failed to sync secret cache: timed out waiting for the condition Aug 13 01:01:12.890964 kubelet[2589]: E0813 01:01:12.890906 2589 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/1b35ace9-10fb-4507-aa56-59cb685fb902-calico-apiserver-certs podName:1b35ace9-10fb-4507-aa56-59cb685fb902 nodeName:}" failed. No retries permitted until 2025-08-13 01:01:13.390895811 +0000 UTC m=+36.183122448 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/1b35ace9-10fb-4507-aa56-59cb685fb902-calico-apiserver-certs") pod "calico-apiserver-5d6885cd44-m24jr" (UID: "1b35ace9-10fb-4507-aa56-59cb685fb902") : failed to sync secret cache: timed out waiting for the condition Aug 13 01:01:13.447999 env[1714]: time="2025-08-13T01:01:13.447952777Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-m24jr,Uid:1b35ace9-10fb-4507-aa56-59cb685fb902,Namespace:calico-apiserver,Attempt:0,}" Aug 13 01:01:13.459972 systemd[1]: Created slice kubepods-besteffort-podb8eb7ae6_f7c7_4789_8cce_a6a4550419c1.slice. Aug 13 01:01:13.462851 env[1714]: time="2025-08-13T01:01:13.462811083Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-tftgx,Uid:209fc8a0-729c-4aee-bbdd-8adc41725a94,Namespace:calico-apiserver,Attempt:0,}" Aug 13 01:01:13.467040 env[1714]: time="2025-08-13T01:01:13.466981802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6jvvc,Uid:b8eb7ae6-f7c7-4789-8cce-a6a4550419c1,Namespace:calico-system,Attempt:0,}" Aug 13 01:01:13.690257 env[1714]: time="2025-08-13T01:01:13.690197804Z" level=error msg="Failed to destroy network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.690788 env[1714]: time="2025-08-13T01:01:13.690625969Z" level=error msg="encountered an error cleaning up failed sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.690788 env[1714]: time="2025-08-13T01:01:13.690700632Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-m24jr,Uid:1b35ace9-10fb-4507-aa56-59cb685fb902,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.692118 kubelet[2589]: E0813 01:01:13.691437 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.692118 kubelet[2589]: E0813 01:01:13.691581 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5d6885cd44-m24jr" Aug 13 01:01:13.692118 kubelet[2589]: E0813 01:01:13.691614 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5d6885cd44-m24jr" Aug 13 01:01:13.692920 kubelet[2589]: E0813 01:01:13.691703 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5d6885cd44-m24jr_calico-apiserver(1b35ace9-10fb-4507-aa56-59cb685fb902)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5d6885cd44-m24jr_calico-apiserver(1b35ace9-10fb-4507-aa56-59cb685fb902)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5d6885cd44-m24jr" podUID="1b35ace9-10fb-4507-aa56-59cb685fb902" Aug 13 01:01:13.695799 kubelet[2589]: I0813 01:01:13.695302 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:13.696101 env[1714]: time="2025-08-13T01:01:13.696070655Z" level=info msg="StopPodSandbox for \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\"" Aug 13 01:01:13.719222 env[1714]: time="2025-08-13T01:01:13.719072780Z" level=error msg="Failed to destroy network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.720104 env[1714]: time="2025-08-13T01:01:13.720046514Z" level=error msg="encountered an error cleaning up failed sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.720216 env[1714]: time="2025-08-13T01:01:13.720143132Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6jvvc,Uid:b8eb7ae6-f7c7-4789-8cce-a6a4550419c1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.728002 kubelet[2589]: E0813 01:01:13.720399 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.728002 kubelet[2589]: E0813 01:01:13.720482 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-6jvvc" Aug 13 01:01:13.728002 kubelet[2589]: E0813 01:01:13.720552 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-6jvvc" Aug 13 01:01:13.728439 kubelet[2589]: E0813 01:01:13.720631 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-6jvvc_calico-system(b8eb7ae6-f7c7-4789-8cce-a6a4550419c1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-6jvvc_calico-system(b8eb7ae6-f7c7-4789-8cce-a6a4550419c1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:13.760742 env[1714]: time="2025-08-13T01:01:13.760662639Z" level=error msg="Failed to destroy network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.761316 env[1714]: time="2025-08-13T01:01:13.761267885Z" level=error msg="encountered an error cleaning up failed sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.762993 env[1714]: time="2025-08-13T01:01:13.761476005Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-tftgx,Uid:209fc8a0-729c-4aee-bbdd-8adc41725a94,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.763194 kubelet[2589]: E0813 01:01:13.761738 2589 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.763194 kubelet[2589]: E0813 01:01:13.761815 2589 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5d6885cd44-tftgx" Aug 13 01:01:13.763194 kubelet[2589]: E0813 01:01:13.761843 2589 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5d6885cd44-tftgx" Aug 13 01:01:13.763378 kubelet[2589]: E0813 01:01:13.761903 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5d6885cd44-tftgx_calico-apiserver(209fc8a0-729c-4aee-bbdd-8adc41725a94)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5d6885cd44-tftgx_calico-apiserver(209fc8a0-729c-4aee-bbdd-8adc41725a94)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5d6885cd44-tftgx" podUID="209fc8a0-729c-4aee-bbdd-8adc41725a94" Aug 13 01:01:13.812518 env[1714]: time="2025-08-13T01:01:13.812440216Z" level=error msg="StopPodSandbox for \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\" failed" error="failed to destroy network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:13.812772 kubelet[2589]: E0813 01:01:13.812726 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:13.813109 kubelet[2589]: E0813 01:01:13.812791 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37"} Aug 13 01:01:13.813109 kubelet[2589]: E0813 01:01:13.812842 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1b35ace9-10fb-4507-aa56-59cb685fb902\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:13.813109 kubelet[2589]: E0813 01:01:13.812875 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1b35ace9-10fb-4507-aa56-59cb685fb902\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5d6885cd44-m24jr" podUID="1b35ace9-10fb-4507-aa56-59cb685fb902" Aug 13 01:01:14.488407 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1-shm.mount: Deactivated successfully. Aug 13 01:01:14.488565 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c-shm.mount: Deactivated successfully. Aug 13 01:01:14.488651 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37-shm.mount: Deactivated successfully. Aug 13 01:01:14.741236 kubelet[2589]: I0813 01:01:14.740745 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:14.745093 env[1714]: time="2025-08-13T01:01:14.744729734Z" level=info msg="StopPodSandbox for \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\"" Aug 13 01:01:14.750109 kubelet[2589]: I0813 01:01:14.750070 2589 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:14.750878 env[1714]: time="2025-08-13T01:01:14.750839570Z" level=info msg="StopPodSandbox for \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\"" Aug 13 01:01:14.828346 env[1714]: time="2025-08-13T01:01:14.828275893Z" level=error msg="StopPodSandbox for \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\" failed" error="failed to destroy network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:14.828975 kubelet[2589]: E0813 01:01:14.828756 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:14.828975 kubelet[2589]: E0813 01:01:14.828828 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1"} Aug 13 01:01:14.828975 kubelet[2589]: E0813 01:01:14.828889 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:14.828975 kubelet[2589]: E0813 01:01:14.828924 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-6jvvc" podUID="b8eb7ae6-f7c7-4789-8cce-a6a4550419c1" Aug 13 01:01:14.835743 env[1714]: time="2025-08-13T01:01:14.835679694Z" level=error msg="StopPodSandbox for \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\" failed" error="failed to destroy network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 01:01:14.836325 kubelet[2589]: E0813 01:01:14.836116 2589 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:14.836325 kubelet[2589]: E0813 01:01:14.836185 2589 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c"} Aug 13 01:01:14.836325 kubelet[2589]: E0813 01:01:14.836233 2589 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"209fc8a0-729c-4aee-bbdd-8adc41725a94\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 01:01:14.836325 kubelet[2589]: E0813 01:01:14.836264 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"209fc8a0-729c-4aee-bbdd-8adc41725a94\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5d6885cd44-tftgx" podUID="209fc8a0-729c-4aee-bbdd-8adc41725a94" Aug 13 01:01:18.438974 kubelet[2589]: I0813 01:01:18.438912 2589 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:01:18.725820 kernel: kauditd_printk_skb: 34 callbacks suppressed Aug 13 01:01:18.725988 kernel: audit: type=1325 audit(1755046878.717:1091): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:18.717000 audit[3825]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:18.752565 kernel: audit: type=1300 audit(1755046878.717:1091): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffd9f373a0 a2=0 a3=7fffd9f3738c items=0 ppid=2712 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:18.752672 kernel: audit: type=1327 audit(1755046878.717:1091): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:18.752711 kernel: audit: type=1325 audit(1755046878.745:1092): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:18.717000 audit[3825]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffd9f373a0 a2=0 a3=7fffd9f3738c items=0 ppid=2712 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:18.765655 kernel: audit: type=1300 audit(1755046878.745:1092): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fffd9f373a0 a2=0 a3=7fffd9f3738c items=0 ppid=2712 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:18.717000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:18.745000 audit[3825]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:18.745000 audit[3825]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fffd9f373a0 a2=0 a3=7fffd9f3738c items=0 ppid=2712 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:18.745000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:18.780511 kernel: audit: type=1327 audit(1755046878.745:1092): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:19.881779 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount852998224.mount: Deactivated successfully. Aug 13 01:01:19.919291 env[1714]: time="2025-08-13T01:01:19.919218315Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:19.921995 env[1714]: time="2025-08-13T01:01:19.921953293Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:19.926196 env[1714]: time="2025-08-13T01:01:19.926155512Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:19.927950 env[1714]: time="2025-08-13T01:01:19.927903066Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:19.928517 env[1714]: time="2025-08-13T01:01:19.928468183Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Aug 13 01:01:19.964598 env[1714]: time="2025-08-13T01:01:19.964539519Z" level=info msg="CreateContainer within sandbox \"cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Aug 13 01:01:20.005418 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount744736981.mount: Deactivated successfully. Aug 13 01:01:20.012874 env[1714]: time="2025-08-13T01:01:20.012814466Z" level=info msg="CreateContainer within sandbox \"cebb8104597398082e632fb4fce0fb270cef6d16cee2b80d591f3f3e21b3b74f\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"21ee88c27880a69195cb988a0c2e2e0ca48a751fba5850cb838dd98ee4b7309a\"" Aug 13 01:01:20.030448 env[1714]: time="2025-08-13T01:01:20.028697473Z" level=info msg="StartContainer for \"21ee88c27880a69195cb988a0c2e2e0ca48a751fba5850cb838dd98ee4b7309a\"" Aug 13 01:01:20.087664 systemd[1]: Started cri-containerd-21ee88c27880a69195cb988a0c2e2e0ca48a751fba5850cb838dd98ee4b7309a.scope. Aug 13 01:01:20.114000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.145134 kernel: audit: type=1400 audit(1755046880.114:1093): avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.145719 kernel: audit: type=1300 audit(1755046880.114:1093): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fdbc1d33548 items=0 ppid=3196 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:20.145784 kernel: audit: type=1327 audit(1755046880.114:1093): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231656538386332373838306136393139356362393838613063326532 Aug 13 01:01:20.145825 kernel: audit: type=1400 audit(1755046880.115:1094): avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.114000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fdbc1d33548 items=0 ppid=3196 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:20.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231656538386332373838306136393139356362393838613063326532 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.115000 audit: BPF prog-id=148 op=LOAD Aug 13 01:01:20.115000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c000345a28 items=0 ppid=3196 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:20.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231656538386332373838306136393139356362393838613063326532 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit: BPF prog-id=149 op=LOAD Aug 13 01:01:20.147000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c000345a78 items=0 ppid=3196 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:20.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231656538386332373838306136393139356362393838613063326532 Aug 13 01:01:20.147000 audit: BPF prog-id=149 op=UNLOAD Aug 13 01:01:20.147000 audit: BPF prog-id=148 op=UNLOAD Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:20.147000 audit: BPF prog-id=150 op=LOAD Aug 13 01:01:20.147000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c000345b08 items=0 ppid=3196 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:20.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231656538386332373838306136393139356362393838613063326532 Aug 13 01:01:20.166262 env[1714]: time="2025-08-13T01:01:20.166219201Z" level=info msg="StartContainer for \"21ee88c27880a69195cb988a0c2e2e0ca48a751fba5850cb838dd98ee4b7309a\" returns successfully" Aug 13 01:01:20.731724 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Aug 13 01:01:20.731916 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 13 01:01:20.827589 kubelet[2589]: I0813 01:01:20.827515 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-w6whm" podStartSLOduration=1.58392271 podStartE2EDuration="24.827462474s" podCreationTimestamp="2025-08-13 01:00:56 +0000 UTC" firstStartedPulling="2025-08-13 01:00:56.685964966 +0000 UTC m=+19.478191616" lastFinishedPulling="2025-08-13 01:01:19.929504731 +0000 UTC m=+42.721731380" observedRunningTime="2025-08-13 01:01:20.826910975 +0000 UTC m=+43.619137632" watchObservedRunningTime="2025-08-13 01:01:20.827462474 +0000 UTC m=+43.619689127" Aug 13 01:01:21.098888 env[1714]: time="2025-08-13T01:01:21.098843341Z" level=info msg="StopPodSandbox for \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\"" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.259 [INFO][3907] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.261 [INFO][3907] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" iface="eth0" netns="/var/run/netns/cni-df60b040-c3f0-e6e3-dfdc-3820568bdbe0" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.261 [INFO][3907] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" iface="eth0" netns="/var/run/netns/cni-df60b040-c3f0-e6e3-dfdc-3820568bdbe0" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.262 [INFO][3907] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" iface="eth0" netns="/var/run/netns/cni-df60b040-c3f0-e6e3-dfdc-3820568bdbe0" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.262 [INFO][3907] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.262 [INFO][3907] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.638 [INFO][3915] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.644 [INFO][3915] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.645 [INFO][3915] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.661 [WARNING][3915] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.661 [INFO][3915] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.662 [INFO][3915] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:21.667334 env[1714]: 2025-08-13 01:01:21.665 [INFO][3907] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:21.672910 env[1714]: time="2025-08-13T01:01:21.669939029Z" level=info msg="TearDown network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\" successfully" Aug 13 01:01:21.672910 env[1714]: time="2025-08-13T01:01:21.669977977Z" level=info msg="StopPodSandbox for \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\" returns successfully" Aug 13 01:01:21.670035 systemd[1]: run-netns-cni\x2ddf60b040\x2dc3f0\x2de6e3\x2ddfdc\x2d3820568bdbe0.mount: Deactivated successfully. Aug 13 01:01:21.781394 kubelet[2589]: I0813 01:01:21.781337 2589 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-ca-bundle\") pod \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\" (UID: \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\") " Aug 13 01:01:21.781632 kubelet[2589]: I0813 01:01:21.781427 2589 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-stzkh\" (UniqueName: \"kubernetes.io/projected/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-kube-api-access-stzkh\") pod \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\" (UID: \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\") " Aug 13 01:01:21.781632 kubelet[2589]: I0813 01:01:21.781453 2589 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-backend-key-pair\") pod \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\" (UID: \"fd0a9d27-2ec4-4c57-81af-fe6b91808fba\") " Aug 13 01:01:21.783050 kubelet[2589]: I0813 01:01:21.779757 2589 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "fd0a9d27-2ec4-4c57-81af-fe6b91808fba" (UID: "fd0a9d27-2ec4-4c57-81af-fe6b91808fba"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Aug 13 01:01:21.790147 kubelet[2589]: I0813 01:01:21.787263 2589 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "fd0a9d27-2ec4-4c57-81af-fe6b91808fba" (UID: "fd0a9d27-2ec4-4c57-81af-fe6b91808fba"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Aug 13 01:01:21.789207 systemd[1]: var-lib-kubelet-pods-fd0a9d27\x2d2ec4\x2d4c57\x2d81af\x2dfe6b91808fba-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dstzkh.mount: Deactivated successfully. Aug 13 01:01:21.789306 systemd[1]: var-lib-kubelet-pods-fd0a9d27\x2d2ec4\x2d4c57\x2d81af\x2dfe6b91808fba-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Aug 13 01:01:21.793458 kubelet[2589]: I0813 01:01:21.793397 2589 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-kube-api-access-stzkh" (OuterVolumeSpecName: "kube-api-access-stzkh") pod "fd0a9d27-2ec4-4c57-81af-fe6b91808fba" (UID: "fd0a9d27-2ec4-4c57-81af-fe6b91808fba"). InnerVolumeSpecName "kube-api-access-stzkh". PluginName "kubernetes.io/projected", VolumeGidValue "" Aug 13 01:01:21.803740 systemd[1]: Removed slice kubepods-besteffort-podfd0a9d27_2ec4_4c57_81af_fe6b91808fba.slice. Aug 13 01:01:21.883816 kubelet[2589]: I0813 01:01:21.883778 2589 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-ca-bundle\") on node \"ip-172-31-17-234\" DevicePath \"\"" Aug 13 01:01:21.884307 kubelet[2589]: I0813 01:01:21.883817 2589 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-stzkh\" (UniqueName: \"kubernetes.io/projected/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-kube-api-access-stzkh\") on node \"ip-172-31-17-234\" DevicePath \"\"" Aug 13 01:01:21.884307 kubelet[2589]: I0813 01:01:21.883955 2589 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/fd0a9d27-2ec4-4c57-81af-fe6b91808fba-whisker-backend-key-pair\") on node \"ip-172-31-17-234\" DevicePath \"\"" Aug 13 01:01:21.952374 systemd[1]: Created slice kubepods-besteffort-pod0586b14e_6af6_4fc6_95d2_76f03a731752.slice. Aug 13 01:01:22.085863 kubelet[2589]: I0813 01:01:22.085795 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0586b14e-6af6-4fc6-95d2-76f03a731752-whisker-ca-bundle\") pod \"whisker-684ffbf6bd-f7rtx\" (UID: \"0586b14e-6af6-4fc6-95d2-76f03a731752\") " pod="calico-system/whisker-684ffbf6bd-f7rtx" Aug 13 01:01:22.085863 kubelet[2589]: I0813 01:01:22.085856 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8snfh\" (UniqueName: \"kubernetes.io/projected/0586b14e-6af6-4fc6-95d2-76f03a731752-kube-api-access-8snfh\") pod \"whisker-684ffbf6bd-f7rtx\" (UID: \"0586b14e-6af6-4fc6-95d2-76f03a731752\") " pod="calico-system/whisker-684ffbf6bd-f7rtx" Aug 13 01:01:22.086077 kubelet[2589]: I0813 01:01:22.085880 2589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0586b14e-6af6-4fc6-95d2-76f03a731752-whisker-backend-key-pair\") pod \"whisker-684ffbf6bd-f7rtx\" (UID: \"0586b14e-6af6-4fc6-95d2-76f03a731752\") " pod="calico-system/whisker-684ffbf6bd-f7rtx" Aug 13 01:01:22.261907 env[1714]: time="2025-08-13T01:01:22.261773225Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-684ffbf6bd-f7rtx,Uid:0586b14e-6af6-4fc6-95d2-76f03a731752,Namespace:calico-system,Attempt:0,}" Aug 13 01:01:22.474000 audit[4012]: AVC avc: denied { write } for pid=4012 comm="tee" name="fd" dev="proc" ino=25869 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:01:22.474000 audit[4012]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbb1947e3 a2=241 a3=1b6 items=1 ppid=3993 pid=4012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.474000 audit: CWD cwd="/etc/service/enabled/confd/log" Aug 13 01:01:22.474000 audit: PATH item=0 name="/dev/fd/63" inode=25859 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:22.474000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:01:22.513000 audit[4022]: AVC avc: denied { write } for pid=4022 comm="tee" name="fd" dev="proc" ino=25455 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:01:22.513000 audit[4022]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef39917e5 a2=241 a3=1b6 items=1 ppid=3982 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.513000 audit: CWD cwd="/etc/service/enabled/cni/log" Aug 13 01:01:22.513000 audit: PATH item=0 name="/dev/fd/63" inode=25429 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:22.513000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:01:22.513000 audit[4017]: AVC avc: denied { write } for pid=4017 comm="tee" name="fd" dev="proc" ino=25459 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:01:22.513000 audit[4017]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffff3ff77d3 a2=241 a3=1b6 items=1 ppid=3986 pid=4017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.513000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Aug 13 01:01:22.513000 audit: PATH item=0 name="/dev/fd/63" inode=25426 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:22.513000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:01:22.528082 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:01:22.528191 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif10a14dee4f: link becomes ready Aug 13 01:01:22.528646 (udev-worker)[3866]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:01:22.531000 audit[4030]: AVC avc: denied { write } for pid=4030 comm="tee" name="fd" dev="proc" ino=25482 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:01:22.531000 audit[4030]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd8094e7d4 a2=241 a3=1b6 items=1 ppid=3998 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.531000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Aug 13 01:01:22.531000 audit: PATH item=0 name="/dev/fd/63" inode=25866 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:22.531000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:01:22.537965 systemd-networkd[1437]: calif10a14dee4f: Link UP Aug 13 01:01:22.538240 systemd-networkd[1437]: calif10a14dee4f: Gained carrier Aug 13 01:01:22.541000 audit[4026]: AVC avc: denied { write } for pid=4026 comm="tee" name="fd" dev="proc" ino=25489 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:01:22.541000 audit[4026]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffee1717e3 a2=241 a3=1b6 items=1 ppid=3989 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.541000 audit: CWD cwd="/etc/service/enabled/felix/log" Aug 13 01:01:22.541000 audit: PATH item=0 name="/dev/fd/63" inode=25432 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:22.541000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.319 [INFO][3957] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.339 [INFO][3957] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0 whisker-684ffbf6bd- calico-system 0586b14e-6af6-4fc6-95d2-76f03a731752 931 0 2025-08-13 01:01:21 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:684ffbf6bd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-17-234 whisker-684ffbf6bd-f7rtx eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calif10a14dee4f [] [] }} ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.339 [INFO][3957] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.369 [INFO][3969] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" HandleID="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Workload="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.370 [INFO][3969] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" HandleID="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Workload="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-234", "pod":"whisker-684ffbf6bd-f7rtx", "timestamp":"2025-08-13 01:01:22.36996221 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.370 [INFO][3969] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.370 [INFO][3969] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.370 [INFO][3969] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.387 [INFO][3969] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.418 [INFO][3969] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.449 [INFO][3969] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.456 [INFO][3969] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.462 [INFO][3969] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.462 [INFO][3969] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.465 [INFO][3969] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30 Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.472 [INFO][3969] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.491 [INFO][3969] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.65/26] block=192.168.100.64/26 handle="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.491 [INFO][3969] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.65/26] handle="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" host="ip-172-31-17-234" Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.491 [INFO][3969] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:22.552341 env[1714]: 2025-08-13 01:01:22.491 [INFO][3969] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.65/26] IPv6=[] ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" HandleID="k8s-pod-network.4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Workload="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" Aug 13 01:01:22.554372 env[1714]: 2025-08-13 01:01:22.496 [INFO][3957] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0", GenerateName:"whisker-684ffbf6bd-", Namespace:"calico-system", SelfLink:"", UID:"0586b14e-6af6-4fc6-95d2-76f03a731752", ResourceVersion:"931", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 1, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"684ffbf6bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"whisker-684ffbf6bd-f7rtx", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.100.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif10a14dee4f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:22.554372 env[1714]: 2025-08-13 01:01:22.496 [INFO][3957] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.65/32] ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" Aug 13 01:01:22.554372 env[1714]: 2025-08-13 01:01:22.496 [INFO][3957] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif10a14dee4f ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" Aug 13 01:01:22.554372 env[1714]: 2025-08-13 01:01:22.528 [INFO][3957] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" Aug 13 01:01:22.554372 env[1714]: 2025-08-13 01:01:22.528 [INFO][3957] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0", GenerateName:"whisker-684ffbf6bd-", Namespace:"calico-system", SelfLink:"", UID:"0586b14e-6af6-4fc6-95d2-76f03a731752", ResourceVersion:"931", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 1, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"684ffbf6bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30", Pod:"whisker-684ffbf6bd-f7rtx", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.100.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif10a14dee4f", MAC:"c6:a3:68:9f:96:29", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:22.554372 env[1714]: 2025-08-13 01:01:22.545 [INFO][3957] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30" Namespace="calico-system" Pod="whisker-684ffbf6bd-f7rtx" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--684ffbf6bd--f7rtx-eth0" Aug 13 01:01:22.578000 audit[4047]: AVC avc: denied { write } for pid=4047 comm="tee" name="fd" dev="proc" ino=25512 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:01:22.579975 env[1714]: time="2025-08-13T01:01:22.579873247Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:22.580117 env[1714]: time="2025-08-13T01:01:22.579994254Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:22.580117 env[1714]: time="2025-08-13T01:01:22.580027454Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:22.580259 env[1714]: time="2025-08-13T01:01:22.580223337Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30 pid=4075 runtime=io.containerd.runc.v2 Aug 13 01:01:22.582000 audit[4053]: AVC avc: denied { write } for pid=4053 comm="tee" name="fd" dev="proc" ino=25519 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 01:01:22.578000 audit[4047]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe8d2fc7e3 a2=241 a3=1b6 items=1 ppid=3992 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.578000 audit: CWD cwd="/etc/service/enabled/bird6/log" Aug 13 01:01:22.578000 audit: PATH item=0 name="/dev/fd/63" inode=25457 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:22.578000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:01:22.620093 systemd[1]: Started cri-containerd-4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30.scope. Aug 13 01:01:22.582000 audit[4053]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff47fcb7e4 a2=241 a3=1b6 items=1 ppid=3991 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.582000 audit: CWD cwd="/etc/service/enabled/bird/log" Aug 13 01:01:22.582000 audit: PATH item=0 name="/dev/fd/63" inode=25491 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 01:01:22.582000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.664000 audit: BPF prog-id=151 op=LOAD Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001a1c48 a2=10 a3=1c items=0 ppid=4075 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463623032316637653262333030633233666231396236346466373965 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001a16b0 a2=3c a3=c items=0 ppid=4075 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463623032316637653262333030633233666231396236346466373965 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit: BPF prog-id=152 op=LOAD Aug 13 01:01:22.665000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001a19d8 a2=78 a3=c000349cd0 items=0 ppid=4075 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463623032316637653262333030633233666231396236346466373965 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit: BPF prog-id=153 op=LOAD Aug 13 01:01:22.665000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1770 a2=78 a3=c000349d18 items=0 ppid=4075 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463623032316637653262333030633233666231396236346466373965 Aug 13 01:01:22.665000 audit: BPF prog-id=153 op=UNLOAD Aug 13 01:01:22.665000 audit: BPF prog-id=152 op=UNLOAD Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:22.665000 audit: BPF prog-id=154 op=LOAD Aug 13 01:01:22.665000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001a1c30 a2=78 a3=c0003ce128 items=0 ppid=4075 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:22.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463623032316637653262333030633233666231396236346466373965 Aug 13 01:01:22.735410 env[1714]: time="2025-08-13T01:01:22.735356829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-684ffbf6bd-f7rtx,Uid:0586b14e-6af6-4fc6-95d2-76f03a731752,Namespace:calico-system,Attempt:0,} returns sandbox id \"4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30\"" Aug 13 01:01:22.747382 env[1714]: time="2025-08-13T01:01:22.747332014Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Aug 13 01:01:23.437798 kubelet[2589]: I0813 01:01:23.437747 2589 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="fd0a9d27-2ec4-4c57-81af-fe6b91808fba" path="/var/lib/kubelet/pods/fd0a9d27-2ec4-4c57-81af-fe6b91808fba/volumes" Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.478000 audit: BPF prog-id=155 op=LOAD Aug 13 01:01:23.478000 audit[4167]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc985ae6a0 a2=98 a3=1fffffffffffffff items=0 ppid=3990 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.478000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:01:23.481000 audit: BPF prog-id=155 op=UNLOAD Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit: BPF prog-id=156 op=LOAD Aug 13 01:01:23.482000 audit[4167]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc985ae580 a2=94 a3=3 items=0 ppid=3990 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.482000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:01:23.482000 audit: BPF prog-id=156 op=UNLOAD Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit: BPF prog-id=157 op=LOAD Aug 13 01:01:23.482000 audit[4167]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc985ae5c0 a2=94 a3=7ffc985ae7a0 items=0 ppid=3990 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.482000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:01:23.482000 audit: BPF prog-id=157 op=UNLOAD Aug 13 01:01:23.482000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.482000 audit[4167]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffc985ae690 a2=50 a3=a000000085 items=0 ppid=3990 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.482000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.486000 audit: BPF prog-id=158 op=LOAD Aug 13 01:01:23.486000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff9e0ab190 a2=98 a3=3 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.486000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.486000 audit: BPF prog-id=158 op=UNLOAD Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit: BPF prog-id=159 op=LOAD Aug 13 01:01:23.487000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9e0aaf80 a2=94 a3=54428f items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.487000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.487000 audit: BPF prog-id=159 op=UNLOAD Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.487000 audit: BPF prog-id=160 op=LOAD Aug 13 01:01:23.487000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9e0aafb0 a2=94 a3=2 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.487000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.487000 audit: BPF prog-id=160 op=UNLOAD Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit: BPF prog-id=161 op=LOAD Aug 13 01:01:23.629000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9e0aae70 a2=94 a3=1 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.629000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.629000 audit: BPF prog-id=161 op=UNLOAD Aug 13 01:01:23.629000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.629000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff9e0aaf40 a2=50 a3=7fff9e0ab020 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.629000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.640000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.640000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9e0aae80 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.640000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.640000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.640000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9e0aaeb0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.640000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.640000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.640000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9e0aadc0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.640000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.640000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.640000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9e0aaed0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.640000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.640000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.640000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9e0aaeb0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.640000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.640000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.640000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9e0aaea0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.640000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.640000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.640000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9e0aaed0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.640000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9e0aaeb0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9e0aaed0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9e0aaea0 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9e0aaf10 a2=28 a3=0 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff9e0aacc0 a2=50 a3=1 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit: BPF prog-id=162 op=LOAD Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff9e0aacc0 a2=94 a3=5 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit: BPF prog-id=162 op=UNLOAD Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff9e0aad70 a2=50 a3=1 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff9e0aae90 a2=4 a3=38 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.641000 audit[4168]: AVC avc: denied { confidentiality } for pid=4168 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:01:23.641000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9e0aaee0 a2=94 a3=6 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.641000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { confidentiality } for pid=4168 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:01:23.642000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9e0aa690 a2=94 a3=88 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.642000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.642000 audit[4168]: AVC avc: denied { confidentiality } for pid=4168 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:01:23.642000 audit[4168]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9e0aa690 a2=94 a3=88 items=0 ppid=3990 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.642000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.656000 audit: BPF prog-id=163 op=LOAD Aug 13 01:01:23.656000 audit[4171]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffddd4af4c0 a2=98 a3=1999999999999999 items=0 ppid=3990 pid=4171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.656000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 01:01:23.657000 audit: BPF prog-id=163 op=UNLOAD Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit: BPF prog-id=164 op=LOAD Aug 13 01:01:23.657000 audit[4171]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffddd4af3a0 a2=94 a3=ffff items=0 ppid=3990 pid=4171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.657000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 01:01:23.657000 audit: BPF prog-id=164 op=UNLOAD Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { perfmon } for pid=4171 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit[4171]: AVC avc: denied { bpf } for pid=4171 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.657000 audit: BPF prog-id=165 op=LOAD Aug 13 01:01:23.657000 audit[4171]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffddd4af3e0 a2=94 a3=7ffddd4af5c0 items=0 ppid=3990 pid=4171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.657000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 01:01:23.657000 audit: BPF prog-id=165 op=UNLOAD Aug 13 01:01:23.755458 systemd-networkd[1437]: vxlan.calico: Link UP Aug 13 01:01:23.755467 systemd-networkd[1437]: vxlan.calico: Gained carrier Aug 13 01:01:23.792286 (udev-worker)[3865]: Network interface NamePolicy= disabled on kernel command line. Aug 13 01:01:23.818866 kernel: kauditd_printk_skb: 361 callbacks suppressed Aug 13 01:01:23.819060 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.819127 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.825611 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.831584 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.836590 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.846263 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.846410 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.852612 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.809000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.868312 kernel: audit: type=1400 audit(1755046883.809:1165): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.868507 kernel: audit: type=1334 audit(1755046883.809:1165): prog-id=166 op=LOAD Aug 13 01:01:23.809000 audit: BPF prog-id=166 op=LOAD Aug 13 01:01:23.809000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc222b53f0 a2=98 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.809000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.864000 audit: BPF prog-id=166 op=UNLOAD Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit: BPF prog-id=167 op=LOAD Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc222b5200 a2=94 a3=54428f items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit: BPF prog-id=167 op=UNLOAD Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit: BPF prog-id=168 op=LOAD Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc222b5230 a2=94 a3=2 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit: BPF prog-id=168 op=UNLOAD Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc222b5100 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc222b5130 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc222b5040 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc222b5150 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc222b5130 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc222b5120 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc222b5150 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc222b5130 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc222b5150 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc222b5120 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc222b5190 a2=28 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.869000 audit: BPF prog-id=169 op=LOAD Aug 13 01:01:23.869000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc222b5000 a2=94 a3=0 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.869000 audit: BPF prog-id=169 op=UNLOAD Aug 13 01:01:23.872000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.872000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc222b4ff0 a2=50 a3=2800 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.872000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc222b4ff0 a2=50 a3=2800 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.873000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit: BPF prog-id=170 op=LOAD Aug 13 01:01:23.873000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc222b4810 a2=94 a3=2 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.873000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.873000 audit: BPF prog-id=170 op=UNLOAD Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.873000 audit: BPF prog-id=171 op=LOAD Aug 13 01:01:23.873000 audit[4197]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc222b4910 a2=94 a3=30 items=0 ppid=3990 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.873000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.888000 audit: BPF prog-id=172 op=LOAD Aug 13 01:01:23.888000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffb875df10 a2=98 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.888000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:23.890000 audit: BPF prog-id=172 op=UNLOAD Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit: BPF prog-id=173 op=LOAD Aug 13 01:01:23.890000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffb875dd00 a2=94 a3=54428f items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.890000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:23.890000 audit: BPF prog-id=173 op=UNLOAD Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:23.890000 audit: BPF prog-id=174 op=LOAD Aug 13 01:01:23.890000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffb875dd30 a2=94 a3=2 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:23.890000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:23.891000 audit: BPF prog-id=174 op=UNLOAD Aug 13 01:01:24.252914 env[1714]: time="2025-08-13T01:01:24.252865533Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:24.257195 env[1714]: time="2025-08-13T01:01:24.257145243Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:24.260012 env[1714]: time="2025-08-13T01:01:24.259969943Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:24.263074 env[1714]: time="2025-08-13T01:01:24.263027065Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:24.263595 env[1714]: time="2025-08-13T01:01:24.263562252Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Aug 13 01:01:24.269260 env[1714]: time="2025-08-13T01:01:24.268532924Z" level=info msg="CreateContainer within sandbox \"4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Aug 13 01:01:24.299314 env[1714]: time="2025-08-13T01:01:24.299257748Z" level=info msg="CreateContainer within sandbox \"4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"1ab5381ec1628b3af462351ad0cb7384a1c402b8d4c3f9427d460b93c9df688d\"" Aug 13 01:01:24.300295 env[1714]: time="2025-08-13T01:01:24.300256314Z" level=info msg="StartContainer for \"1ab5381ec1628b3af462351ad0cb7384a1c402b8d4c3f9427d460b93c9df688d\"" Aug 13 01:01:24.335198 systemd[1]: Started cri-containerd-1ab5381ec1628b3af462351ad0cb7384a1c402b8d4c3f9427d460b93c9df688d.scope. Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit: BPF prog-id=175 op=LOAD Aug 13 01:01:24.338000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffb875dbf0 a2=94 a3=1 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.338000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.338000 audit: BPF prog-id=175 op=UNLOAD Aug 13 01:01:24.338000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.338000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffb875dcc0 a2=50 a3=7fffb875dda0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.338000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.355958 systemd-networkd[1437]: calif10a14dee4f: Gained IPv6LL Aug 13 01:01:24.391000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.391000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb875dc00 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.391000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.394000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.394000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb875dc30 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.394000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb875db40 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb875dc50 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb875dc30 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb875dc20 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb875dc50 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb875dc30 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb875dc50 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb875dc20 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.395000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.395000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb875dc90 a2=28 a3=0 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.395000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffb875da40 a2=50 a3=1 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.396000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit: BPF prog-id=176 op=LOAD Aug 13 01:01:24.396000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffb875da40 a2=94 a3=5 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.396000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.396000 audit: BPF prog-id=176 op=UNLOAD Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffb875daf0 a2=50 a3=1 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.396000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffb875dc10 a2=4 a3=38 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.396000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.396000 audit[4201]: AVC avc: denied { confidentiality } for pid=4201 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:01:24.396000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffb875dc60 a2=94 a3=6 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.396000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { confidentiality } for pid=4201 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:01:24.397000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffb875d410 a2=94 a3=88 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.397000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.397000 audit[4201]: AVC avc: denied { confidentiality } for pid=4201 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 01:01:24.397000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffb875d410 a2=94 a3=88 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.397000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.398000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.398000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffb875ee40 a2=10 a3=f8f00800 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.398000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.399000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.399000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffb875ece0 a2=10 a3=3 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.399000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.399000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.399000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffb875ec80 a2=10 a3=3 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.399000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.399000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.399000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffb875ec80 a2=10 a3=7 items=0 ppid=3990 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.399000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 01:01:24.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit: BPF prog-id=177 op=LOAD Aug 13 01:01:24.410000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[4213]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4075 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623533383165633136323862336166343632333531616430636237 Aug 13 01:01:24.410000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.410000 audit[4213]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4075 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623533383165633136323862336166343632333531616430636237 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit: BPF prog-id=178 op=LOAD Aug 13 01:01:24.412000 audit[4213]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b2c60 items=0 ppid=4075 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623533383165633136323862336166343632333531616430636237 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit: BPF prog-id=179 op=LOAD Aug 13 01:01:24.412000 audit[4213]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b2ca8 items=0 ppid=4075 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623533383165633136323862336166343632333531616430636237 Aug 13 01:01:24.412000 audit: BPF prog-id=179 op=UNLOAD Aug 13 01:01:24.412000 audit: BPF prog-id=178 op=UNLOAD Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:24.412000 audit: BPF prog-id=180 op=LOAD Aug 13 01:01:24.412000 audit[4213]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b30b8 items=0 ppid=4075 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623533383165633136323862336166343632333531616430636237 Aug 13 01:01:24.431000 audit: BPF prog-id=171 op=UNLOAD Aug 13 01:01:24.482305 env[1714]: time="2025-08-13T01:01:24.482256375Z" level=info msg="StartContainer for \"1ab5381ec1628b3af462351ad0cb7384a1c402b8d4c3f9427d460b93c9df688d\" returns successfully" Aug 13 01:01:24.498140 env[1714]: time="2025-08-13T01:01:24.498074071Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Aug 13 01:01:24.555000 audit[4225]: AVC avc: denied { search } for pid=4225 comm="nginx" name="crypto" dev="proc" ino=26449 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c181 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Aug 13 01:01:24.555000 audit[4225]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fd0301a5728 a2=0 a3=0 items=0 ppid=4075 pid=4225 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c181 key=(null) Aug 13 01:01:24.555000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Aug 13 01:01:24.606000 audit[4265]: NETFILTER_CFG table=raw:101 family=2 entries=21 op=nft_register_chain pid=4265 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:24.606000 audit[4265]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffdd369ab60 a2=0 a3=7ffdd369ab4c items=0 ppid=3990 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.606000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:24.610000 audit[4269]: NETFILTER_CFG table=mangle:102 family=2 entries=16 op=nft_register_chain pid=4269 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:24.610000 audit[4269]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffe3359ab40 a2=0 a3=7ffe3359ab2c items=0 ppid=3990 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.610000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:24.614000 audit[4266]: NETFILTER_CFG table=nat:103 family=2 entries=15 op=nft_register_chain pid=4266 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:24.614000 audit[4266]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffd8e8b7db0 a2=0 a3=7ffd8e8b7d9c items=0 ppid=3990 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.614000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:24.625000 audit[4270]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=4270 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:24.625000 audit[4270]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffcc9d6a6a0 a2=0 a3=7ffcc9d6a68c items=0 ppid=3990 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:24.625000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:24.921990 systemd[1]: Started sshd@7-172.31.17.234:22-147.75.109.163:34464.service. Aug 13 01:01:24.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.17.234:22-147.75.109.163:34464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:25.148000 audit[4280]: USER_ACCT pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:25.149074 sshd[4280]: Accepted publickey for core from 147.75.109.163 port 34464 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:25.149000 audit[4280]: CRED_ACQ pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:25.149000 audit[4280]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1de83e60 a2=3 a3=0 items=0 ppid=1 pid=4280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:25.149000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:25.153471 sshd[4280]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:25.163568 systemd[1]: Started session-8.scope. Aug 13 01:01:25.164287 systemd-logind[1707]: New session 8 of user core. Aug 13 01:01:25.170000 audit[4280]: USER_START pid=4280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:25.172000 audit[4282]: CRED_ACQ pid=4282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:25.437737 env[1714]: time="2025-08-13T01:01:25.437673847Z" level=info msg="StopPodSandbox for \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\"" Aug 13 01:01:25.451382 env[1714]: time="2025-08-13T01:01:25.451331351Z" level=info msg="StopPodSandbox for \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\"" Aug 13 01:01:25.634668 systemd-networkd[1437]: vxlan.calico: Gained IPv6LL Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.624 [INFO][4309] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.624 [INFO][4309] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" iface="eth0" netns="/var/run/netns/cni-c35c363a-4b86-f798-300b-c9d8582d705e" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.624 [INFO][4309] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" iface="eth0" netns="/var/run/netns/cni-c35c363a-4b86-f798-300b-c9d8582d705e" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.624 [INFO][4309] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" iface="eth0" netns="/var/run/netns/cni-c35c363a-4b86-f798-300b-c9d8582d705e" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.624 [INFO][4309] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.625 [INFO][4309] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.689 [INFO][4323] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.690 [INFO][4323] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.690 [INFO][4323] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.699 [WARNING][4323] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.699 [INFO][4323] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.701 [INFO][4323] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:25.709196 env[1714]: 2025-08-13 01:01:25.705 [INFO][4309] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:25.716698 systemd[1]: run-netns-cni\x2dc35c363a\x2d4b86\x2df798\x2d300b\x2dc9d8582d705e.mount: Deactivated successfully. Aug 13 01:01:25.719684 env[1714]: time="2025-08-13T01:01:25.719474834Z" level=info msg="TearDown network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\" successfully" Aug 13 01:01:25.719938 env[1714]: time="2025-08-13T01:01:25.719909284Z" level=info msg="StopPodSandbox for \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\" returns successfully" Aug 13 01:01:25.722274 env[1714]: time="2025-08-13T01:01:25.722236707Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mdb6c,Uid:d8889dc4-f418-48a4-9d9a-eba6c73b2145,Namespace:kube-system,Attempt:1,}" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.628 [INFO][4310] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.628 [INFO][4310] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" iface="eth0" netns="/var/run/netns/cni-f5a06d72-ba63-5200-266b-4852e0b59fb5" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.630 [INFO][4310] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" iface="eth0" netns="/var/run/netns/cni-f5a06d72-ba63-5200-266b-4852e0b59fb5" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.630 [INFO][4310] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" iface="eth0" netns="/var/run/netns/cni-f5a06d72-ba63-5200-266b-4852e0b59fb5" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.630 [INFO][4310] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.630 [INFO][4310] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.743 [INFO][4328] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.756 [INFO][4328] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.756 [INFO][4328] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.781 [WARNING][4328] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.781 [INFO][4328] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.784 [INFO][4328] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:25.813699 env[1714]: 2025-08-13 01:01:25.805 [INFO][4310] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:25.823714 systemd[1]: run-netns-cni\x2df5a06d72\x2dba63\x2d5200\x2d266b\x2d4852e0b59fb5.mount: Deactivated successfully. Aug 13 01:01:25.827810 env[1714]: time="2025-08-13T01:01:25.827754266Z" level=info msg="TearDown network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\" successfully" Aug 13 01:01:25.828018 env[1714]: time="2025-08-13T01:01:25.827994851Z" level=info msg="StopPodSandbox for \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\" returns successfully" Aug 13 01:01:25.830316 env[1714]: time="2025-08-13T01:01:25.829354247Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-g29zb,Uid:a524319c-5d30-44a0-a41e-3169292765bb,Namespace:calico-system,Attempt:1,}" Aug 13 01:01:26.281610 systemd-networkd[1437]: calie86d8a9d46c: Link UP Aug 13 01:01:26.287977 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:01:26.288815 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie86d8a9d46c: link becomes ready Aug 13 01:01:26.290884 systemd-networkd[1437]: calie86d8a9d46c: Gained carrier Aug 13 01:01:26.305057 sshd[4280]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:26.307000 audit[4280]: USER_END pid=4280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:26.307000 audit[4280]: CRED_DISP pid=4280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:26.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.17.234:22-147.75.109.163:34464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:26.310599 systemd[1]: sshd@7-172.31.17.234:22-147.75.109.163:34464.service: Deactivated successfully. Aug 13 01:01:26.311684 systemd[1]: session-8.scope: Deactivated successfully. Aug 13 01:01:26.317629 systemd-logind[1707]: Session 8 logged out. Waiting for processes to exit. Aug 13 01:01:26.320095 systemd-logind[1707]: Removed session 8. Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.034 [INFO][4347] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0 goldmane-58fd7646b9- calico-system a524319c-5d30-44a0-a41e-3169292765bb 982 0 2025-08-13 01:00:55 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-17-234 goldmane-58fd7646b9-g29zb eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calie86d8a9d46c [] [] }} ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.036 [INFO][4347] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.153 [INFO][4364] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" HandleID="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.153 [INFO][4364] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" HandleID="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9040), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-234", "pod":"goldmane-58fd7646b9-g29zb", "timestamp":"2025-08-13 01:01:26.15354544 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.154 [INFO][4364] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.154 [INFO][4364] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.154 [INFO][4364] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.169 [INFO][4364] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.180 [INFO][4364] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.191 [INFO][4364] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.196 [INFO][4364] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.202 [INFO][4364] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.202 [INFO][4364] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.209 [INFO][4364] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.217 [INFO][4364] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.245 [INFO][4364] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.66/26] block=192.168.100.64/26 handle="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.245 [INFO][4364] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.66/26] handle="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" host="ip-172-31-17-234" Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.245 [INFO][4364] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:26.362623 env[1714]: 2025-08-13 01:01:26.245 [INFO][4364] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.66/26] IPv6=[] ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" HandleID="k8s-pod-network.f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:26.365943 env[1714]: 2025-08-13 01:01:26.254 [INFO][4347] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"a524319c-5d30-44a0-a41e-3169292765bb", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"goldmane-58fd7646b9-g29zb", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.100.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie86d8a9d46c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:26.365943 env[1714]: 2025-08-13 01:01:26.254 [INFO][4347] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.66/32] ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:26.365943 env[1714]: 2025-08-13 01:01:26.254 [INFO][4347] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie86d8a9d46c ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:26.365943 env[1714]: 2025-08-13 01:01:26.311 [INFO][4347] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:26.365943 env[1714]: 2025-08-13 01:01:26.322 [INFO][4347] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"a524319c-5d30-44a0-a41e-3169292765bb", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d", Pod:"goldmane-58fd7646b9-g29zb", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.100.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie86d8a9d46c", MAC:"22:31:84:2f:0b:13", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:26.365943 env[1714]: 2025-08-13 01:01:26.348 [INFO][4347] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d" Namespace="calico-system" Pod="goldmane-58fd7646b9-g29zb" WorkloadEndpoint="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:26.381340 systemd-networkd[1437]: cali2e96c967096: Link UP Aug 13 01:01:26.386026 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2e96c967096: link becomes ready Aug 13 01:01:26.385708 systemd-networkd[1437]: cali2e96c967096: Gained carrier Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.048 [INFO][4337] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0 coredns-7c65d6cfc9- kube-system d8889dc4-f418-48a4-9d9a-eba6c73b2145 981 0 2025-08-13 01:00:41 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-17-234 coredns-7c65d6cfc9-mdb6c eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2e96c967096 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.049 [INFO][4337] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.250 [INFO][4366] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" HandleID="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.253 [INFO][4366] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" HandleID="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251930), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-17-234", "pod":"coredns-7c65d6cfc9-mdb6c", "timestamp":"2025-08-13 01:01:26.232655574 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.253 [INFO][4366] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.253 [INFO][4366] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.253 [INFO][4366] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.283 [INFO][4366] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.316 [INFO][4366] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.330 [INFO][4366] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.333 [INFO][4366] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.337 [INFO][4366] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.338 [INFO][4366] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.344 [INFO][4366] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7 Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.354 [INFO][4366] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.366 [INFO][4366] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.67/26] block=192.168.100.64/26 handle="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.366 [INFO][4366] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.67/26] handle="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" host="ip-172-31-17-234" Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.366 [INFO][4366] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:26.427565 env[1714]: 2025-08-13 01:01:26.366 [INFO][4366] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.67/26] IPv6=[] ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" HandleID="k8s-pod-network.4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:26.429455 env[1714]: 2025-08-13 01:01:26.371 [INFO][4337] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d8889dc4-f418-48a4-9d9a-eba6c73b2145", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"coredns-7c65d6cfc9-mdb6c", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2e96c967096", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:26.429455 env[1714]: 2025-08-13 01:01:26.371 [INFO][4337] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.67/32] ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:26.429455 env[1714]: 2025-08-13 01:01:26.372 [INFO][4337] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2e96c967096 ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:26.429455 env[1714]: 2025-08-13 01:01:26.393 [INFO][4337] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:26.429455 env[1714]: 2025-08-13 01:01:26.395 [INFO][4337] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d8889dc4-f418-48a4-9d9a-eba6c73b2145", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7", Pod:"coredns-7c65d6cfc9-mdb6c", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2e96c967096", MAC:"8a:20:12:b8:53:87", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:26.429455 env[1714]: 2025-08-13 01:01:26.419 [INFO][4337] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mdb6c" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:26.433848 env[1714]: time="2025-08-13T01:01:26.433786308Z" level=info msg="StopPodSandbox for \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\"" Aug 13 01:01:26.445676 env[1714]: time="2025-08-13T01:01:26.445590157Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:26.446727 env[1714]: time="2025-08-13T01:01:26.446680698Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:26.446914 env[1714]: time="2025-08-13T01:01:26.446873525Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:26.447775 env[1714]: time="2025-08-13T01:01:26.447707204Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d pid=4399 runtime=io.containerd.runc.v2 Aug 13 01:01:26.484541 systemd[1]: Started cri-containerd-f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d.scope. Aug 13 01:01:26.552030 env[1714]: time="2025-08-13T01:01:26.543612244Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:26.552030 env[1714]: time="2025-08-13T01:01:26.543680315Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:26.552030 env[1714]: time="2025-08-13T01:01:26.543694564Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:26.552772 env[1714]: time="2025-08-13T01:01:26.552626174Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7 pid=4447 runtime=io.containerd.runc.v2 Aug 13 01:01:26.589000 audit[4464]: NETFILTER_CFG table=filter:105 family=2 entries=44 op=nft_register_chain pid=4464 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:26.589000 audit[4464]: SYSCALL arch=c000003e syscall=46 success=yes exit=25180 a0=3 a1=7fff4a2e75c0 a2=0 a3=7fff4a2e75ac items=0 ppid=3990 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.589000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:26.604175 systemd[1]: Started cri-containerd-4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7.scope. Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.640000 audit: BPF prog-id=181 op=LOAD Aug 13 01:01:26.641000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.641000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4399 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632626338626637326237366365353065346565613562336234393335 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4399 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632626338626637326237366365353065346565613562336234393335 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit: BPF prog-id=182 op=LOAD Aug 13 01:01:26.642000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002171d0 items=0 ppid=4399 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632626338626637326237366365353065346565613562336234393335 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.642000 audit: BPF prog-id=183 op=LOAD Aug 13 01:01:26.642000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000217218 items=0 ppid=4399 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632626338626637326237366365353065346565613562336234393335 Aug 13 01:01:26.645000 audit: BPF prog-id=183 op=UNLOAD Aug 13 01:01:26.645000 audit: BPF prog-id=182 op=UNLOAD Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.645000 audit: BPF prog-id=184 op=LOAD Aug 13 01:01:26.645000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000217628 items=0 ppid=4399 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632626338626637326237366365353065346565613562336234393335 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.679000 audit: BPF prog-id=185 op=LOAD Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4447 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646163303330333166663034663633303961623139633438383832 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4447 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646163303330333166663034663633303961623139633438383832 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit: BPF prog-id=186 op=LOAD Aug 13 01:01:26.680000 audit[4465]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002781f0 items=0 ppid=4447 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646163303330333166663034663633303961623139633438383832 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.680000 audit: BPF prog-id=187 op=LOAD Aug 13 01:01:26.680000 audit[4465]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000278238 items=0 ppid=4447 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646163303330333166663034663633303961623139633438383832 Aug 13 01:01:26.681000 audit: BPF prog-id=187 op=UNLOAD Aug 13 01:01:26.681000 audit: BPF prog-id=186 op=UNLOAD Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:26.681000 audit: BPF prog-id=188 op=LOAD Aug 13 01:01:26.681000 audit[4465]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000278648 items=0 ppid=4447 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646163303330333166663034663633303961623139633438383832 Aug 13 01:01:26.780000 env[1714]: time="2025-08-13T01:01:26.779954758Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mdb6c,Uid:d8889dc4-f418-48a4-9d9a-eba6c73b2145,Namespace:kube-system,Attempt:1,} returns sandbox id \"4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7\"" Aug 13 01:01:26.799000 audit[4495]: NETFILTER_CFG table=filter:106 family=2 entries=46 op=nft_register_chain pid=4495 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:26.799000 audit[4495]: SYSCALL arch=c000003e syscall=46 success=yes exit=23740 a0=3 a1=7ffd2ffee7c0 a2=0 a3=7ffd2ffee7ac items=0 ppid=3990 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:26.799000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:26.806408 env[1714]: time="2025-08-13T01:01:26.798528889Z" level=info msg="CreateContainer within sandbox \"4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.651 [INFO][4441] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.652 [INFO][4441] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" iface="eth0" netns="/var/run/netns/cni-336d0c12-93c5-6463-a201-98f1bea4e27f" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.652 [INFO][4441] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" iface="eth0" netns="/var/run/netns/cni-336d0c12-93c5-6463-a201-98f1bea4e27f" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.654 [INFO][4441] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" iface="eth0" netns="/var/run/netns/cni-336d0c12-93c5-6463-a201-98f1bea4e27f" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.654 [INFO][4441] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.654 [INFO][4441] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.793 [INFO][4483] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.794 [INFO][4483] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.794 [INFO][4483] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.823 [WARNING][4483] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.823 [INFO][4483] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.827 [INFO][4483] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:26.848923 env[1714]: 2025-08-13 01:01:26.836 [INFO][4441] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:26.853394 systemd[1]: run-netns-cni\x2d336d0c12\x2d93c5\x2d6463\x2da201\x2d98f1bea4e27f.mount: Deactivated successfully. Aug 13 01:01:26.856951 env[1714]: time="2025-08-13T01:01:26.856902712Z" level=info msg="TearDown network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\" successfully" Aug 13 01:01:26.857153 env[1714]: time="2025-08-13T01:01:26.857131652Z" level=info msg="StopPodSandbox for \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\" returns successfully" Aug 13 01:01:26.864170 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3995831004.mount: Deactivated successfully. Aug 13 01:01:26.878915 env[1714]: time="2025-08-13T01:01:26.878863262Z" level=info msg="CreateContainer within sandbox \"4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"003bee22bde2a69c00cb74965376319482fdd5b476987ee8a0bba897c3467988\"" Aug 13 01:01:26.879460 env[1714]: time="2025-08-13T01:01:26.879431163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54f7bf87dc-k7mns,Uid:0285aa98-0d0d-45d0-9ddd-b0347bbd6a54,Namespace:calico-system,Attempt:1,}" Aug 13 01:01:26.890619 env[1714]: time="2025-08-13T01:01:26.890574518Z" level=info msg="StartContainer for \"003bee22bde2a69c00cb74965376319482fdd5b476987ee8a0bba897c3467988\"" Aug 13 01:01:26.941319 env[1714]: time="2025-08-13T01:01:26.940049668Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-g29zb,Uid:a524319c-5d30-44a0-a41e-3169292765bb,Namespace:calico-system,Attempt:1,} returns sandbox id \"f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d\"" Aug 13 01:01:26.978396 systemd[1]: Started cri-containerd-003bee22bde2a69c00cb74965376319482fdd5b476987ee8a0bba897c3467988.scope. Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.029000 audit: BPF prog-id=189 op=LOAD Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4447 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030336265653232626465326136396330306362373439363533373633 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4447 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030336265653232626465326136396330306362373439363533373633 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit: BPF prog-id=190 op=LOAD Aug 13 01:01:27.030000 audit[4521]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000203760 items=0 ppid=4447 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030336265653232626465326136396330306362373439363533373633 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.030000 audit: BPF prog-id=191 op=LOAD Aug 13 01:01:27.030000 audit[4521]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002037a8 items=0 ppid=4447 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030336265653232626465326136396330306362373439363533373633 Aug 13 01:01:27.031000 audit: BPF prog-id=191 op=UNLOAD Aug 13 01:01:27.031000 audit: BPF prog-id=190 op=UNLOAD Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.031000 audit: BPF prog-id=192 op=LOAD Aug 13 01:01:27.031000 audit[4521]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000203bb8 items=0 ppid=4447 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030336265653232626465326136396330306362373439363533373633 Aug 13 01:01:27.081199 env[1714]: time="2025-08-13T01:01:27.078166003Z" level=info msg="StartContainer for \"003bee22bde2a69c00cb74965376319482fdd5b476987ee8a0bba897c3467988\" returns successfully" Aug 13 01:01:27.128788 systemd-networkd[1437]: caliec0e4e75b6b: Link UP Aug 13 01:01:27.132527 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliec0e4e75b6b: link becomes ready Aug 13 01:01:27.132364 systemd-networkd[1437]: caliec0e4e75b6b: Gained carrier Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.000 [INFO][4515] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0 calico-kube-controllers-54f7bf87dc- calico-system 0285aa98-0d0d-45d0-9ddd-b0347bbd6a54 996 0 2025-08-13 01:00:56 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:54f7bf87dc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-17-234 calico-kube-controllers-54f7bf87dc-k7mns eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] caliec0e4e75b6b [] [] }} ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.000 [INFO][4515] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.055 [INFO][4546] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" HandleID="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.055 [INFO][4546] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" HandleID="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df660), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-234", "pod":"calico-kube-controllers-54f7bf87dc-k7mns", "timestamp":"2025-08-13 01:01:27.05571496 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.056 [INFO][4546] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.056 [INFO][4546] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.056 [INFO][4546] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.066 [INFO][4546] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.074 [INFO][4546] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.083 [INFO][4546] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.086 [INFO][4546] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.089 [INFO][4546] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.092 [INFO][4546] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.096 [INFO][4546] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.106 [INFO][4546] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.115 [INFO][4546] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.68/26] block=192.168.100.64/26 handle="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.115 [INFO][4546] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.68/26] handle="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" host="ip-172-31-17-234" Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.115 [INFO][4546] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:27.160665 env[1714]: 2025-08-13 01:01:27.115 [INFO][4546] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.68/26] IPv6=[] ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" HandleID="k8s-pod-network.4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:27.161685 env[1714]: 2025-08-13 01:01:27.119 [INFO][4515] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0", GenerateName:"calico-kube-controllers-54f7bf87dc-", Namespace:"calico-system", SelfLink:"", UID:"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54f7bf87dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"calico-kube-controllers-54f7bf87dc-k7mns", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.100.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliec0e4e75b6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:27.161685 env[1714]: 2025-08-13 01:01:27.124 [INFO][4515] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.68/32] ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:27.161685 env[1714]: 2025-08-13 01:01:27.124 [INFO][4515] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliec0e4e75b6b ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:27.161685 env[1714]: 2025-08-13 01:01:27.135 [INFO][4515] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:27.161685 env[1714]: 2025-08-13 01:01:27.135 [INFO][4515] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0", GenerateName:"calico-kube-controllers-54f7bf87dc-", Namespace:"calico-system", SelfLink:"", UID:"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54f7bf87dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a", Pod:"calico-kube-controllers-54f7bf87dc-k7mns", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.100.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliec0e4e75b6b", MAC:"0e:0f:33:c8:d3:ce", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:27.161685 env[1714]: 2025-08-13 01:01:27.158 [INFO][4515] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a" Namespace="calico-system" Pod="calico-kube-controllers-54f7bf87dc-k7mns" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:27.264000 audit[4579]: NETFILTER_CFG table=filter:107 family=2 entries=50 op=nft_register_chain pid=4579 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:27.264000 audit[4579]: SYSCALL arch=c000003e syscall=46 success=yes exit=24804 a0=3 a1=7ffe75cff560 a2=0 a3=7ffe75cff54c items=0 ppid=3990 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.264000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:27.273470 env[1714]: time="2025-08-13T01:01:27.273393909Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:27.273765 env[1714]: time="2025-08-13T01:01:27.273451083Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:27.273765 env[1714]: time="2025-08-13T01:01:27.273478294Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:27.273765 env[1714]: time="2025-08-13T01:01:27.273662819Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a pid=4580 runtime=io.containerd.runc.v2 Aug 13 01:01:27.298793 systemd[1]: Started cri-containerd-4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a.scope. Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.349000 audit: BPF prog-id=193 op=LOAD Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4580 pid=4589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326165303264643237396261643764633962643563373233363466 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4580 pid=4589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326165303264643237396261643764633962643563373233363466 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit: BPF prog-id=194 op=LOAD Aug 13 01:01:27.351000 audit[4589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000025070 items=0 ppid=4580 pid=4589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326165303264643237396261643764633962643563373233363466 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit: BPF prog-id=195 op=LOAD Aug 13 01:01:27.351000 audit[4589]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0000250b8 items=0 ppid=4580 pid=4589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326165303264643237396261643764633962643563373233363466 Aug 13 01:01:27.351000 audit: BPF prog-id=195 op=UNLOAD Aug 13 01:01:27.351000 audit: BPF prog-id=194 op=UNLOAD Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { perfmon } for pid=4589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit[4589]: AVC avc: denied { bpf } for pid=4589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:27.351000 audit: BPF prog-id=196 op=LOAD Aug 13 01:01:27.351000 audit[4589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0000254c8 items=0 ppid=4580 pid=4589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:27.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326165303264643237396261643764633962643563373233363466 Aug 13 01:01:27.443754 env[1714]: time="2025-08-13T01:01:27.443709265Z" level=info msg="StopPodSandbox for \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\"" Aug 13 01:01:27.455798 env[1714]: time="2025-08-13T01:01:27.455751814Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54f7bf87dc-k7mns,Uid:0285aa98-0d0d-45d0-9ddd-b0347bbd6a54,Namespace:calico-system,Attempt:1,} returns sandbox id \"4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a\"" Aug 13 01:01:27.506000 audit[4539]: AVC avc: denied { getattr } for pid=4539 comm="coredns" path="cgroup:[4026532712]" dev="nsfs" ino=4026532712 scontext=system_u:system_r:svirt_lxc_net_t:s0:c855,c980 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 01:01:27.506000 audit[4539]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0000c4c68 a3=0 items=0 ppid=4447 pid=4539 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c855,c980 key=(null) Aug 13 01:01:27.506000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.572 [INFO][4622] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.572 [INFO][4622] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" iface="eth0" netns="/var/run/netns/cni-e3ecf87b-6de0-15c3-7bf1-9071dc00bead" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.574 [INFO][4622] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" iface="eth0" netns="/var/run/netns/cni-e3ecf87b-6de0-15c3-7bf1-9071dc00bead" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.574 [INFO][4622] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" iface="eth0" netns="/var/run/netns/cni-e3ecf87b-6de0-15c3-7bf1-9071dc00bead" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.574 [INFO][4622] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.574 [INFO][4622] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.637 [INFO][4629] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.638 [INFO][4629] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.638 [INFO][4629] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.646 [WARNING][4629] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.646 [INFO][4629] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.649 [INFO][4629] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:27.655928 env[1714]: 2025-08-13 01:01:27.653 [INFO][4622] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:27.656885 env[1714]: time="2025-08-13T01:01:27.656839179Z" level=info msg="TearDown network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\" successfully" Aug 13 01:01:27.657012 env[1714]: time="2025-08-13T01:01:27.656989968Z" level=info msg="StopPodSandbox for \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\" returns successfully" Aug 13 01:01:27.657993 env[1714]: time="2025-08-13T01:01:27.657943809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-m24jr,Uid:1b35ace9-10fb-4507-aa56-59cb685fb902,Namespace:calico-apiserver,Attempt:1,}" Aug 13 01:01:27.724555 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3774927343.mount: Deactivated successfully. Aug 13 01:01:27.724691 systemd[1]: run-netns-cni\x2de3ecf87b\x2d6de0\x2d15c3\x2d7bf1\x2d9071dc00bead.mount: Deactivated successfully. Aug 13 01:01:27.808554 systemd-networkd[1437]: cali2e96c967096: Gained IPv6LL Aug 13 01:01:27.916994 kubelet[2589]: I0813 01:01:27.916831 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-mdb6c" podStartSLOduration=46.916788713 podStartE2EDuration="46.916788713s" podCreationTimestamp="2025-08-13 01:00:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:01:27.888608935 +0000 UTC m=+50.680835620" watchObservedRunningTime="2025-08-13 01:01:27.916788713 +0000 UTC m=+50.709015366" Aug 13 01:01:28.004292 systemd-networkd[1437]: calib3145d97b89: Link UP Aug 13 01:01:28.009717 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:01:28.009858 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib3145d97b89: link becomes ready Aug 13 01:01:28.010041 systemd-networkd[1437]: calib3145d97b89: Gained carrier Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.782 [INFO][4639] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0 calico-apiserver-5d6885cd44- calico-apiserver 1b35ace9-10fb-4507-aa56-59cb685fb902 1009 0 2025-08-13 01:00:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5d6885cd44 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-17-234 calico-apiserver-5d6885cd44-m24jr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib3145d97b89 [] [] }} ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.783 [INFO][4639] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.902 [INFO][4651] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" HandleID="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.902 [INFO][4651] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" HandleID="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-17-234", "pod":"calico-apiserver-5d6885cd44-m24jr", "timestamp":"2025-08-13 01:01:27.893432129 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.903 [INFO][4651] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.903 [INFO][4651] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.903 [INFO][4651] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.920 [INFO][4651] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.937 [INFO][4651] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.946 [INFO][4651] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.963 [INFO][4651] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.966 [INFO][4651] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.966 [INFO][4651] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.968 [INFO][4651] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790 Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.979 [INFO][4651] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.991 [INFO][4651] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.69/26] block=192.168.100.64/26 handle="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.991 [INFO][4651] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.69/26] handle="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" host="ip-172-31-17-234" Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.991 [INFO][4651] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:28.039346 env[1714]: 2025-08-13 01:01:27.991 [INFO][4651] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.69/26] IPv6=[] ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" HandleID="k8s-pod-network.b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:28.040637 env[1714]: 2025-08-13 01:01:27.999 [INFO][4639] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b35ace9-10fb-4507-aa56-59cb685fb902", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"calico-apiserver-5d6885cd44-m24jr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3145d97b89", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:28.040637 env[1714]: 2025-08-13 01:01:28.001 [INFO][4639] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.69/32] ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:28.040637 env[1714]: 2025-08-13 01:01:28.001 [INFO][4639] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib3145d97b89 ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:28.040637 env[1714]: 2025-08-13 01:01:28.011 [INFO][4639] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:28.040637 env[1714]: 2025-08-13 01:01:28.012 [INFO][4639] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b35ace9-10fb-4507-aa56-59cb685fb902", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790", Pod:"calico-apiserver-5d6885cd44-m24jr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3145d97b89", MAC:"ca:69:1b:55:1b:fd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:28.040637 env[1714]: 2025-08-13 01:01:28.035 [INFO][4639] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-m24jr" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:28.072000 audit[4667]: NETFILTER_CFG table=filter:108 family=2 entries=58 op=nft_register_chain pid=4667 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:28.072000 audit[4667]: SYSCALL arch=c000003e syscall=46 success=yes exit=30568 a0=3 a1=7ffe95a73b80 a2=0 a3=7ffe95a73b6c items=0 ppid=3990 pid=4667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.072000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:28.079000 audit[4669]: NETFILTER_CFG table=filter:109 family=2 entries=17 op=nft_register_rule pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:28.079000 audit[4669]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff6c5031b0 a2=0 a3=7fff6c50319c items=0 ppid=2712 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.079000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:28.086000 audit[4669]: NETFILTER_CFG table=nat:110 family=2 entries=35 op=nft_register_chain pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:28.086000 audit[4669]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff6c5031b0 a2=0 a3=7fff6c50319c items=0 ppid=2712 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:28.096132 env[1714]: time="2025-08-13T01:01:28.096018813Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:28.096318 env[1714]: time="2025-08-13T01:01:28.096144082Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:28.096318 env[1714]: time="2025-08-13T01:01:28.096177339Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:28.099697 env[1714]: time="2025-08-13T01:01:28.099628125Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790 pid=4676 runtime=io.containerd.runc.v2 Aug 13 01:01:28.127846 systemd-networkd[1437]: calie86d8a9d46c: Gained IPv6LL Aug 13 01:01:28.150599 systemd[1]: run-containerd-runc-k8s.io-b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790-runc.nA1Fyu.mount: Deactivated successfully. Aug 13 01:01:28.159073 systemd[1]: Started cri-containerd-b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790.scope. Aug 13 01:01:28.242000 audit[4704]: NETFILTER_CFG table=filter:111 family=2 entries=14 op=nft_register_rule pid=4704 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:28.242000 audit[4704]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc35f8a490 a2=0 a3=7ffc35f8a47c items=0 ppid=2712 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.242000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.259000 audit: BPF prog-id=197 op=LOAD Aug 13 01:01:28.261000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.261000 audit[4687]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4676 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633134653465653732313932393830646566666132393165643963 Aug 13 01:01:28.261000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.261000 audit[4687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4676 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633134653465653732313932393830646566666132393165643963 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.262000 audit: BPF prog-id=198 op=LOAD Aug 13 01:01:28.262000 audit[4687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00018e370 items=0 ppid=4676 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633134653465653732313932393830646566666132393165643963 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.263000 audit: BPF prog-id=199 op=LOAD Aug 13 01:01:28.263000 audit[4687]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00018e3b8 items=0 ppid=4676 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633134653465653732313932393830646566666132393165643963 Aug 13 01:01:28.263000 audit: BPF prog-id=199 op=UNLOAD Aug 13 01:01:28.264000 audit: BPF prog-id=198 op=UNLOAD Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:28.264000 audit: BPF prog-id=200 op=LOAD Aug 13 01:01:28.264000 audit[4687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00018e7c8 items=0 ppid=4676 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633134653465653732313932393830646566666132393165643963 Aug 13 01:01:28.263000 audit[4704]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4704 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:28.263000 audit[4704]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc35f8a490 a2=0 a3=7ffc35f8a47c items=0 ppid=2712 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:28.263000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:28.332404 env[1714]: time="2025-08-13T01:01:28.332348687Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-m24jr,Uid:1b35ace9-10fb-4507-aa56-59cb685fb902,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790\"" Aug 13 01:01:28.433116 env[1714]: time="2025-08-13T01:01:28.433057053Z" level=info msg="StopPodSandbox for \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\"" Aug 13 01:01:28.666200 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3369229745.mount: Deactivated successfully. Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.601 [INFO][4719] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.602 [INFO][4719] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" iface="eth0" netns="/var/run/netns/cni-649859b4-0c24-554d-97a3-75103c148f5e" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.602 [INFO][4719] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" iface="eth0" netns="/var/run/netns/cni-649859b4-0c24-554d-97a3-75103c148f5e" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.603 [INFO][4719] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" iface="eth0" netns="/var/run/netns/cni-649859b4-0c24-554d-97a3-75103c148f5e" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.603 [INFO][4719] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.603 [INFO][4719] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.661 [INFO][4727] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.661 [INFO][4727] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.661 [INFO][4727] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.673 [WARNING][4727] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.673 [INFO][4727] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.675 [INFO][4727] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:28.681475 env[1714]: 2025-08-13 01:01:28.679 [INFO][4719] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:28.686662 env[1714]: time="2025-08-13T01:01:28.681574741Z" level=info msg="TearDown network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\" successfully" Aug 13 01:01:28.686662 env[1714]: time="2025-08-13T01:01:28.681607104Z" level=info msg="StopPodSandbox for \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\" returns successfully" Aug 13 01:01:28.686662 env[1714]: time="2025-08-13T01:01:28.682626920Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gcpkq,Uid:a42dde36-77be-4d3c-9660-9471372fa9f3,Namespace:kube-system,Attempt:1,}" Aug 13 01:01:28.705097 systemd-networkd[1437]: caliec0e4e75b6b: Gained IPv6LL Aug 13 01:01:28.720226 systemd[1]: run-netns-cni\x2d649859b4\x2d0c24\x2d554d\x2d97a3\x2d75103c148f5e.mount: Deactivated successfully. Aug 13 01:01:28.834962 env[1714]: time="2025-08-13T01:01:28.834918940Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:28.839016 env[1714]: time="2025-08-13T01:01:28.838970275Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:28.844186 env[1714]: time="2025-08-13T01:01:28.844128661Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:28.849634 env[1714]: time="2025-08-13T01:01:28.849591272Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:28.850592 env[1714]: time="2025-08-13T01:01:28.850562031Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Aug 13 01:01:28.852930 env[1714]: time="2025-08-13T01:01:28.852888141Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Aug 13 01:01:28.854361 env[1714]: time="2025-08-13T01:01:28.854329665Z" level=info msg="CreateContainer within sandbox \"4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Aug 13 01:01:28.880516 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount578746447.mount: Deactivated successfully. Aug 13 01:01:28.892843 env[1714]: time="2025-08-13T01:01:28.892721184Z" level=info msg="CreateContainer within sandbox \"4cb021f7e2b300c23fb19b64df79e8a68011b14332e52469e5b8c51a09478c30\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"2c8141e0795c4aff1f33a7e5f23dc0215111d27c3ac7c477ea0da6716e5fd2bb\"" Aug 13 01:01:28.895123 env[1714]: time="2025-08-13T01:01:28.895082109Z" level=info msg="StartContainer for \"2c8141e0795c4aff1f33a7e5f23dc0215111d27c3ac7c477ea0da6716e5fd2bb\"" Aug 13 01:01:28.966156 systemd[1]: Started cri-containerd-2c8141e0795c4aff1f33a7e5f23dc0215111d27c3ac7c477ea0da6716e5fd2bb.scope. Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.037665 kernel: kauditd_printk_skb: 665 callbacks suppressed Aug 13 01:01:29.037769 kernel: audit: type=1400 audit(1755046889.035:1353): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045421 kernel: audit: type=1400 audit(1755046889.035:1354): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.053830 kernel: audit: type=1400 audit(1755046889.035:1355): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.053947 kernel: audit: type=1400 audit(1755046889.035:1356): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.059543 kernel: audit: type=1400 audit(1755046889.035:1357): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.064812 kernel: audit: type=1400 audit(1755046889.035:1358): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.071835 kernel: audit: type=1400 audit(1755046889.035:1359): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.076253 kernel: audit: type=1400 audit(1755046889.035:1360): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.080729 kernel: audit: type=1400 audit(1755046889.035:1361): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.088509 kernel: audit: type=1400 audit(1755046889.035:1362): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.035000 audit: BPF prog-id=201 op=LOAD Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4075 pid=4757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263383134316530373935633461666631663333613765356632336463 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4075 pid=4757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263383134316530373935633461666631663333613765356632336463 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.036000 audit: BPF prog-id=202 op=LOAD Aug 13 01:01:29.036000 audit[4757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001d3070 items=0 ppid=4075 pid=4757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263383134316530373935633461666631663333613765356632336463 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.041000 audit: BPF prog-id=203 op=LOAD Aug 13 01:01:29.041000 audit[4757]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001d30b8 items=0 ppid=4075 pid=4757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263383134316530373935633461666631663333613765356632336463 Aug 13 01:01:29.045000 audit: BPF prog-id=203 op=UNLOAD Aug 13 01:01:29.045000 audit: BPF prog-id=202 op=UNLOAD Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { perfmon } for pid=4757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit[4757]: AVC avc: denied { bpf } for pid=4757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.045000 audit: BPF prog-id=204 op=LOAD Aug 13 01:01:29.045000 audit[4757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001d34c8 items=0 ppid=4075 pid=4757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263383134316530373935633461666631663333613765356632336463 Aug 13 01:01:29.122798 env[1714]: time="2025-08-13T01:01:29.122741179Z" level=info msg="StartContainer for \"2c8141e0795c4aff1f33a7e5f23dc0215111d27c3ac7c477ea0da6716e5fd2bb\" returns successfully" Aug 13 01:01:29.155390 systemd-networkd[1437]: calib3145d97b89: Gained IPv6LL Aug 13 01:01:29.173520 systemd-networkd[1437]: cali19c2846cd98: Link UP Aug 13 01:01:29.177852 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 01:01:29.177979 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali19c2846cd98: link becomes ready Aug 13 01:01:29.178169 systemd-networkd[1437]: cali19c2846cd98: Gained carrier Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:28.927 [INFO][4733] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0 coredns-7c65d6cfc9- kube-system a42dde36-77be-4d3c-9660-9471372fa9f3 1027 0 2025-08-13 01:00:41 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-17-234 coredns-7c65d6cfc9-gcpkq eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali19c2846cd98 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:28.927 [INFO][4733] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.009 [INFO][4765] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" HandleID="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.012 [INFO][4765] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" HandleID="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-17-234", "pod":"coredns-7c65d6cfc9-gcpkq", "timestamp":"2025-08-13 01:01:29.009443985 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.012 [INFO][4765] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.012 [INFO][4765] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.012 [INFO][4765] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.029 [INFO][4765] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.054 [INFO][4765] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.084 [INFO][4765] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.090 [INFO][4765] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.094 [INFO][4765] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.094 [INFO][4765] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.100 [INFO][4765] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.114 [INFO][4765] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.145 [INFO][4765] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.70/26] block=192.168.100.64/26 handle="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.145 [INFO][4765] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.70/26] handle="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" host="ip-172-31-17-234" Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.145 [INFO][4765] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:29.206827 env[1714]: 2025-08-13 01:01:29.145 [INFO][4765] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.70/26] IPv6=[] ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" HandleID="k8s-pod-network.d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:29.208003 env[1714]: 2025-08-13 01:01:29.149 [INFO][4733] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"a42dde36-77be-4d3c-9660-9471372fa9f3", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"coredns-7c65d6cfc9-gcpkq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19c2846cd98", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:29.208003 env[1714]: 2025-08-13 01:01:29.149 [INFO][4733] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.70/32] ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:29.208003 env[1714]: 2025-08-13 01:01:29.149 [INFO][4733] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali19c2846cd98 ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:29.208003 env[1714]: 2025-08-13 01:01:29.179 [INFO][4733] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:29.208003 env[1714]: 2025-08-13 01:01:29.180 [INFO][4733] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"a42dde36-77be-4d3c-9660-9471372fa9f3", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced", Pod:"coredns-7c65d6cfc9-gcpkq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19c2846cd98", MAC:"ca:b2:0c:e0:40:45", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:29.208003 env[1714]: 2025-08-13 01:01:29.204 [INFO][4733] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gcpkq" WorkloadEndpoint="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:29.237078 env[1714]: time="2025-08-13T01:01:29.233270681Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:29.237542 env[1714]: time="2025-08-13T01:01:29.237304150Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:29.237542 env[1714]: time="2025-08-13T01:01:29.237354212Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:29.239541 env[1714]: time="2025-08-13T01:01:29.238686078Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced pid=4804 runtime=io.containerd.runc.v2 Aug 13 01:01:29.262380 systemd[1]: Started cri-containerd-d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced.scope. Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.300000 audit: BPF prog-id=205 op=LOAD Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4804 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433313638376334396564663130383639356262613833616161343037 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4804 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433313638376334396564663130383639356262613833616161343037 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit: BPF prog-id=206 op=LOAD Aug 13 01:01:29.302000 audit[4814]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000339d10 items=0 ppid=4804 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433313638376334396564663130383639356262613833616161343037 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.302000 audit: BPF prog-id=207 op=LOAD Aug 13 01:01:29.302000 audit[4814]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000339d58 items=0 ppid=4804 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433313638376334396564663130383639356262613833616161343037 Aug 13 01:01:29.302000 audit: BPF prog-id=207 op=UNLOAD Aug 13 01:01:29.303000 audit: BPF prog-id=206 op=UNLOAD Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { perfmon } for pid=4814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit[4814]: AVC avc: denied { bpf } for pid=4814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.303000 audit: BPF prog-id=208 op=LOAD Aug 13 01:01:29.303000 audit[4814]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ba168 items=0 ppid=4804 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433313638376334396564663130383639356262613833616161343037 Aug 13 01:01:29.375435 env[1714]: time="2025-08-13T01:01:29.375347000Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gcpkq,Uid:a42dde36-77be-4d3c-9660-9471372fa9f3,Namespace:kube-system,Attempt:1,} returns sandbox id \"d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced\"" Aug 13 01:01:29.380389 env[1714]: time="2025-08-13T01:01:29.380346648Z" level=info msg="CreateContainer within sandbox \"d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 01:01:29.381000 audit[4841]: NETFILTER_CFG table=filter:113 family=2 entries=44 op=nft_register_chain pid=4841 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:29.381000 audit[4841]: SYSCALL arch=c000003e syscall=46 success=yes exit=21516 a0=3 a1=7fff86f0d080 a2=0 a3=7fff86f0d06c items=0 ppid=3990 pid=4841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.381000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:29.407919 env[1714]: time="2025-08-13T01:01:29.407854547Z" level=info msg="CreateContainer within sandbox \"d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"463daed80015faeb0b87b4a21c4359c11fcb3b323138b77054cfa5f052fffb80\"" Aug 13 01:01:29.408774 env[1714]: time="2025-08-13T01:01:29.408740467Z" level=info msg="StartContainer for \"463daed80015faeb0b87b4a21c4359c11fcb3b323138b77054cfa5f052fffb80\"" Aug 13 01:01:29.437759 env[1714]: time="2025-08-13T01:01:29.437713186Z" level=info msg="StopPodSandbox for \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\"" Aug 13 01:01:29.441211 env[1714]: time="2025-08-13T01:01:29.439656018Z" level=info msg="StopPodSandbox for \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\"" Aug 13 01:01:29.457062 systemd[1]: Started cri-containerd-463daed80015faeb0b87b4a21c4359c11fcb3b323138b77054cfa5f052fffb80.scope. Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.515000 audit: BPF prog-id=209 op=LOAD Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4804 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336461656438303031356661656230623837623461323163343335 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4804 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336461656438303031356661656230623837623461323163343335 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.523000 audit: BPF prog-id=210 op=LOAD Aug 13 01:01:29.523000 audit[4850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000252a0 items=0 ppid=4804 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336461656438303031356661656230623837623461323163343335 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.524000 audit: BPF prog-id=211 op=LOAD Aug 13 01:01:29.524000 audit[4850]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000252e8 items=0 ppid=4804 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336461656438303031356661656230623837623461323163343335 Aug 13 01:01:29.525000 audit: BPF prog-id=211 op=UNLOAD Aug 13 01:01:29.525000 audit: BPF prog-id=210 op=UNLOAD Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:29.525000 audit: BPF prog-id=212 op=LOAD Aug 13 01:01:29.525000 audit[4850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000256f8 items=0 ppid=4804 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:29.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336461656438303031356661656230623837623461323163343335 Aug 13 01:01:29.567438 env[1714]: time="2025-08-13T01:01:29.567391339Z" level=info msg="StartContainer for \"463daed80015faeb0b87b4a21c4359c11fcb3b323138b77054cfa5f052fffb80\" returns successfully" Aug 13 01:01:29.614000 audit[4882]: AVC avc: denied { getattr } for pid=4882 comm="coredns" path="cgroup:[4026532533]" dev="nsfs" ino=4026532533 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c1002 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 01:01:29.614000 audit[4882]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a828 a2=c000126ed8 a3=0 items=0 ppid=4804 pid=4882 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c1002 key=(null) Aug 13 01:01:29.614000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.629 [INFO][4883] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.630 [INFO][4883] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" iface="eth0" netns="/var/run/netns/cni-81e9ebae-34ec-cf83-fda4-5344550e0148" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.630 [INFO][4883] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" iface="eth0" netns="/var/run/netns/cni-81e9ebae-34ec-cf83-fda4-5344550e0148" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.630 [INFO][4883] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" iface="eth0" netns="/var/run/netns/cni-81e9ebae-34ec-cf83-fda4-5344550e0148" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.630 [INFO][4883] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.632 [INFO][4883] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.749 [INFO][4913] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.753 [INFO][4913] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.754 [INFO][4913] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.763 [WARNING][4913] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.763 [INFO][4913] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.767 [INFO][4913] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:29.783914 env[1714]: 2025-08-13 01:01:29.771 [INFO][4883] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:29.788253 systemd[1]: run-netns-cni\x2d81e9ebae\x2d34ec\x2dcf83\x2dfda4\x2d5344550e0148.mount: Deactivated successfully. Aug 13 01:01:29.789208 env[1714]: time="2025-08-13T01:01:29.789162657Z" level=info msg="TearDown network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\" successfully" Aug 13 01:01:29.789315 env[1714]: time="2025-08-13T01:01:29.789296677Z" level=info msg="StopPodSandbox for \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\" returns successfully" Aug 13 01:01:29.791228 env[1714]: time="2025-08-13T01:01:29.791174894Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6jvvc,Uid:b8eb7ae6-f7c7-4789-8cce-a6a4550419c1,Namespace:calico-system,Attempt:1,}" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.641 [INFO][4880] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.641 [INFO][4880] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" iface="eth0" netns="/var/run/netns/cni-05d88328-4d8d-4d8e-f215-705503719b74" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.645 [INFO][4880] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" iface="eth0" netns="/var/run/netns/cni-05d88328-4d8d-4d8e-f215-705503719b74" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.648 [INFO][4880] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" iface="eth0" netns="/var/run/netns/cni-05d88328-4d8d-4d8e-f215-705503719b74" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.648 [INFO][4880] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.648 [INFO][4880] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.764 [INFO][4922] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.779 [INFO][4922] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.779 [INFO][4922] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.796 [WARNING][4922] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.796 [INFO][4922] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.799 [INFO][4922] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:29.805951 env[1714]: 2025-08-13 01:01:29.802 [INFO][4880] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:29.809957 systemd[1]: run-netns-cni\x2d05d88328\x2d4d8d\x2d4d8e\x2df215\x2d705503719b74.mount: Deactivated successfully. Aug 13 01:01:29.816980 env[1714]: time="2025-08-13T01:01:29.816897157Z" level=info msg="TearDown network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\" successfully" Aug 13 01:01:29.817462 env[1714]: time="2025-08-13T01:01:29.817019755Z" level=info msg="StopPodSandbox for \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\" returns successfully" Aug 13 01:01:29.818451 env[1714]: time="2025-08-13T01:01:29.818419675Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-tftgx,Uid:209fc8a0-729c-4aee-bbdd-8adc41725a94,Namespace:calico-apiserver,Attempt:1,}" Aug 13 01:01:29.970076 kubelet[2589]: I0813 01:01:29.969409 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-684ffbf6bd-f7rtx" podStartSLOduration=2.861715762 podStartE2EDuration="8.969384363s" podCreationTimestamp="2025-08-13 01:01:21 +0000 UTC" firstStartedPulling="2025-08-13 01:01:22.74444297 +0000 UTC m=+45.536669624" lastFinishedPulling="2025-08-13 01:01:28.852111589 +0000 UTC m=+51.644338225" observedRunningTime="2025-08-13 01:01:29.968187391 +0000 UTC m=+52.760414061" watchObservedRunningTime="2025-08-13 01:01:29.969384363 +0000 UTC m=+52.761611022" Aug 13 01:01:29.970076 kubelet[2589]: I0813 01:01:29.969617 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-gcpkq" podStartSLOduration=48.969605667 podStartE2EDuration="48.969605667s" podCreationTimestamp="2025-08-13 01:00:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 01:01:29.933335116 +0000 UTC m=+52.725561771" watchObservedRunningTime="2025-08-13 01:01:29.969605667 +0000 UTC m=+52.761832326" Aug 13 01:01:30.099000 audit[4976]: NETFILTER_CFG table=filter:114 family=2 entries=14 op=nft_register_rule pid=4976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:30.099000 audit[4976]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc157490b0 a2=0 a3=7ffc1574909c items=0 ppid=2712 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.099000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:30.105000 audit[4976]: NETFILTER_CFG table=nat:115 family=2 entries=44 op=nft_register_rule pid=4976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:30.105000 audit[4976]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc157490b0 a2=0 a3=7ffc1574909c items=0 ppid=2712 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.105000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:30.128000 audit[4978]: NETFILTER_CFG table=filter:116 family=2 entries=13 op=nft_register_rule pid=4978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:30.128000 audit[4978]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff87e4fa80 a2=0 a3=7fff87e4fa6c items=0 ppid=2712 pid=4978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.128000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:30.163000 audit[4978]: NETFILTER_CFG table=nat:117 family=2 entries=63 op=nft_register_chain pid=4978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:30.163000 audit[4978]: SYSCALL arch=c000003e syscall=46 success=yes exit=23436 a0=3 a1=7fff87e4fa80 a2=0 a3=7fff87e4fa6c items=0 ppid=2712 pid=4978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.163000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:30.221410 systemd-networkd[1437]: calieae6c2db5ce: Link UP Aug 13 01:01:30.226322 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calieae6c2db5ce: link becomes ready Aug 13 01:01:30.225892 systemd-networkd[1437]: calieae6c2db5ce: Gained carrier Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:29.923 [INFO][4935] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0 csi-node-driver- calico-system b8eb7ae6-f7c7-4789-8cce-a6a4550419c1 1047 0 2025-08-13 01:00:56 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-17-234 csi-node-driver-6jvvc eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calieae6c2db5ce [] [] }} ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:29.924 [INFO][4935] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.073 [INFO][4961] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" HandleID="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.073 [INFO][4961] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" HandleID="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251640), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-234", "pod":"csi-node-driver-6jvvc", "timestamp":"2025-08-13 01:01:30.073061027 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.073 [INFO][4961] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.073 [INFO][4961] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.073 [INFO][4961] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.089 [INFO][4961] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.111 [INFO][4961] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.124 [INFO][4961] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.132 [INFO][4961] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.137 [INFO][4961] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.137 [INFO][4961] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.139 [INFO][4961] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2 Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.168 [INFO][4961] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.189 [INFO][4961] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.71/26] block=192.168.100.64/26 handle="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.189 [INFO][4961] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.71/26] handle="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" host="ip-172-31-17-234" Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.189 [INFO][4961] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:30.272274 env[1714]: 2025-08-13 01:01:30.189 [INFO][4961] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.71/26] IPv6=[] ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" HandleID="k8s-pod-network.39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:30.273462 env[1714]: 2025-08-13 01:01:30.206 [INFO][4935] cni-plugin/k8s.go 418: Populated endpoint ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"csi-node-driver-6jvvc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.100.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calieae6c2db5ce", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:30.273462 env[1714]: 2025-08-13 01:01:30.210 [INFO][4935] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.71/32] ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:30.273462 env[1714]: 2025-08-13 01:01:30.210 [INFO][4935] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calieae6c2db5ce ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:30.273462 env[1714]: 2025-08-13 01:01:30.229 [INFO][4935] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:30.273462 env[1714]: 2025-08-13 01:01:30.229 [INFO][4935] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2", Pod:"csi-node-driver-6jvvc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.100.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calieae6c2db5ce", MAC:"ee:8b:a6:63:41:ef", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:30.273462 env[1714]: 2025-08-13 01:01:30.267 [INFO][4935] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2" Namespace="calico-system" Pod="csi-node-driver-6jvvc" WorkloadEndpoint="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:30.350378 systemd-networkd[1437]: cali1ebc7fcea28: Link UP Aug 13 01:01:30.362918 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1ebc7fcea28: link becomes ready Aug 13 01:01:30.362661 systemd-networkd[1437]: cali1ebc7fcea28: Gained carrier Aug 13 01:01:30.372000 audit[4997]: NETFILTER_CFG table=filter:118 family=2 entries=40 op=nft_register_chain pid=4997 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:30.372000 audit[4997]: SYSCALL arch=c000003e syscall=46 success=yes exit=20784 a0=3 a1=7ffef35dd2a0 a2=0 a3=7ffef35dd28c items=0 ppid=3990 pid=4997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.372000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:30.384372 env[1714]: time="2025-08-13T01:01:30.366010331Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:30.384372 env[1714]: time="2025-08-13T01:01:30.366065054Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:30.384372 env[1714]: time="2025-08-13T01:01:30.366081562Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:30.384372 env[1714]: time="2025-08-13T01:01:30.366262643Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2 pid=4996 runtime=io.containerd.runc.v2 Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:29.988 [INFO][4948] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0 calico-apiserver-5d6885cd44- calico-apiserver 209fc8a0-729c-4aee-bbdd-8adc41725a94 1048 0 2025-08-13 01:00:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5d6885cd44 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-17-234 calico-apiserver-5d6885cd44-tftgx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1ebc7fcea28 [] [] }} ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:29.989 [INFO][4948] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.086 [INFO][4967] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" HandleID="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.086 [INFO][4967] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" HandleID="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-17-234", "pod":"calico-apiserver-5d6885cd44-tftgx", "timestamp":"2025-08-13 01:01:30.086159306 +0000 UTC"}, Hostname:"ip-172-31-17-234", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.086 [INFO][4967] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.189 [INFO][4967] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.189 [INFO][4967] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-234' Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.203 [INFO][4967] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.233 [INFO][4967] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.251 [INFO][4967] ipam/ipam.go 511: Trying affinity for 192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.260 [INFO][4967] ipam/ipam.go 158: Attempting to load block cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.264 [INFO][4967] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.100.64/26 host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.265 [INFO][4967] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.100.64/26 handle="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.271 [INFO][4967] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.287 [INFO][4967] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.100.64/26 handle="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.307 [INFO][4967] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.100.72/26] block=192.168.100.64/26 handle="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.307 [INFO][4967] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.100.72/26] handle="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" host="ip-172-31-17-234" Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.307 [INFO][4967] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:30.393288 env[1714]: 2025-08-13 01:01:30.307 [INFO][4967] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.100.72/26] IPv6=[] ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" HandleID="k8s-pod-network.4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:30.394858 env[1714]: 2025-08-13 01:01:30.315 [INFO][4948] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"209fc8a0-729c-4aee-bbdd-8adc41725a94", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"", Pod:"calico-apiserver-5d6885cd44-tftgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1ebc7fcea28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:30.394858 env[1714]: 2025-08-13 01:01:30.315 [INFO][4948] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.100.72/32] ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:30.394858 env[1714]: 2025-08-13 01:01:30.315 [INFO][4948] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1ebc7fcea28 ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:30.394858 env[1714]: 2025-08-13 01:01:30.364 [INFO][4948] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:30.394858 env[1714]: 2025-08-13 01:01:30.364 [INFO][4948] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"209fc8a0-729c-4aee-bbdd-8adc41725a94", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd", Pod:"calico-apiserver-5d6885cd44-tftgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1ebc7fcea28", MAC:"66:51:41:77:e6:67", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:30.394858 env[1714]: 2025-08-13 01:01:30.385 [INFO][4948] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd" Namespace="calico-apiserver" Pod="calico-apiserver-5d6885cd44-tftgx" WorkloadEndpoint="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:30.425146 systemd[1]: Started cri-containerd-39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2.scope. Aug 13 01:01:30.505688 env[1714]: time="2025-08-13T01:01:30.477765579Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 01:01:30.505688 env[1714]: time="2025-08-13T01:01:30.477836149Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 01:01:30.505688 env[1714]: time="2025-08-13T01:01:30.477853302Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 01:01:30.505688 env[1714]: time="2025-08-13T01:01:30.478041422Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd pid=5027 runtime=io.containerd.runc.v2 Aug 13 01:01:30.515867 systemd[1]: Started cri-containerd-4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd.scope. Aug 13 01:01:30.571000 audit[5058]: NETFILTER_CFG table=filter:119 family=2 entries=59 op=nft_register_chain pid=5058 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 01:01:30.571000 audit[5058]: SYSCALL arch=c000003e syscall=46 success=yes exit=29476 a0=3 a1=7ffd95ba5c30 a2=0 a3=7ffd95ba5c1c items=0 ppid=3990 pid=5058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.571000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 01:01:30.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.577000 audit: BPF prog-id=213 op=LOAD Aug 13 01:01:30.578000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.578000 audit[5005]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4996 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339666430663765636337626532323938376336666332356462616461 Aug 13 01:01:30.578000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.578000 audit[5005]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4996 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339666430663765636337626532323938376336666332356462616461 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit: BPF prog-id=214 op=LOAD Aug 13 01:01:30.579000 audit[5005]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001907b0 items=0 ppid=4996 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339666430663765636337626532323938376336666332356462616461 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit: BPF prog-id=215 op=LOAD Aug 13 01:01:30.579000 audit[5005]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001907f8 items=0 ppid=4996 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339666430663765636337626532323938376336666332356462616461 Aug 13 01:01:30.579000 audit: BPF prog-id=215 op=UNLOAD Aug 13 01:01:30.579000 audit: BPF prog-id=214 op=UNLOAD Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.579000 audit: BPF prog-id=216 op=LOAD Aug 13 01:01:30.579000 audit[5005]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000190c08 items=0 ppid=4996 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339666430663765636337626532323938376336666332356462616461 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.583000 audit: BPF prog-id=217 op=LOAD Aug 13 01:01:30.583000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.583000 audit[5039]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=5027 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462653438383730333937376531616337373461373362653830356634 Aug 13 01:01:30.583000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.583000 audit[5039]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=5027 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462653438383730333937376531616337373461373362653830356634 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit: BPF prog-id=218 op=LOAD Aug 13 01:01:30.584000 audit[5039]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024380 items=0 ppid=5027 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462653438383730333937376531616337373461373362653830356634 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit: BPF prog-id=219 op=LOAD Aug 13 01:01:30.584000 audit[5039]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000243c8 items=0 ppid=5027 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462653438383730333937376531616337373461373362653830356634 Aug 13 01:01:30.584000 audit: BPF prog-id=219 op=UNLOAD Aug 13 01:01:30.584000 audit: BPF prog-id=218 op=UNLOAD Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { perfmon } for pid=5039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit[5039]: AVC avc: denied { bpf } for pid=5039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:30.584000 audit: BPF prog-id=220 op=LOAD Aug 13 01:01:30.584000 audit[5039]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000247d8 items=0 ppid=5027 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:30.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462653438383730333937376531616337373461373362653830356634 Aug 13 01:01:30.613821 env[1714]: time="2025-08-13T01:01:30.613636902Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6jvvc,Uid:b8eb7ae6-f7c7-4789-8cce-a6a4550419c1,Namespace:calico-system,Attempt:1,} returns sandbox id \"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2\"" Aug 13 01:01:30.657020 env[1714]: time="2025-08-13T01:01:30.656962743Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d6885cd44-tftgx,Uid:209fc8a0-729c-4aee-bbdd-8adc41725a94,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd\"" Aug 13 01:01:31.012347 systemd-networkd[1437]: cali19c2846cd98: Gained IPv6LL Aug 13 01:01:31.332860 systemd[1]: Started sshd@8-172.31.17.234:22-147.75.109.163:34122.service. Aug 13 01:01:31.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.234:22-147.75.109.163:34122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:31.575000 audit[5079]: USER_ACCT pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:31.576477 sshd[5079]: Accepted publickey for core from 147.75.109.163 port 34122 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:31.577000 audit[5079]: CRED_ACQ pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:31.577000 audit[5079]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce1ec1230 a2=3 a3=0 items=0 ppid=1 pid=5079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:31.577000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:31.580676 sshd[5079]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:31.590585 systemd[1]: Started session-9.scope. Aug 13 01:01:31.592157 systemd-logind[1707]: New session 9 of user core. Aug 13 01:01:31.597000 audit[5079]: USER_START pid=5079 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:31.599000 audit[5081]: CRED_ACQ pid=5081 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:32.034325 systemd-networkd[1437]: calieae6c2db5ce: Gained IPv6LL Aug 13 01:01:32.416246 systemd-networkd[1437]: cali1ebc7fcea28: Gained IPv6LL Aug 13 01:01:32.450000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.450000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000bb5540 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:01:32.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:01:32.450000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.450000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f70ed0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:01:32.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:01:32.826228 sshd[5079]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:32.828000 audit[5079]: USER_END pid=5079 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:32.829000 audit[5079]: CRED_DISP pid=5079 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:32.835928 systemd-logind[1707]: Session 9 logged out. Waiting for processes to exit. Aug 13 01:01:32.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.234:22-147.75.109.163:34122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:32.837982 systemd[1]: sshd@8-172.31.17.234:22-147.75.109.163:34122.service: Deactivated successfully. Aug 13 01:01:32.839048 systemd[1]: session-9.scope: Deactivated successfully. Aug 13 01:01:32.841542 systemd-logind[1707]: Removed session 9. Aug 13 01:01:32.876000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.876000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c004665da0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:01:32.876000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:01:32.876000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.876000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c0071bf590 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:01:32.876000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:01:32.879000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.879000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0071bf5f0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:01:32.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:01:32.899000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.899000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00627edc0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:01:32.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:01:32.899000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.899000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c004665e60 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:01:32.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:01:32.900000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:32.900000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00627ee20 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:01:32.900000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:01:33.075143 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1306470908.mount: Deactivated successfully. Aug 13 01:01:34.283833 env[1714]: time="2025-08-13T01:01:34.283690152Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:34.286764 env[1714]: time="2025-08-13T01:01:34.286712790Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:34.288330 env[1714]: time="2025-08-13T01:01:34.288285077Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:34.289959 env[1714]: time="2025-08-13T01:01:34.289916637Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:34.290739 env[1714]: time="2025-08-13T01:01:34.290370045Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Aug 13 01:01:34.309434 env[1714]: time="2025-08-13T01:01:34.309358731Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Aug 13 01:01:34.366382 env[1714]: time="2025-08-13T01:01:34.366270693Z" level=info msg="CreateContainer within sandbox \"f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Aug 13 01:01:34.401459 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2203693026.mount: Deactivated successfully. Aug 13 01:01:34.407314 env[1714]: time="2025-08-13T01:01:34.407243001Z" level=info msg="CreateContainer within sandbox \"f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69\"" Aug 13 01:01:34.414509 env[1714]: time="2025-08-13T01:01:34.408345905Z" level=info msg="StartContainer for \"b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69\"" Aug 13 01:01:34.468434 systemd[1]: run-containerd-runc-k8s.io-b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69-runc.LTfedI.mount: Deactivated successfully. Aug 13 01:01:34.479839 systemd[1]: Started cri-containerd-b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69.scope. Aug 13 01:01:34.505325 kernel: kauditd_printk_skb: 334 callbacks suppressed Aug 13 01:01:34.510026 kernel: audit: type=1400 audit(1755046894.499:1468): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.515110 kernel: audit: type=1400 audit(1755046894.499:1469): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.515213 kernel: audit: type=1400 audit(1755046894.499:1470): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.519906 kernel: audit: type=1400 audit(1755046894.499:1471): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.524181 kernel: audit: type=1400 audit(1755046894.499:1472): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.539604 kernel: audit: type=1400 audit(1755046894.499:1473): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.539725 kernel: audit: type=1400 audit(1755046894.499:1474): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.544676 kernel: audit: type=1400 audit(1755046894.499:1475): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.557477 kernel: audit: type=1400 audit(1755046894.499:1476): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.557694 kernel: audit: type=1400 audit(1755046894.499:1477): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.499000 audit: BPF prog-id=221 op=LOAD Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4399 pid=5100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:34.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236396532366565653861343063653561653132373862633536623561 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4399 pid=5100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:34.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236396532366565653861343063653561653132373862633536623561 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.500000 audit: BPF prog-id=222 op=LOAD Aug 13 01:01:34.500000 audit[5100]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003a2db0 items=0 ppid=4399 pid=5100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:34.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236396532366565653861343063653561653132373862633536623561 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.504000 audit: BPF prog-id=223 op=LOAD Aug 13 01:01:34.504000 audit[5100]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003a2df8 items=0 ppid=4399 pid=5100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:34.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236396532366565653861343063653561653132373862633536623561 Aug 13 01:01:34.504000 audit: BPF prog-id=223 op=UNLOAD Aug 13 01:01:34.504000 audit: BPF prog-id=222 op=UNLOAD Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { perfmon } for pid=5100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit[5100]: AVC avc: denied { bpf } for pid=5100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:34.505000 audit: BPF prog-id=224 op=LOAD Aug 13 01:01:34.505000 audit[5100]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a3208 items=0 ppid=4399 pid=5100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:34.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236396532366565653861343063653561653132373862633536623561 Aug 13 01:01:34.594793 env[1714]: time="2025-08-13T01:01:34.594649699Z" level=info msg="StartContainer for \"b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69\" returns successfully" Aug 13 01:01:35.350705 kubelet[2589]: I0813 01:01:35.347054 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-g29zb" podStartSLOduration=32.981906092 podStartE2EDuration="40.338597331s" podCreationTimestamp="2025-08-13 01:00:55 +0000 UTC" firstStartedPulling="2025-08-13 01:01:26.950341596 +0000 UTC m=+49.742568247" lastFinishedPulling="2025-08-13 01:01:34.307032835 +0000 UTC m=+57.099259486" observedRunningTime="2025-08-13 01:01:35.325194163 +0000 UTC m=+58.117420826" watchObservedRunningTime="2025-08-13 01:01:35.338597331 +0000 UTC m=+58.130823991" Aug 13 01:01:35.387000 audit[5136]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=5136 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:35.387000 audit[5136]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffde4767140 a2=0 a3=7ffde476712c items=0 ppid=2712 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:35.387000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:35.392000 audit[5136]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=5136 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:35.392000 audit[5136]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffde4767140 a2=0 a3=7ffde476712c items=0 ppid=2712 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:35.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:36.562000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:36.562000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007616c0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:01:36.562000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:01:36.565000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:36.565000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007616e0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:01:36.565000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:01:36.565000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:36.565000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000761700 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:01:36.565000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:01:36.570000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:01:36.570000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018ab2a0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:01:36.570000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:01:37.189186 systemd[1]: run-containerd-runc-k8s.io-b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69-runc.jtr6uC.mount: Deactivated successfully. Aug 13 01:01:37.540042 env[1714]: time="2025-08-13T01:01:37.539559037Z" level=info msg="StopPodSandbox for \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\"" Aug 13 01:01:37.854350 systemd[1]: Started sshd@9-172.31.17.234:22-147.75.109.163:34138.service. Aug 13 01:01:37.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.234:22-147.75.109.163:34138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:38.121000 audit[5198]: USER_ACCT pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:38.125409 sshd[5198]: Accepted publickey for core from 147.75.109.163 port 34138 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:38.125000 audit[5198]: CRED_ACQ pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:38.126000 audit[5198]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff45bd9130 a2=3 a3=0 items=0 ppid=1 pid=5198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:38.126000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:38.130280 sshd[5198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:38.159016 systemd[1]: Started session-10.scope. Aug 13 01:01:38.160772 systemd-logind[1707]: New session 10 of user core. Aug 13 01:01:38.168000 audit[5198]: USER_START pid=5198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:38.170000 audit[5203]: CRED_ACQ pid=5203 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.060 [WARNING][5192] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"209fc8a0-729c-4aee-bbdd-8adc41725a94", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd", Pod:"calico-apiserver-5d6885cd44-tftgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1ebc7fcea28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.066 [INFO][5192] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.066 [INFO][5192] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" iface="eth0" netns="" Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.066 [INFO][5192] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.066 [INFO][5192] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.677 [INFO][5202] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.679 [INFO][5202] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.679 [INFO][5202] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.701 [WARNING][5202] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.701 [INFO][5202] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.704 [INFO][5202] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:38.716569 env[1714]: 2025-08-13 01:01:38.709 [INFO][5192] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:38.718684 env[1714]: time="2025-08-13T01:01:38.716612954Z" level=info msg="TearDown network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\" successfully" Aug 13 01:01:38.718684 env[1714]: time="2025-08-13T01:01:38.716651322Z" level=info msg="StopPodSandbox for \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\" returns successfully" Aug 13 01:01:38.998370 env[1714]: time="2025-08-13T01:01:38.997370603Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:39.003898 env[1714]: time="2025-08-13T01:01:39.003758174Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:39.007664 env[1714]: time="2025-08-13T01:01:39.007615815Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:39.012223 env[1714]: time="2025-08-13T01:01:39.012181024Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:39.012918 env[1714]: time="2025-08-13T01:01:39.012871568Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Aug 13 01:01:39.728136 systemd[1]: run-containerd-runc-k8s.io-21ee88c27880a69195cb988a0c2e2e0ca48a751fba5850cb838dd98ee4b7309a-runc.KqGpMX.mount: Deactivated successfully. Aug 13 01:01:39.782162 env[1714]: time="2025-08-13T01:01:39.782125756Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 01:01:39.794269 env[1714]: time="2025-08-13T01:01:39.793347173Z" level=info msg="RemovePodSandbox for \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\"" Aug 13 01:01:39.794269 env[1714]: time="2025-08-13T01:01:39.793387656Z" level=info msg="Forcibly stopping sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\"" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.065 [WARNING][5245] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"209fc8a0-729c-4aee-bbdd-8adc41725a94", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd", Pod:"calico-apiserver-5d6885cd44-tftgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1ebc7fcea28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.069 [INFO][5245] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.069 [INFO][5245] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" iface="eth0" netns="" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.069 [INFO][5245] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.069 [INFO][5245] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.165 [INFO][5253] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.166 [INFO][5253] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.166 [INFO][5253] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.184 [WARNING][5253] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.184 [INFO][5253] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" HandleID="k8s-pod-network.26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--tftgx-eth0" Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.186 [INFO][5253] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:40.195445 env[1714]: 2025-08-13 01:01:40.192 [INFO][5245] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c" Aug 13 01:01:40.198980 env[1714]: time="2025-08-13T01:01:40.196056951Z" level=info msg="TearDown network for sandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\" successfully" Aug 13 01:01:40.198980 env[1714]: time="2025-08-13T01:01:40.197448856Z" level=info msg="CreateContainer within sandbox \"4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Aug 13 01:01:40.211400 env[1714]: time="2025-08-13T01:01:40.211291952Z" level=info msg="RemovePodSandbox \"26920f2c40a10f88e16fda346000d22374ace64cc074198f923c5b0e8eb8ab9c\" returns successfully" Aug 13 01:01:40.247946 sshd[5198]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:40.255000 audit[5198]: USER_END pid=5198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.263167 kernel: kauditd_printk_skb: 73 callbacks suppressed Aug 13 01:01:40.265249 kernel: audit: type=1106 audit(1755046900.255:1498): pid=5198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.261333 systemd[1]: sshd@9-172.31.17.234:22-147.75.109.163:34138.service: Deactivated successfully. Aug 13 01:01:40.262439 systemd[1]: session-10.scope: Deactivated successfully. Aug 13 01:01:40.267379 systemd-logind[1707]: Session 10 logged out. Waiting for processes to exit. Aug 13 01:01:40.269548 systemd-logind[1707]: Removed session 10. Aug 13 01:01:40.256000 audit[5198]: CRED_DISP pid=5198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.281213 env[1714]: time="2025-08-13T01:01:40.281156127Z" level=info msg="CreateContainer within sandbox \"4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b4b2b3f3aafec81c8b125483d9bf55054f5501d8e7a5018c2df3508f954ee9c2\"" Aug 13 01:01:40.282218 kernel: audit: type=1104 audit(1755046900.256:1499): pid=5198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.287964 systemd[1]: Started sshd@10-172.31.17.234:22-147.75.109.163:60500.service. Aug 13 01:01:40.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.234:22-147.75.109.163:34138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:40.297154 kernel: audit: type=1131 audit(1755046900.260:1500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.234:22-147.75.109.163:34138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:40.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.234:22-147.75.109.163:60500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:40.305514 kernel: audit: type=1130 audit(1755046900.286:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.234:22-147.75.109.163:60500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:40.331890 env[1714]: time="2025-08-13T01:01:40.331355958Z" level=info msg="StopPodSandbox for \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\"" Aug 13 01:01:40.340600 env[1714]: time="2025-08-13T01:01:40.340562444Z" level=info msg="StartContainer for \"b4b2b3f3aafec81c8b125483d9bf55054f5501d8e7a5018c2df3508f954ee9c2\"" Aug 13 01:01:40.409000 systemd[1]: Started cri-containerd-b4b2b3f3aafec81c8b125483d9bf55054f5501d8e7a5018c2df3508f954ee9c2.scope. Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.506498 kernel: audit: type=1400 audit(1755046900.486:1502): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.506594 kernel: audit: type=1400 audit(1755046900.486:1503): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.522137 kernel: audit: type=1400 audit(1755046900.486:1504): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.522228 kernel: audit: type=1400 audit(1755046900.486:1505): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.531630 kernel: audit: type=1400 audit(1755046900.486:1506): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.534820 sshd[5261]: Accepted publickey for core from 147.75.109.163 port 60500 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:40.540242 sshd[5261]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.553024 kernel: audit: type=1400 audit(1755046900.486:1507): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.557761 systemd[1]: Started session-11.scope. Aug 13 01:01:40.559606 systemd-logind[1707]: New session 11 of user core. Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.486000 audit: BPF prog-id=225 op=LOAD Aug 13 01:01:40.495000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.495000 audit[5285]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4580 pid=5285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:40.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623262336633616166656338316338623132353438336439626635 Aug 13 01:01:40.495000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.495000 audit[5285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4580 pid=5285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:40.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623262336633616166656338316338623132353438336439626635 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.501000 audit: BPF prog-id=226 op=LOAD Aug 13 01:01:40.501000 audit[5285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00034ab60 items=0 ppid=4580 pid=5285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:40.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623262336633616166656338316338623132353438336439626635 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit: BPF prog-id=227 op=LOAD Aug 13 01:01:40.503000 audit[5285]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00034aba8 items=0 ppid=4580 pid=5285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:40.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623262336633616166656338316338623132353438336439626635 Aug 13 01:01:40.503000 audit: BPF prog-id=227 op=UNLOAD Aug 13 01:01:40.503000 audit: BPF prog-id=226 op=UNLOAD Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { perfmon } for pid=5285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit[5285]: AVC avc: denied { bpf } for pid=5285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:40.503000 audit: BPF prog-id=228 op=LOAD Aug 13 01:01:40.503000 audit[5285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00034afb8 items=0 ppid=4580 pid=5285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:40.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623262336633616166656338316338623132353438336439626635 Aug 13 01:01:40.533000 audit[5261]: USER_ACCT pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.536000 audit[5261]: CRED_ACQ pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.536000 audit[5261]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd92409d70 a2=3 a3=0 items=0 ppid=1 pid=5261 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:40.536000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:40.567000 audit[5261]: USER_START pid=5261 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.575000 audit[5311]: CRED_ACQ pid=5311 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.412 [WARNING][5273] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2", Pod:"csi-node-driver-6jvvc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.100.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calieae6c2db5ce", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.412 [INFO][5273] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.412 [INFO][5273] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" iface="eth0" netns="" Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.412 [INFO][5273] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.412 [INFO][5273] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.542 [INFO][5296] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.544 [INFO][5296] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.544 [INFO][5296] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.586 [WARNING][5296] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.586 [INFO][5296] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.597 [INFO][5296] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:40.614513 env[1714]: 2025-08-13 01:01:40.604 [INFO][5273] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.614513 env[1714]: time="2025-08-13T01:01:40.609766107Z" level=info msg="TearDown network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\" successfully" Aug 13 01:01:40.614513 env[1714]: time="2025-08-13T01:01:40.609806620Z" level=info msg="StopPodSandbox for \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\" returns successfully" Aug 13 01:01:40.616544 env[1714]: time="2025-08-13T01:01:40.615878664Z" level=info msg="RemovePodSandbox for \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\"" Aug 13 01:01:40.616544 env[1714]: time="2025-08-13T01:01:40.615933107Z" level=info msg="Forcibly stopping sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\"" Aug 13 01:01:40.659059 env[1714]: time="2025-08-13T01:01:40.658996140Z" level=info msg="StartContainer for \"b4b2b3f3aafec81c8b125483d9bf55054f5501d8e7a5018c2df3508f954ee9c2\" returns successfully" Aug 13 01:01:40.703134 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3906826101.mount: Deactivated successfully. Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.746 [WARNING][5326] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b8eb7ae6-f7c7-4789-8cce-a6a4550419c1", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2", Pod:"csi-node-driver-6jvvc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.100.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calieae6c2db5ce", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.746 [INFO][5326] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.746 [INFO][5326] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" iface="eth0" netns="" Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.746 [INFO][5326] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.746 [INFO][5326] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.846 [INFO][5349] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.851 [INFO][5349] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.851 [INFO][5349] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.859 [WARNING][5349] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.859 [INFO][5349] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" HandleID="k8s-pod-network.e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Workload="ip--172--31--17--234-k8s-csi--node--driver--6jvvc-eth0" Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.861 [INFO][5349] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:40.891663 env[1714]: 2025-08-13 01:01:40.871 [INFO][5326] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1" Aug 13 01:01:40.894040 env[1714]: time="2025-08-13T01:01:40.893997727Z" level=info msg="TearDown network for sandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\" successfully" Aug 13 01:01:40.941839 env[1714]: time="2025-08-13T01:01:40.940471212Z" level=info msg="RemovePodSandbox \"e2c2175140a388ffb9083807daf53fe92caaebe3eef2d3a8061b3cf728f035d1\" returns successfully" Aug 13 01:01:40.948356 env[1714]: time="2025-08-13T01:01:40.948317643Z" level=info msg="StopPodSandbox for \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\"" Aug 13 01:01:40.962282 kubelet[2589]: I0813 01:01:40.946341 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-54f7bf87dc-k7mns" podStartSLOduration=32.545267131 podStartE2EDuration="44.835737451s" podCreationTimestamp="2025-08-13 01:00:56 +0000 UTC" firstStartedPulling="2025-08-13 01:01:27.458460632 +0000 UTC m=+50.250687288" lastFinishedPulling="2025-08-13 01:01:39.74893096 +0000 UTC m=+62.541157608" observedRunningTime="2025-08-13 01:01:40.835330233 +0000 UTC m=+63.627556920" watchObservedRunningTime="2025-08-13 01:01:40.835737451 +0000 UTC m=+63.627964117" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.054 [WARNING][5387] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0", GenerateName:"calico-kube-controllers-54f7bf87dc-", Namespace:"calico-system", SelfLink:"", UID:"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54", ResourceVersion:"1129", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54f7bf87dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a", Pod:"calico-kube-controllers-54f7bf87dc-k7mns", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.100.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliec0e4e75b6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.054 [INFO][5387] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.054 [INFO][5387] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" iface="eth0" netns="" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.054 [INFO][5387] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.054 [INFO][5387] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.127 [INFO][5397] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.128 [INFO][5397] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.128 [INFO][5397] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.138 [WARNING][5397] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.139 [INFO][5397] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.141 [INFO][5397] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:41.148553 env[1714]: 2025-08-13 01:01:41.144 [INFO][5387] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.149760 env[1714]: time="2025-08-13T01:01:41.149704352Z" level=info msg="TearDown network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\" successfully" Aug 13 01:01:41.149886 env[1714]: time="2025-08-13T01:01:41.149862342Z" level=info msg="StopPodSandbox for \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\" returns successfully" Aug 13 01:01:41.150742 env[1714]: time="2025-08-13T01:01:41.150709708Z" level=info msg="RemovePodSandbox for \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\"" Aug 13 01:01:41.151112 env[1714]: time="2025-08-13T01:01:41.151050452Z" level=info msg="Forcibly stopping sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\"" Aug 13 01:01:41.257585 sshd[5261]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:41.273000 audit[5261]: USER_END pid=5261 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:41.274000 audit[5261]: CRED_DISP pid=5261 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:41.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.234:22-147.75.109.163:60500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:41.276705 systemd[1]: sshd@10-172.31.17.234:22-147.75.109.163:60500.service: Deactivated successfully. Aug 13 01:01:41.284642 systemd[1]: session-11.scope: Deactivated successfully. Aug 13 01:01:41.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.234:22-147.75.109.163:60514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:41.292246 systemd[1]: Started sshd@11-172.31.17.234:22-147.75.109.163:60514.service. Aug 13 01:01:41.295333 systemd-logind[1707]: Session 11 logged out. Waiting for processes to exit. Aug 13 01:01:41.299639 systemd-logind[1707]: Removed session 11. Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.313 [WARNING][5413] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0", GenerateName:"calico-kube-controllers-54f7bf87dc-", Namespace:"calico-system", SelfLink:"", UID:"0285aa98-0d0d-45d0-9ddd-b0347bbd6a54", ResourceVersion:"1129", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54f7bf87dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4d2ae02dd279bad7dc9bd5c72364f8d9ddf18aab9544b0b5f192c3413f23e77a", Pod:"calico-kube-controllers-54f7bf87dc-k7mns", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.100.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliec0e4e75b6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.314 [INFO][5413] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.315 [INFO][5413] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" iface="eth0" netns="" Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.315 [INFO][5413] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.315 [INFO][5413] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.413 [INFO][5424] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.413 [INFO][5424] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.414 [INFO][5424] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.425 [WARNING][5424] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.425 [INFO][5424] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" HandleID="k8s-pod-network.f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Workload="ip--172--31--17--234-k8s-calico--kube--controllers--54f7bf87dc--k7mns-eth0" Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.428 [INFO][5424] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:41.442393 env[1714]: 2025-08-13 01:01:41.439 [INFO][5413] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1" Aug 13 01:01:41.444161 env[1714]: time="2025-08-13T01:01:41.443273332Z" level=info msg="TearDown network for sandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\" successfully" Aug 13 01:01:41.455493 env[1714]: time="2025-08-13T01:01:41.455430864Z" level=info msg="RemovePodSandbox \"f3286aa454ab102e74065e8e54ed6b6fa6bb2be1bbe7ee5637a5c83af5912ab1\" returns successfully" Aug 13 01:01:41.456705 env[1714]: time="2025-08-13T01:01:41.456669772Z" level=info msg="StopPodSandbox for \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\"" Aug 13 01:01:41.564000 audit[5420]: USER_ACCT pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:41.564944 sshd[5420]: Accepted publickey for core from 147.75.109.163 port 60514 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:41.565000 audit[5420]: CRED_ACQ pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:41.565000 audit[5420]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff943fc400 a2=3 a3=0 items=0 ppid=1 pid=5420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:41.565000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:41.571578 sshd[5420]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:41.584478 systemd[1]: Started session-12.scope. Aug 13 01:01:41.586628 systemd-logind[1707]: New session 12 of user core. Aug 13 01:01:41.597000 audit[5420]: USER_START pid=5420 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:41.600000 audit[5451]: CRED_ACQ pid=5451 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.554 [WARNING][5440] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d8889dc4-f418-48a4-9d9a-eba6c73b2145", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7", Pod:"coredns-7c65d6cfc9-mdb6c", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2e96c967096", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.554 [INFO][5440] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.554 [INFO][5440] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" iface="eth0" netns="" Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.554 [INFO][5440] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.554 [INFO][5440] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.647 [INFO][5447] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.648 [INFO][5447] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.648 [INFO][5447] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.661 [WARNING][5447] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.661 [INFO][5447] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.670 [INFO][5447] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:41.678611 env[1714]: 2025-08-13 01:01:41.674 [INFO][5440] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.679535 env[1714]: time="2025-08-13T01:01:41.679475791Z" level=info msg="TearDown network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\" successfully" Aug 13 01:01:41.679751 env[1714]: time="2025-08-13T01:01:41.679727861Z" level=info msg="StopPodSandbox for \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\" returns successfully" Aug 13 01:01:41.680620 env[1714]: time="2025-08-13T01:01:41.680594560Z" level=info msg="RemovePodSandbox for \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\"" Aug 13 01:01:41.680937 env[1714]: time="2025-08-13T01:01:41.680890355Z" level=info msg="Forcibly stopping sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\"" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.783 [WARNING][5467] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d8889dc4-f418-48a4-9d9a-eba6c73b2145", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"4cdac03031ff04f6309ab19c488827aeea709f66b163b05f6e4c08e5723f10f7", Pod:"coredns-7c65d6cfc9-mdb6c", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2e96c967096", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.784 [INFO][5467] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.784 [INFO][5467] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" iface="eth0" netns="" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.784 [INFO][5467] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.784 [INFO][5467] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.839 [INFO][5480] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.839 [INFO][5480] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.839 [INFO][5480] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.865 [WARNING][5480] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.865 [INFO][5480] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" HandleID="k8s-pod-network.80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--mdb6c-eth0" Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.877 [INFO][5480] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:41.889600 env[1714]: 2025-08-13 01:01:41.884 [INFO][5467] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e" Aug 13 01:01:41.893045 env[1714]: time="2025-08-13T01:01:41.892995103Z" level=info msg="TearDown network for sandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\" successfully" Aug 13 01:01:41.910776 systemd[1]: run-containerd-runc-k8s.io-b4b2b3f3aafec81c8b125483d9bf55054f5501d8e7a5018c2df3508f954ee9c2-runc.0suSRp.mount: Deactivated successfully. Aug 13 01:01:41.913392 env[1714]: time="2025-08-13T01:01:41.913345861Z" level=info msg="RemovePodSandbox \"80e8ca93c7f1cc8972d48520037075aa2be34f90918ce85c1e0fef85811a3c6e\" returns successfully" Aug 13 01:01:41.914295 env[1714]: time="2025-08-13T01:01:41.914260524Z" level=info msg="StopPodSandbox for \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\"" Aug 13 01:01:42.028447 sshd[5420]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:42.029000 audit[5420]: USER_END pid=5420 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:42.030000 audit[5420]: CRED_DISP pid=5420 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:42.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.234:22-147.75.109.163:60514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:42.036466 systemd[1]: sshd@11-172.31.17.234:22-147.75.109.163:60514.service: Deactivated successfully. Aug 13 01:01:42.037780 systemd[1]: session-12.scope: Deactivated successfully. Aug 13 01:01:42.040195 systemd-logind[1707]: Session 12 logged out. Waiting for processes to exit. Aug 13 01:01:42.042212 systemd-logind[1707]: Removed session 12. Aug 13 01:01:42.059175 systemd[1]: run-containerd-runc-k8s.io-b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69-runc.MMFpgB.mount: Deactivated successfully. Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.096 [WARNING][5511] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b35ace9-10fb-4507-aa56-59cb685fb902", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790", Pod:"calico-apiserver-5d6885cd44-m24jr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3145d97b89", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.096 [INFO][5511] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.096 [INFO][5511] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" iface="eth0" netns="" Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.096 [INFO][5511] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.096 [INFO][5511] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.188 [INFO][5540] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.189 [INFO][5540] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.189 [INFO][5540] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.201 [WARNING][5540] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.201 [INFO][5540] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.203 [INFO][5540] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:42.212200 env[1714]: 2025-08-13 01:01:42.207 [INFO][5511] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.212200 env[1714]: time="2025-08-13T01:01:42.211480086Z" level=info msg="TearDown network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\" successfully" Aug 13 01:01:42.212200 env[1714]: time="2025-08-13T01:01:42.211598505Z" level=info msg="StopPodSandbox for \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\" returns successfully" Aug 13 01:01:42.213714 env[1714]: time="2025-08-13T01:01:42.213275396Z" level=info msg="RemovePodSandbox for \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\"" Aug 13 01:01:42.213714 env[1714]: time="2025-08-13T01:01:42.213323927Z" level=info msg="Forcibly stopping sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\"" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.271 [WARNING][5574] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0", GenerateName:"calico-apiserver-5d6885cd44-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b35ace9-10fb-4507-aa56-59cb685fb902", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d6885cd44", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790", Pod:"calico-apiserver-5d6885cd44-m24jr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.100.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3145d97b89", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.272 [INFO][5574] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.272 [INFO][5574] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" iface="eth0" netns="" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.272 [INFO][5574] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.272 [INFO][5574] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.304 [INFO][5586] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.305 [INFO][5586] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.305 [INFO][5586] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.313 [WARNING][5586] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.313 [INFO][5586] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" HandleID="k8s-pod-network.f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Workload="ip--172--31--17--234-k8s-calico--apiserver--5d6885cd44--m24jr-eth0" Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.316 [INFO][5586] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:42.321074 env[1714]: 2025-08-13 01:01:42.318 [INFO][5574] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37" Aug 13 01:01:42.322953 env[1714]: time="2025-08-13T01:01:42.321110800Z" level=info msg="TearDown network for sandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\" successfully" Aug 13 01:01:42.328586 env[1714]: time="2025-08-13T01:01:42.328535423Z" level=info msg="RemovePodSandbox \"f1fcdf14556ad6a5529e45c92ac943d0f7fe96cbc2058da38dc3ad092711bf37\" returns successfully" Aug 13 01:01:42.329171 env[1714]: time="2025-08-13T01:01:42.329117201Z" level=info msg="StopPodSandbox for \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\"" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.374 [WARNING][5600] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"a524319c-5d30-44a0-a41e-3169292765bb", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d", Pod:"goldmane-58fd7646b9-g29zb", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.100.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie86d8a9d46c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.374 [INFO][5600] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.375 [INFO][5600] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" iface="eth0" netns="" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.375 [INFO][5600] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.375 [INFO][5600] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.432 [INFO][5608] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.432 [INFO][5608] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.433 [INFO][5608] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.447 [WARNING][5608] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.447 [INFO][5608] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.449 [INFO][5608] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:42.454550 env[1714]: 2025-08-13 01:01:42.452 [INFO][5600] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.455805 env[1714]: time="2025-08-13T01:01:42.455295045Z" level=info msg="TearDown network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\" successfully" Aug 13 01:01:42.455805 env[1714]: time="2025-08-13T01:01:42.455348081Z" level=info msg="StopPodSandbox for \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\" returns successfully" Aug 13 01:01:42.456140 env[1714]: time="2025-08-13T01:01:42.456114756Z" level=info msg="RemovePodSandbox for \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\"" Aug 13 01:01:42.456267 env[1714]: time="2025-08-13T01:01:42.456224935Z" level=info msg="Forcibly stopping sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\"" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.605 [WARNING][5624] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"a524319c-5d30-44a0-a41e-3169292765bb", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"f2bc8bf72b76ce50e4eea5b3b493522d600e7fba10d8f823dc71f47efe68e00d", Pod:"goldmane-58fd7646b9-g29zb", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.100.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie86d8a9d46c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.606 [INFO][5624] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.606 [INFO][5624] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" iface="eth0" netns="" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.606 [INFO][5624] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.606 [INFO][5624] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.686 [INFO][5631] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.686 [INFO][5631] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.687 [INFO][5631] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.695 [WARNING][5631] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.695 [INFO][5631] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" HandleID="k8s-pod-network.758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Workload="ip--172--31--17--234-k8s-goldmane--58fd7646b9--g29zb-eth0" Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.697 [INFO][5631] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:42.703913 env[1714]: 2025-08-13 01:01:42.700 [INFO][5624] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183" Aug 13 01:01:42.707174 env[1714]: time="2025-08-13T01:01:42.703949413Z" level=info msg="TearDown network for sandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\" successfully" Aug 13 01:01:42.807113 env[1714]: time="2025-08-13T01:01:42.807016934Z" level=info msg="RemovePodSandbox \"758bb18b9660965fb54e32c64f19ff12ab5eb13e30e7fd83979799eb52028183\" returns successfully" Aug 13 01:01:42.807708 env[1714]: time="2025-08-13T01:01:42.807680004Z" level=info msg="StopPodSandbox for \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\"" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.929 [WARNING][5646] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"a42dde36-77be-4d3c-9660-9471372fa9f3", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced", Pod:"coredns-7c65d6cfc9-gcpkq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19c2846cd98", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.930 [INFO][5646] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.930 [INFO][5646] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" iface="eth0" netns="" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.930 [INFO][5646] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.934 [INFO][5646] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.990 [INFO][5654] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.991 [INFO][5654] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.991 [INFO][5654] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.999 [WARNING][5654] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:42.999 [INFO][5654] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:43.001 [INFO][5654] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:43.008894 env[1714]: 2025-08-13 01:01:43.004 [INFO][5646] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.010762 env[1714]: time="2025-08-13T01:01:43.008869093Z" level=info msg="TearDown network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\" successfully" Aug 13 01:01:43.010762 env[1714]: time="2025-08-13T01:01:43.010447280Z" level=info msg="StopPodSandbox for \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\" returns successfully" Aug 13 01:01:43.011429 env[1714]: time="2025-08-13T01:01:43.011397940Z" level=info msg="RemovePodSandbox for \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\"" Aug 13 01:01:43.011553 env[1714]: time="2025-08-13T01:01:43.011441715Z" level=info msg="Forcibly stopping sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\"" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.138 [WARNING][5671] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"a42dde36-77be-4d3c-9660-9471372fa9f3", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 1, 0, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-234", ContainerID:"d31687c49edf108695bba83aaa4079bf0037b4476ee6ded30a23206eaf246ced", Pod:"coredns-7c65d6cfc9-gcpkq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.100.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19c2846cd98", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.139 [INFO][5671] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.139 [INFO][5671] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" iface="eth0" netns="" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.139 [INFO][5671] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.139 [INFO][5671] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.180 [INFO][5679] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.182 [INFO][5679] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.182 [INFO][5679] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.191 [WARNING][5679] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.191 [INFO][5679] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" HandleID="k8s-pod-network.3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Workload="ip--172--31--17--234-k8s-coredns--7c65d6cfc9--gcpkq-eth0" Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.193 [INFO][5679] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:43.198673 env[1714]: 2025-08-13 01:01:43.195 [INFO][5671] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8" Aug 13 01:01:43.201372 env[1714]: time="2025-08-13T01:01:43.198716295Z" level=info msg="TearDown network for sandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\" successfully" Aug 13 01:01:43.206728 env[1714]: time="2025-08-13T01:01:43.206647220Z" level=info msg="RemovePodSandbox \"3728b85ee86d8ca7dd55bcfa7fe69e0ee43af5b8fe5142d8cea67e43ac429ae8\" returns successfully" Aug 13 01:01:43.207626 env[1714]: time="2025-08-13T01:01:43.207592184Z" level=info msg="StopPodSandbox for \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\"" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.282 [WARNING][5695] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.282 [INFO][5695] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.282 [INFO][5695] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" iface="eth0" netns="" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.282 [INFO][5695] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.282 [INFO][5695] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.322 [INFO][5702] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.322 [INFO][5702] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.322 [INFO][5702] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.332 [WARNING][5702] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.332 [INFO][5702] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.334 [INFO][5702] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:43.341668 env[1714]: 2025-08-13 01:01:43.339 [INFO][5695] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.343433 env[1714]: time="2025-08-13T01:01:43.341715942Z" level=info msg="TearDown network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\" successfully" Aug 13 01:01:43.343433 env[1714]: time="2025-08-13T01:01:43.341751428Z" level=info msg="StopPodSandbox for \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\" returns successfully" Aug 13 01:01:43.343433 env[1714]: time="2025-08-13T01:01:43.342399720Z" level=info msg="RemovePodSandbox for \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\"" Aug 13 01:01:43.343433 env[1714]: time="2025-08-13T01:01:43.342450115Z" level=info msg="Forcibly stopping sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\"" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.424 [WARNING][5718] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" WorkloadEndpoint="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.424 [INFO][5718] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.424 [INFO][5718] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" iface="eth0" netns="" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.424 [INFO][5718] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.424 [INFO][5718] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.491 [INFO][5725] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.492 [INFO][5725] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.492 [INFO][5725] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.501 [WARNING][5725] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.501 [INFO][5725] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" HandleID="k8s-pod-network.8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Workload="ip--172--31--17--234-k8s-whisker--67d4d6876--njm4k-eth0" Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.503 [INFO][5725] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 01:01:43.508613 env[1714]: 2025-08-13 01:01:43.506 [INFO][5718] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d" Aug 13 01:01:43.511644 env[1714]: time="2025-08-13T01:01:43.509174468Z" level=info msg="TearDown network for sandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\" successfully" Aug 13 01:01:43.518147 env[1714]: time="2025-08-13T01:01:43.518098716Z" level=info msg="RemovePodSandbox \"8437f58a106abbbcbea3e7eda33b0006b63410559f16121e35afe48c0a4a412d\" returns successfully" Aug 13 01:01:44.336070 env[1714]: time="2025-08-13T01:01:44.336020135Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:44.340243 env[1714]: time="2025-08-13T01:01:44.340199971Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:44.343247 env[1714]: time="2025-08-13T01:01:44.343203563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:44.346168 env[1714]: time="2025-08-13T01:01:44.346120537Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:44.346948 env[1714]: time="2025-08-13T01:01:44.346909260Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Aug 13 01:01:44.374243 env[1714]: time="2025-08-13T01:01:44.374196186Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Aug 13 01:01:44.409058 env[1714]: time="2025-08-13T01:01:44.409014029Z" level=info msg="CreateContainer within sandbox \"b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 01:01:44.447695 env[1714]: time="2025-08-13T01:01:44.447641406Z" level=info msg="CreateContainer within sandbox \"b9c14e4ee72192980deffa291ed9cdc6c1b67cbbe4af1360adeb42be9629a790\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"7bfaadef3ec1294622a89edfbfd57262eb0a9af19a34c74861c50ed770b76342\"" Aug 13 01:01:44.453210 env[1714]: time="2025-08-13T01:01:44.449832221Z" level=info msg="StartContainer for \"7bfaadef3ec1294622a89edfbfd57262eb0a9af19a34c74861c50ed770b76342\"" Aug 13 01:01:44.493860 systemd[1]: run-containerd-runc-k8s.io-7bfaadef3ec1294622a89edfbfd57262eb0a9af19a34c74861c50ed770b76342-runc.RP6V4S.mount: Deactivated successfully. Aug 13 01:01:44.515901 systemd[1]: Started cri-containerd-7bfaadef3ec1294622a89edfbfd57262eb0a9af19a34c74861c50ed770b76342.scope. Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.555000 audit: BPF prog-id=229 op=LOAD Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4676 pid=5739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762666161646566336563313239343632326138396564666266643537 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4676 pid=5739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762666161646566336563313239343632326138396564666266643537 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit: BPF prog-id=230 op=LOAD Aug 13 01:01:44.556000 audit[5739]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000399400 items=0 ppid=4676 pid=5739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762666161646566336563313239343632326138396564666266643537 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit: BPF prog-id=231 op=LOAD Aug 13 01:01:44.556000 audit[5739]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000399448 items=0 ppid=4676 pid=5739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762666161646566336563313239343632326138396564666266643537 Aug 13 01:01:44.556000 audit: BPF prog-id=231 op=UNLOAD Aug 13 01:01:44.556000 audit: BPF prog-id=230 op=UNLOAD Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { perfmon } for pid=5739 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit[5739]: AVC avc: denied { bpf } for pid=5739 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:44.556000 audit: BPF prog-id=232 op=LOAD Aug 13 01:01:44.556000 audit[5739]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000399858 items=0 ppid=4676 pid=5739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762666161646566336563313239343632326138396564666266643537 Aug 13 01:01:44.621649 env[1714]: time="2025-08-13T01:01:44.621531642Z" level=info msg="StartContainer for \"7bfaadef3ec1294622a89edfbfd57262eb0a9af19a34c74861c50ed770b76342\" returns successfully" Aug 13 01:01:45.120000 audit[5778]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=5778 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:45.120000 audit[5778]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff83353ad0 a2=0 a3=7fff83353abc items=0 ppid=2712 pid=5778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:45.120000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:45.127000 audit[5778]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=5778 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:45.127000 audit[5778]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fff83353ad0 a2=0 a3=7fff83353abc items=0 ppid=2712 pid=5778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:45.127000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:45.878958 kubelet[2589]: I0813 01:01:45.878917 2589 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:01:46.740000 audit[5750]: AVC avc: denied { watch } for pid=5750 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.1481757705/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c79,c294 tclass=file permissive=0 Aug 13 01:01:46.756068 kernel: kauditd_printk_skb: 135 callbacks suppressed Aug 13 01:01:46.758431 kernel: audit: type=1400 audit(1755046906.740:1557): avc: denied { watch } for pid=5750 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.1481757705/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c79,c294 tclass=file permissive=0 Aug 13 01:01:46.740000 audit[5750]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000edba20 a2=fc6 a3=0 items=0 ppid=4676 pid=5750 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 key=(null) Aug 13 01:01:46.785792 kernel: audit: type=1300 audit(1755046906.740:1557): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000edba20 a2=fc6 a3=0 items=0 ppid=4676 pid=5750 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 key=(null) Aug 13 01:01:46.785900 kernel: audit: type=1327 audit(1755046906.740:1557): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:01:46.740000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:01:46.964178 env[1714]: time="2025-08-13T01:01:46.964129424Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:46.969348 env[1714]: time="2025-08-13T01:01:46.969304101Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:46.972042 env[1714]: time="2025-08-13T01:01:46.972004983Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:46.974727 env[1714]: time="2025-08-13T01:01:46.974687566Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:46.975451 env[1714]: time="2025-08-13T01:01:46.975416083Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Aug 13 01:01:46.976682 env[1714]: time="2025-08-13T01:01:46.976628371Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 01:01:47.002775 env[1714]: time="2025-08-13T01:01:47.002679632Z" level=info msg="CreateContainer within sandbox \"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Aug 13 01:01:47.026376 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1465983175.mount: Deactivated successfully. Aug 13 01:01:47.044376 env[1714]: time="2025-08-13T01:01:47.044305000Z" level=info msg="CreateContainer within sandbox \"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"efc1e377fcb098d800934d9d863627efb19e2c543f9ce7e16473071a4c98f032\"" Aug 13 01:01:47.045074 env[1714]: time="2025-08-13T01:01:47.045044250Z" level=info msg="StartContainer for \"efc1e377fcb098d800934d9d863627efb19e2c543f9ce7e16473071a4c98f032\"" Aug 13 01:01:47.055684 systemd[1]: Started sshd@12-172.31.17.234:22-147.75.109.163:60518.service. Aug 13 01:01:47.069305 kernel: audit: type=1130 audit(1755046907.055:1558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.234:22-147.75.109.163:60518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:47.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.234:22-147.75.109.163:60518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:47.117660 systemd[1]: Started cri-containerd-efc1e377fcb098d800934d9d863627efb19e2c543f9ce7e16473071a4c98f032.scope. Aug 13 01:01:47.146000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.153526 kernel: audit: type=1400 audit(1755046907.146:1559): avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.154472 kernel: audit: type=1300 audit(1755046907.146:1559): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fab91aa7588 items=0 ppid=4996 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.146000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fab91aa7588 items=0 ppid=4996 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566633165333737666362303938643830303933346439643836333632 Aug 13 01:01:47.171874 kernel: audit: type=1327 audit(1755046907.146:1559): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566633165333737666362303938643830303933346439643836333632 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.178585 kernel: audit: type=1400 audit(1755046907.152:1560): avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.189543 kernel: audit: type=1400 audit(1755046907.152:1560): avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.189665 kernel: audit: type=1400 audit(1755046907.152:1560): avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.152000 audit: BPF prog-id=233 op=LOAD Aug 13 01:01:47.152000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000337ee8 items=0 ppid=4996 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566633165333737666362303938643830303933346439643836333632 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit: BPF prog-id=234 op=LOAD Aug 13 01:01:47.160000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000337f38 items=0 ppid=4996 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566633165333737666362303938643830303933346439643836333632 Aug 13 01:01:47.160000 audit: BPF prog-id=234 op=UNLOAD Aug 13 01:01:47.160000 audit: BPF prog-id=233 op=UNLOAD Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.160000 audit: BPF prog-id=235 op=LOAD Aug 13 01:01:47.160000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000337fc8 items=0 ppid=4996 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566633165333737666362303938643830303933346439643836333632 Aug 13 01:01:47.201611 env[1714]: time="2025-08-13T01:01:47.201567280Z" level=info msg="StartContainer for \"efc1e377fcb098d800934d9d863627efb19e2c543f9ce7e16473071a4c98f032\" returns successfully" Aug 13 01:01:47.274972 env[1714]: time="2025-08-13T01:01:47.274877651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:47.297946 env[1714]: time="2025-08-13T01:01:47.297907794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:47.307200 env[1714]: time="2025-08-13T01:01:47.307155111Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:47.328022 env[1714]: time="2025-08-13T01:01:47.327962518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:47.333906 env[1714]: time="2025-08-13T01:01:47.331688251Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Aug 13 01:01:47.354612 env[1714]: time="2025-08-13T01:01:47.354560515Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Aug 13 01:01:47.355956 env[1714]: time="2025-08-13T01:01:47.355928278Z" level=info msg="CreateContainer within sandbox \"4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 01:01:47.383481 env[1714]: time="2025-08-13T01:01:47.383412073Z" level=info msg="CreateContainer within sandbox \"4be488703977e1ac774a73be805f49967036c8b40a2ef96e388f203cce0d07cd\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"3587a1a23e1d3cf16d45ae7903e211911f5ae1ce7bccdbdbb9a950d7b8e2f62b\"" Aug 13 01:01:47.384773 env[1714]: time="2025-08-13T01:01:47.384144403Z" level=info msg="StartContainer for \"3587a1a23e1d3cf16d45ae7903e211911f5ae1ce7bccdbdbb9a950d7b8e2f62b\"" Aug 13 01:01:47.406950 systemd[1]: Started cri-containerd-3587a1a23e1d3cf16d45ae7903e211911f5ae1ce7bccdbdbb9a950d7b8e2f62b.scope. Aug 13 01:01:47.407000 audit[5786]: USER_ACCT pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:47.413152 sshd[5786]: Accepted publickey for core from 147.75.109.163 port 60518 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:47.413000 audit[5786]: CRED_ACQ pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:47.413000 audit[5786]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6107acc0 a2=3 a3=0 items=0 ppid=1 pid=5786 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.413000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:47.423568 sshd[5786]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:47.436219 systemd[1]: Started session-13.scope. Aug 13 01:01:47.437390 systemd-logind[1707]: New session 13 of user core. Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.445000 audit: BPF prog-id=236 op=LOAD Aug 13 01:01:47.456000 audit[5786]: USER_START pid=5786 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:47.458000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.458000 audit[5823]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=5027 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383761316132336531643363663136643435616537393033653231 Aug 13 01:01:47.458000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.460000 audit[5841]: CRED_ACQ pid=5841 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:47.458000 audit[5823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=5027 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383761316132336531643363663136643435616537393033653231 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.462000 audit: BPF prog-id=237 op=LOAD Aug 13 01:01:47.462000 audit[5823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024de20 items=0 ppid=5027 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383761316132336531643363663136643435616537393033653231 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.463000 audit: BPF prog-id=238 op=LOAD Aug 13 01:01:47.463000 audit[5823]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024de68 items=0 ppid=5027 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383761316132336531643363663136643435616537393033653231 Aug 13 01:01:47.464000 audit: BPF prog-id=238 op=UNLOAD Aug 13 01:01:47.464000 audit: BPF prog-id=237 op=UNLOAD Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { perfmon } for pid=5823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit[5823]: AVC avc: denied { bpf } for pid=5823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:47.464000 audit: BPF prog-id=239 op=LOAD Aug 13 01:01:47.464000 audit[5823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000402278 items=0 ppid=5027 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:47.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383761316132336531643363663136643435616537393033653231 Aug 13 01:01:47.552054 env[1714]: time="2025-08-13T01:01:47.551519237Z" level=info msg="StartContainer for \"3587a1a23e1d3cf16d45ae7903e211911f5ae1ce7bccdbdbb9a950d7b8e2f62b\" returns successfully" Aug 13 01:01:47.972655 kubelet[2589]: I0813 01:01:47.949879 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5d6885cd44-m24jr" podStartSLOduration=39.890922259 podStartE2EDuration="55.917695111s" podCreationTimestamp="2025-08-13 01:00:52 +0000 UTC" firstStartedPulling="2025-08-13 01:01:28.336914344 +0000 UTC m=+51.129140988" lastFinishedPulling="2025-08-13 01:01:44.363687112 +0000 UTC m=+67.155913840" observedRunningTime="2025-08-13 01:01:44.892814177 +0000 UTC m=+67.685040829" watchObservedRunningTime="2025-08-13 01:01:47.917695111 +0000 UTC m=+70.709921772" Aug 13 01:01:47.974818 kubelet[2589]: I0813 01:01:47.973369 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5d6885cd44-tftgx" podStartSLOduration=39.281093289 podStartE2EDuration="55.973344253s" podCreationTimestamp="2025-08-13 01:00:52 +0000 UTC" firstStartedPulling="2025-08-13 01:01:30.659750942 +0000 UTC m=+53.451977579" lastFinishedPulling="2025-08-13 01:01:47.352001907 +0000 UTC m=+70.144228543" observedRunningTime="2025-08-13 01:01:47.913862781 +0000 UTC m=+70.706089440" watchObservedRunningTime="2025-08-13 01:01:47.973344253 +0000 UTC m=+70.765570909" Aug 13 01:01:48.012000 audit[5865]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=5865 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:48.012000 audit[5865]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffeeeb34e30 a2=0 a3=7ffeeeb34e1c items=0 ppid=2712 pid=5865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:48.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:48.020000 audit[5865]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=5865 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:48.020000 audit[5865]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffeeeb34e30 a2=0 a3=7ffeeeb34e1c items=0 ppid=2712 pid=5865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:48.020000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:48.025446 systemd[1]: run-containerd-runc-k8s.io-efc1e377fcb098d800934d9d863627efb19e2c543f9ce7e16473071a4c98f032-runc.tuz6Yr.mount: Deactivated successfully. Aug 13 01:01:48.621746 sshd[5786]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:48.621000 audit[5786]: USER_END pid=5786 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:48.621000 audit[5786]: CRED_DISP pid=5786 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:48.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.234:22-147.75.109.163:60518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:48.624948 systemd-logind[1707]: Session 13 logged out. Waiting for processes to exit. Aug 13 01:01:48.625763 systemd[1]: sshd@12-172.31.17.234:22-147.75.109.163:60518.service: Deactivated successfully. Aug 13 01:01:48.626594 systemd[1]: session-13.scope: Deactivated successfully. Aug 13 01:01:48.627613 systemd-logind[1707]: Removed session 13. Aug 13 01:01:49.181000 audit[5835]: AVC avc: denied { watch } for pid=5835 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.2602478307/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c873,c908 tclass=file permissive=0 Aug 13 01:01:49.181000 audit[5835]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b03a00 a2=fc6 a3=0 items=0 ppid=5027 pid=5835 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 key=(null) Aug 13 01:01:49.181000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:01:49.349000 audit[5868]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=5868 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:49.349000 audit[5868]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcc3a6f660 a2=0 a3=7ffcc3a6f64c items=0 ppid=2712 pid=5868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:49.349000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:49.354000 audit[5868]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=5868 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:01:49.354000 audit[5868]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffcc3a6f660 a2=0 a3=7ffcc3a6f64c items=0 ppid=2712 pid=5868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:49.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:01:49.945717 env[1714]: time="2025-08-13T01:01:49.945664053Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:49.948037 env[1714]: time="2025-08-13T01:01:49.947996566Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:49.949822 env[1714]: time="2025-08-13T01:01:49.949764477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:49.951548 env[1714]: time="2025-08-13T01:01:49.951479187Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 01:01:49.952148 env[1714]: time="2025-08-13T01:01:49.952101010Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Aug 13 01:01:49.962047 env[1714]: time="2025-08-13T01:01:49.962003258Z" level=info msg="CreateContainer within sandbox \"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Aug 13 01:01:49.976551 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount578245379.mount: Deactivated successfully. Aug 13 01:01:49.984460 env[1714]: time="2025-08-13T01:01:49.984387924Z" level=info msg="CreateContainer within sandbox \"39fd0f7ecc7be22987c6fc25dbada253ef2bb5758a9111e612ce76d0a1d61fe2\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"1b3b2b85d5dfe57681afe0468c6978bd2ac47d103d93ded83373f2cb4714a601\"" Aug 13 01:01:49.986083 env[1714]: time="2025-08-13T01:01:49.985185898Z" level=info msg="StartContainer for \"1b3b2b85d5dfe57681afe0468c6978bd2ac47d103d93ded83373f2cb4714a601\"" Aug 13 01:01:50.036839 systemd[1]: run-containerd-runc-k8s.io-1b3b2b85d5dfe57681afe0468c6978bd2ac47d103d93ded83373f2cb4714a601-runc.7V1Ttm.mount: Deactivated successfully. Aug 13 01:01:50.049397 systemd[1]: Started cri-containerd-1b3b2b85d5dfe57681afe0468c6978bd2ac47d103d93ded83373f2cb4714a601.scope. Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f9f9055a2e8 items=0 ppid=4996 pid=5878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:50.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162336232623835643564666535373638316166653034363863363937 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.078000 audit: BPF prog-id=240 op=LOAD Aug 13 01:01:50.078000 audit[5878]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003d8298 items=0 ppid=4996 pid=5878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:50.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162336232623835643564666535373638316166653034363863363937 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit: BPF prog-id=241 op=LOAD Aug 13 01:01:50.079000 audit[5878]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003d82e8 items=0 ppid=4996 pid=5878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:50.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162336232623835643564666535373638316166653034363863363937 Aug 13 01:01:50.079000 audit: BPF prog-id=241 op=UNLOAD Aug 13 01:01:50.079000 audit: BPF prog-id=240 op=UNLOAD Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { perfmon } for pid=5878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit[5878]: AVC avc: denied { bpf } for pid=5878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:01:50.079000 audit: BPF prog-id=242 op=LOAD Aug 13 01:01:50.079000 audit[5878]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003d8378 items=0 ppid=4996 pid=5878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:50.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162336232623835643564666535373638316166653034363863363937 Aug 13 01:01:50.112716 env[1714]: time="2025-08-13T01:01:50.112662454Z" level=info msg="StartContainer for \"1b3b2b85d5dfe57681afe0468c6978bd2ac47d103d93ded83373f2cb4714a601\" returns successfully" Aug 13 01:01:51.125858 kubelet[2589]: I0813 01:01:51.124070 2589 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Aug 13 01:01:51.129400 kubelet[2589]: I0813 01:01:51.129358 2589 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Aug 13 01:01:53.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.234:22-147.75.109.163:35494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.647038 systemd[1]: Started sshd@13-172.31.17.234:22-147.75.109.163:35494.service. Aug 13 01:01:53.648948 kernel: kauditd_printk_skb: 162 callbacks suppressed Aug 13 01:01:53.651356 kernel: audit: type=1130 audit(1755046913.646:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.234:22-147.75.109.163:35494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:53.922000 audit[5911]: USER_ACCT pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:53.949327 kernel: audit: type=1101 audit(1755046913.922:1603): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:53.952848 kernel: audit: type=1103 audit(1755046913.930:1604): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:53.952911 kernel: audit: type=1006 audit(1755046913.931:1605): pid=5911 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Aug 13 01:01:53.952935 kernel: audit: type=1300 audit(1755046913.931:1605): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd36439190 a2=3 a3=0 items=0 ppid=1 pid=5911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:53.952963 kernel: audit: type=1327 audit(1755046913.931:1605): proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:53.930000 audit[5911]: CRED_ACQ pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:53.931000 audit[5911]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd36439190 a2=3 a3=0 items=0 ppid=1 pid=5911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:01:53.931000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:01:53.953987 sshd[5911]: Accepted publickey for core from 147.75.109.163 port 35494 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:01:53.935731 sshd[5911]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:01:53.953189 systemd-logind[1707]: New session 14 of user core. Aug 13 01:01:53.954073 systemd[1]: Started session-14.scope. Aug 13 01:01:53.960000 audit[5911]: USER_START pid=5911 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:53.964000 audit[5913]: CRED_ACQ pid=5913 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:53.974454 kernel: audit: type=1105 audit(1755046913.960:1606): pid=5911 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:53.974628 kernel: audit: type=1103 audit(1755046913.964:1607): pid=5913 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:54.732877 sshd[5911]: pam_unix(sshd:session): session closed for user core Aug 13 01:01:54.736000 audit[5911]: USER_END pid=5911 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:54.739055 systemd[1]: sshd@13-172.31.17.234:22-147.75.109.163:35494.service: Deactivated successfully. Aug 13 01:01:54.740534 systemd-logind[1707]: Session 14 logged out. Waiting for processes to exit. Aug 13 01:01:54.746701 kernel: audit: type=1106 audit(1755046914.736:1608): pid=5911 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:54.746272 systemd[1]: session-14.scope: Deactivated successfully. Aug 13 01:01:54.736000 audit[5911]: CRED_DISP pid=5911 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:54.747551 systemd-logind[1707]: Removed session 14. Aug 13 01:01:54.753514 kernel: audit: type=1104 audit(1755046914.736:1609): pid=5911 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:01:54.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.234:22-147.75.109.163:35494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.763000 systemd[1]: Started sshd@14-172.31.17.234:22-147.75.109.163:42600.service. Aug 13 01:01:59.767631 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 01:01:59.768350 kernel: audit: type=1130 audit(1755046919.763:1611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.234:22-147.75.109.163:42600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:01:59.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.234:22-147.75.109.163:42600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:00.052000 audit[5925]: USER_ACCT pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.076060 kernel: audit: type=1101 audit(1755046920.052:1612): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.076192 sshd[5925]: Accepted publickey for core from 147.75.109.163 port 42600 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:02:00.088555 kernel: audit: type=1103 audit(1755046920.074:1613): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.088638 kernel: audit: type=1006 audit(1755046920.074:1614): pid=5925 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Aug 13 01:02:00.074000 audit[5925]: CRED_ACQ pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.080084 sshd[5925]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:02:00.074000 audit[5925]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedeebc7f0 a2=3 a3=0 items=0 ppid=1 pid=5925 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.074000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:02:00.109389 systemd[1]: Started session-15.scope. Aug 13 01:02:00.111643 kernel: audit: type=1300 audit(1755046920.074:1614): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedeebc7f0 a2=3 a3=0 items=0 ppid=1 pid=5925 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:00.111726 kernel: audit: type=1327 audit(1755046920.074:1614): proctitle=737368643A20636F7265205B707269765D Aug 13 01:02:00.111031 systemd-logind[1707]: New session 15 of user core. Aug 13 01:02:00.123000 audit[5925]: USER_START pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.129000 audit[5927]: CRED_ACQ pid=5927 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.143497 kernel: audit: type=1105 audit(1755046920.123:1615): pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.143654 kernel: audit: type=1103 audit(1755046920.129:1616): pid=5927 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.807905 sshd[5925]: pam_unix(sshd:session): session closed for user core Aug 13 01:02:00.809000 audit[5925]: USER_END pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.821592 kernel: audit: type=1106 audit(1755046920.809:1617): pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.823037 systemd[1]: sshd@14-172.31.17.234:22-147.75.109.163:42600.service: Deactivated successfully. Aug 13 01:02:00.824140 systemd[1]: session-15.scope: Deactivated successfully. Aug 13 01:02:00.809000 audit[5925]: CRED_DISP pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:00.825428 systemd-logind[1707]: Session 15 logged out. Waiting for processes to exit. Aug 13 01:02:00.827945 systemd-logind[1707]: Removed session 15. Aug 13 01:02:00.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.234:22-147.75.109.163:42600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:00.834234 kernel: audit: type=1104 audit(1755046920.809:1618): pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:04.933223 kubelet[2589]: I0813 01:02:04.933169 2589 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 01:02:05.180980 kubelet[2589]: I0813 01:02:05.177569 2589 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-6jvvc" podStartSLOduration=49.836307889 podStartE2EDuration="1m9.169320039s" podCreationTimestamp="2025-08-13 01:00:56 +0000 UTC" firstStartedPulling="2025-08-13 01:01:30.62006217 +0000 UTC m=+53.412288806" lastFinishedPulling="2025-08-13 01:01:49.953074316 +0000 UTC m=+72.745300956" observedRunningTime="2025-08-13 01:01:50.944013801 +0000 UTC m=+73.736240459" watchObservedRunningTime="2025-08-13 01:02:05.169320039 +0000 UTC m=+87.961546697" Aug 13 01:02:05.517000 audit[5945]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=5945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:05.523507 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 01:02:05.523818 kernel: audit: type=1325 audit(1755046925.517:1620): table=filter:128 family=2 entries=10 op=nft_register_rule pid=5945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:05.540292 kernel: audit: type=1300 audit(1755046925.517:1620): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd3a3da800 a2=0 a3=7ffd3a3da7ec items=0 ppid=2712 pid=5945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:05.517000 audit[5945]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd3a3da800 a2=0 a3=7ffd3a3da7ec items=0 ppid=2712 pid=5945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:05.546788 kernel: audit: type=1327 audit(1755046925.517:1620): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:05.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:05.547000 audit[5945]: NETFILTER_CFG table=nat:129 family=2 entries=36 op=nft_register_chain pid=5945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:05.572745 kernel: audit: type=1325 audit(1755046925.547:1621): table=nat:129 family=2 entries=36 op=nft_register_chain pid=5945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:05.572866 kernel: audit: type=1300 audit(1755046925.547:1621): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd3a3da800 a2=0 a3=7ffd3a3da7ec items=0 ppid=2712 pid=5945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:05.572904 kernel: audit: type=1327 audit(1755046925.547:1621): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:05.547000 audit[5945]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd3a3da800 a2=0 a3=7ffd3a3da7ec items=0 ppid=2712 pid=5945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:05.547000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:05.839391 systemd[1]: Started sshd@15-172.31.17.234:22-147.75.109.163:42608.service. Aug 13 01:02:05.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.234:22-147.75.109.163:42608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:05.853523 kernel: audit: type=1130 audit(1755046925.838:1622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.234:22-147.75.109.163:42608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:06.063000 audit[5947]: USER_ACCT pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.075208 sshd[5947]: Accepted publickey for core from 147.75.109.163 port 42608 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:02:06.075588 kernel: audit: type=1101 audit(1755046926.063:1623): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.074000 audit[5947]: CRED_ACQ pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.093558 kernel: audit: type=1103 audit(1755046926.074:1624): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.094548 kernel: audit: type=1006 audit(1755046926.074:1625): pid=5947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Aug 13 01:02:06.074000 audit[5947]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd68065b0 a2=3 a3=0 items=0 ppid=1 pid=5947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:06.074000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:02:06.095165 sshd[5947]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:02:06.107461 systemd[1]: Started session-16.scope. Aug 13 01:02:06.108018 systemd-logind[1707]: New session 16 of user core. Aug 13 01:02:06.115000 audit[5947]: USER_START pid=5947 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.117000 audit[5949]: CRED_ACQ pid=5949 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.702690 sshd[5947]: pam_unix(sshd:session): session closed for user core Aug 13 01:02:06.704000 audit[5947]: USER_END pid=5947 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.704000 audit[5947]: CRED_DISP pid=5947 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.234:22-147.75.109.163:42608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:06.712951 systemd[1]: sshd@15-172.31.17.234:22-147.75.109.163:42608.service: Deactivated successfully. Aug 13 01:02:06.715631 systemd[1]: session-16.scope: Deactivated successfully. Aug 13 01:02:06.716230 systemd-logind[1707]: Session 16 logged out. Waiting for processes to exit. Aug 13 01:02:06.719193 systemd-logind[1707]: Removed session 16. Aug 13 01:02:06.732965 systemd[1]: Started sshd@16-172.31.17.234:22-147.75.109.163:42610.service. Aug 13 01:02:06.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.234:22-147.75.109.163:42610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:06.928000 audit[5959]: USER_ACCT pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.931416 sshd[5959]: Accepted publickey for core from 147.75.109.163 port 42610 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:02:06.930000 audit[5959]: CRED_ACQ pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.930000 audit[5959]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc90125280 a2=3 a3=0 items=0 ppid=1 pid=5959 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:06.930000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:02:06.932177 sshd[5959]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:02:06.940415 systemd-logind[1707]: New session 17 of user core. Aug 13 01:02:06.941560 systemd[1]: Started session-17.scope. Aug 13 01:02:06.949000 audit[5959]: USER_START pid=5959 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:06.951000 audit[5961]: CRED_ACQ pid=5961 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:07.838502 sshd[5959]: pam_unix(sshd:session): session closed for user core Aug 13 01:02:07.844000 audit[5959]: USER_END pid=5959 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:07.845000 audit[5959]: CRED_DISP pid=5959 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:07.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.234:22-147.75.109.163:42610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:07.849280 systemd[1]: sshd@16-172.31.17.234:22-147.75.109.163:42610.service: Deactivated successfully. Aug 13 01:02:07.851000 systemd[1]: session-17.scope: Deactivated successfully. Aug 13 01:02:07.852503 systemd-logind[1707]: Session 17 logged out. Waiting for processes to exit. Aug 13 01:02:07.860658 systemd-logind[1707]: Removed session 17. Aug 13 01:02:07.863138 systemd[1]: Started sshd@17-172.31.17.234:22-147.75.109.163:42614.service. Aug 13 01:02:07.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.234:22-147.75.109.163:42614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:08.086000 audit[5969]: USER_ACCT pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:08.089019 sshd[5969]: Accepted publickey for core from 147.75.109.163 port 42614 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:02:08.087000 audit[5969]: CRED_ACQ pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:08.087000 audit[5969]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa9544bf0 a2=3 a3=0 items=0 ppid=1 pid=5969 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:08.087000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:02:08.093531 sshd[5969]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:02:08.102797 systemd-logind[1707]: New session 18 of user core. Aug 13 01:02:08.103637 systemd[1]: Started session-18.scope. Aug 13 01:02:08.111000 audit[5969]: USER_START pid=5969 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:08.114000 audit[5971]: CRED_ACQ pid=5971 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:19.792007 env[1714]: time="2025-08-13T01:02:19.734128824Z" level=error msg="ExecSync for \"21ee88c27880a69195cb988a0c2e2e0ca48a751fba5850cb838dd98ee4b7309a\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" Aug 13 01:02:32.827000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.969279 kernel: kauditd_printk_skb: 26 callbacks suppressed Aug 13 01:02:34.159235 kernel: audit: type=1400 audit(1755046952.827:1647): avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:34.159337 kernel: audit: type=1400 audit(1755046952.827:1646): avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:34.177285 kernel: audit: type=1300 audit(1755046952.827:1646): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000f55ef0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:34.177408 kernel: audit: type=1327 audit(1755046952.827:1646): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:34.177439 kernel: audit: type=1300 audit(1755046952.827:1647): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001e61fa0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:34.177465 kernel: audit: type=1327 audit(1755046952.827:1647): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:34.195322 kernel: audit: type=1400 audit(1755046953.185:1648): avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:34.224970 kernel: audit: type=1300 audit(1755046953.185:1648): arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c010dfee70 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:02:34.251329 kernel: audit: type=1327 audit(1755046953.185:1648): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:02:34.264918 kernel: audit: type=1400 audit(1755046953.202:1649): avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:32.827000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:32.827000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000f55ef0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:32.827000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:32.827000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001e61fa0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:32.827000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:33.185000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.185000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c010dfee70 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:02:33.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:02:33.202000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.202000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c010ee68a0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:02:33.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:02:33.223000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:33.223000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=87 a1=c014ab5be0 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:02:33.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:02:34.148000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:34.148000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c010dff260 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:02:34.148000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:02:34.258000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:34.258000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c010dff290 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:02:34.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:02:34.331000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:34.331000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c014ab5f20 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:02:34.331000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:02:36.637000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:36.637000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001aa52e0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:36.637000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:36.681000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:36.681000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001aa5320 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:36.681000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:36.756000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:36.756000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001aa5380 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:36.756000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:36.765000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:02:36.765000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001aa53a0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:02:36.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:02:43.151000 audit[6025]: NETFILTER_CFG table=filter:130 family=2 entries=22 op=nft_register_rule pid=6025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:43.565993 kernel: kauditd_printk_skb: 26 callbacks suppressed Aug 13 01:02:43.604971 kernel: audit: type=1325 audit(1755046963.151:1658): table=filter:130 family=2 entries=22 op=nft_register_rule pid=6025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:43.605068 kernel: audit: type=1300 audit(1755046963.151:1658): arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffea352cb10 a2=0 a3=7ffea352cafc items=0 ppid=2712 pid=6025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:43.605099 kernel: audit: type=1327 audit(1755046963.151:1658): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:43.605130 kernel: audit: type=1325 audit(1755046963.171:1659): table=nat:131 family=2 entries=24 op=nft_register_rule pid=6025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:43.605166 kernel: audit: type=1300 audit(1755046963.171:1659): arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffea352cb10 a2=0 a3=0 items=0 ppid=2712 pid=6025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:43.605188 kernel: audit: type=1327 audit(1755046963.171:1659): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:43.151000 audit[6025]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffea352cb10 a2=0 a3=7ffea352cafc items=0 ppid=2712 pid=6025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:43.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:43.171000 audit[6025]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=6025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:43.171000 audit[6025]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffea352cb10 a2=0 a3=0 items=0 ppid=2712 pid=6025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:43.171000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:47.069000 audit[5750]: AVC avc: denied { watch } for pid=5750 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.1481757705/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c79,c294 tclass=file permissive=0 Aug 13 01:02:47.588522 kernel: audit: type=1400 audit(1755046967.069:1660): avc: denied { watch } for pid=5750 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.1481757705/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c79,c294 tclass=file permissive=0 Aug 13 01:02:47.627323 kernel: audit: type=1300 audit(1755046967.069:1660): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001e39500 a2=fc6 a3=0 items=0 ppid=4676 pid=5750 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 key=(null) Aug 13 01:02:47.633086 kernel: audit: type=1327 audit(1755046967.069:1660): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:02:47.069000 audit[5750]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001e39500 a2=fc6 a3=0 items=0 ppid=4676 pid=5750 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 key=(null) Aug 13 01:02:47.069000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:02:47.863000 audit[6031]: NETFILTER_CFG table=filter:132 family=2 entries=34 op=nft_register_rule pid=6031 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:47.888205 kernel: audit: type=1325 audit(1755046967.863:1661): table=filter:132 family=2 entries=34 op=nft_register_rule pid=6031 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:47.863000 audit[6031]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffed9cfc9b0 a2=0 a3=7ffed9cfc99c items=0 ppid=2712 pid=6031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:47.863000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:47.881000 audit[6031]: NETFILTER_CFG table=nat:133 family=2 entries=24 op=nft_register_rule pid=6031 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:02:47.881000 audit[6031]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffed9cfc9b0 a2=0 a3=0 items=0 ppid=2712 pid=6031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:47.881000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:02:49.523577 kernel: kauditd_printk_skb: 5 callbacks suppressed Aug 13 01:02:49.641731 kernel: audit: type=1400 audit(1755046969.515:1663): avc: denied { watch } for pid=5835 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.2602478307/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c873,c908 tclass=file permissive=0 Aug 13 01:02:49.669125 kernel: audit: type=1300 audit(1755046969.515:1663): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b02f40 a2=fc6 a3=0 items=0 ppid=5027 pid=5835 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 key=(null) Aug 13 01:02:49.674651 kernel: audit: type=1327 audit(1755046969.515:1663): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:02:49.515000 audit[5835]: AVC avc: denied { watch } for pid=5835 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.2602478307/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c873,c908 tclass=file permissive=0 Aug 13 01:02:49.515000 audit[5835]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b02f40 a2=fc6 a3=0 items=0 ppid=5027 pid=5835 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 key=(null) Aug 13 01:02:49.515000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:02:50.789571 sshd[5969]: pam_unix(sshd:session): session closed for user core Aug 13 01:02:51.084121 kernel: audit: type=1106 audit(1755046970.993:1664): pid=5969 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:51.122442 kernel: audit: type=1104 audit(1755046971.005:1665): pid=5969 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:51.130150 kernel: audit: type=1130 audit(1755046971.029:1666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.234:22-147.75.109.163:34276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:51.137839 kernel: audit: type=1131 audit(1755046971.088:1667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.234:22-147.75.109.163:42614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:50.993000 audit[5969]: USER_END pid=5969 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:51.005000 audit[5969]: CRED_DISP pid=5969 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:51.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.234:22-147.75.109.163:34276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:51.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.234:22-147.75.109.163:42614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:02:51.029841 systemd[1]: Started sshd@18-172.31.17.234:22-147.75.109.163:34276.service. Aug 13 01:02:51.089158 systemd[1]: sshd@17-172.31.17.234:22-147.75.109.163:42614.service: Deactivated successfully. Aug 13 01:02:51.097034 systemd[1]: session-18.scope: Deactivated successfully. Aug 13 01:02:51.097245 systemd[1]: session-18.scope: Consumed 1.215s CPU time. Aug 13 01:02:51.108348 systemd-logind[1707]: Session 18 logged out. Waiting for processes to exit. Aug 13 01:02:51.109838 systemd-logind[1707]: Removed session 18. Aug 13 01:02:52.084000 audit[6035]: USER_ACCT pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:52.228206 kernel: audit: type=1101 audit(1755046972.084:1668): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:52.228344 kernel: audit: type=1103 audit(1755046972.097:1669): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:52.228373 kernel: audit: type=1006 audit(1755046972.097:1670): pid=6035 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Aug 13 01:02:52.097000 audit[6035]: CRED_ACQ pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:52.097000 audit[6035]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcba246be0 a2=3 a3=0 items=0 ppid=1 pid=6035 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:02:52.097000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:02:52.391987 sshd[6035]: Accepted publickey for core from 147.75.109.163 port 34276 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:02:52.131447 sshd[6035]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:02:52.599655 systemd-logind[1707]: New session 19 of user core. Aug 13 01:02:52.639000 audit[6035]: USER_START pid=6035 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:52.606508 systemd[1]: Started session-19.scope. Aug 13 01:02:52.727000 audit[6040]: CRED_ACQ pid=6040 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:02:58.657000 systemd[1]: run-containerd-runc-k8s.io-b4b2b3f3aafec81c8b125483d9bf55054f5501d8e7a5018c2df3508f954ee9c2-runc.5xrtay.mount: Deactivated successfully. Aug 13 01:03:00.628000 audit[6147]: NETFILTER_CFG table=filter:134 family=2 entries=40 op=nft_register_rule pid=6147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:00.805705 kernel: kauditd_printk_skb: 4 callbacks suppressed Aug 13 01:03:00.813570 kernel: audit: type=1325 audit(1755046980.628:1673): table=filter:134 family=2 entries=40 op=nft_register_rule pid=6147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:00.815200 kernel: audit: type=1300 audit(1755046980.628:1673): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff2631fa00 a2=0 a3=7fff2631f9ec items=0 ppid=2712 pid=6147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.815286 kernel: audit: type=1327 audit(1755046980.628:1673): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:00.815330 kernel: audit: type=1325 audit(1755046980.681:1674): table=nat:135 family=2 entries=70 op=nft_unregister_chain pid=6147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:00.815361 kernel: audit: type=1300 audit(1755046980.681:1674): arch=c000003e syscall=46 success=yes exit=4748 a0=3 a1=7fff2631fa00 a2=0 a3=7fff2631f9ec items=0 ppid=2712 pid=6147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.815401 kernel: audit: type=1327 audit(1755046980.681:1674): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:00.628000 audit[6147]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff2631fa00 a2=0 a3=7fff2631f9ec items=0 ppid=2712 pid=6147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:00.681000 audit[6147]: NETFILTER_CFG table=nat:135 family=2 entries=70 op=nft_unregister_chain pid=6147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:00.681000 audit[6147]: SYSCALL arch=c000003e syscall=46 success=yes exit=4748 a0=3 a1=7fff2631fa00 a2=0 a3=7fff2631f9ec items=0 ppid=2712 pid=6147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:00.681000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:03.657629 env[1714]: time="2025-08-13T01:03:03.657559331Z" level=error msg="ExecSync for \"b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Aug 13 01:03:03.825882 env[1714]: time="2025-08-13T01:03:03.795770898Z" level=error msg="ExecSync for \"b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Aug 13 01:03:04.166000 audit[6151]: NETFILTER_CFG table=filter:136 family=2 entries=46 op=nft_register_rule pid=6151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:04.209970 kernel: audit: type=1325 audit(1755046984.166:1675): table=filter:136 family=2 entries=46 op=nft_register_rule pid=6151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:04.166000 audit[6151]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff591f09a0 a2=0 a3=7fff591f098c items=0 ppid=2712 pid=6151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:04.324579 kernel: audit: type=1300 audit(1755046984.166:1675): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff591f09a0 a2=0 a3=7fff591f098c items=0 ppid=2712 pid=6151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:04.166000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:04.350340 kernel: audit: type=1327 audit(1755046984.166:1675): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:04.417000 audit[6151]: NETFILTER_CFG table=nat:137 family=2 entries=12 op=nft_register_rule pid=6151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:04.478478 kernel: audit: type=1325 audit(1755046984.417:1676): table=nat:137 family=2 entries=12 op=nft_register_rule pid=6151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:04.417000 audit[6151]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff591f09a0 a2=0 a3=0 items=0 ppid=2712 pid=6151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:04.417000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:05.124000 audit[6153]: NETFILTER_CFG table=filter:138 family=2 entries=34 op=nft_register_rule pid=6153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:05.124000 audit[6153]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdf07d2c80 a2=0 a3=7ffdf07d2c6c items=0 ppid=2712 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:05.124000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:05.134000 audit[6153]: NETFILTER_CFG table=nat:139 family=2 entries=96 op=nft_register_chain pid=6153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:05.134000 audit[6153]: SYSCALL arch=c000003e syscall=46 success=yes exit=45612 a0=3 a1=7ffdf07d2c80 a2=0 a3=7ffdf07d2c6c items=0 ppid=2712 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:05.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:06.822304 kubelet[2589]: E0813 01:02:58.881804 2589 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" containerID="21ee88c27880a69195cb988a0c2e2e0ca48a751fba5850cb838dd98ee4b7309a" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Aug 13 01:03:07.149449 kubelet[2589]: E0813 01:03:07.149373 2589 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69" cmd=["/health","-live"] Aug 13 01:03:07.150562 kubelet[2589]: E0813 01:03:06.621257 2589 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69" cmd=["/health","-ready"] Aug 13 01:03:10.772088 amazon-ssm-agent[1694]: 2025-08-13 01:03:10 INFO [HealthCheck] HealthCheck reporting agent health. Aug 13 01:03:13.475478 sshd[6035]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:13.579700 kernel: kauditd_printk_skb: 8 callbacks suppressed Aug 13 01:03:13.583245 kernel: audit: type=1106 audit(1755046993.564:1679): pid=6035 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.564000 audit[6035]: USER_END pid=6035 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.601543 kernel: audit: type=1130 audit(1755046993.567:1680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.234:22-147.75.109.163:55634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:13.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.234:22-147.75.109.163:55634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:13.568473 systemd[1]: Started sshd@19-172.31.17.234:22-147.75.109.163:55634.service. Aug 13 01:03:13.573186 systemd[1]: sshd@18-172.31.17.234:22-147.75.109.163:34276.service: Deactivated successfully. Aug 13 01:03:13.574404 systemd[1]: session-19.scope: Deactivated successfully. Aug 13 01:03:13.567000 audit[6035]: CRED_DISP pid=6035 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.629051 kernel: audit: type=1104 audit(1755046993.567:1681): pid=6035 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.629168 kernel: audit: type=1131 audit(1755046993.567:1682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.234:22-147.75.109.163:34276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:13.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.234:22-147.75.109.163:34276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:13.574584 systemd[1]: session-19.scope: Consumed 7.590s CPU time. Aug 13 01:03:13.577338 systemd-logind[1707]: Session 19 logged out. Waiting for processes to exit. Aug 13 01:03:13.587182 systemd-logind[1707]: Removed session 19. Aug 13 01:03:13.829000 audit[6217]: USER_ACCT pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.844019 kernel: audit: type=1101 audit(1755046993.829:1683): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.844127 sshd[6217]: Accepted publickey for core from 147.75.109.163 port 55634 ssh2: RSA SHA256:LgPaLKY3LN4TBfyOIoir69nxEAguUoPITi+qXSaDutg Aug 13 01:03:13.846534 sshd[6217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 01:03:13.841000 audit[6217]: CRED_ACQ pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.862943 kernel: audit: type=1103 audit(1755046993.841:1684): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.863099 kernel: audit: type=1006 audit(1755046993.841:1685): pid=6217 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Aug 13 01:03:13.841000 audit[6217]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd87f9aaf0 a2=3 a3=0 items=0 ppid=1 pid=6217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:13.888204 kernel: audit: type=1300 audit(1755046993.841:1685): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd87f9aaf0 a2=3 a3=0 items=0 ppid=1 pid=6217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:13.888316 kernel: audit: type=1327 audit(1755046993.841:1685): proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:13.841000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 01:03:13.928683 systemd[1]: Started session-20.scope. Aug 13 01:03:13.930976 systemd-logind[1707]: New session 20 of user core. Aug 13 01:03:13.937000 audit[6217]: USER_START pid=6217 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.951511 kernel: audit: type=1105 audit(1755046993.937:1686): pid=6217 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:13.940000 audit[6220]: CRED_ACQ pid=6220 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:14.188088 systemd[1]: run-containerd-runc-k8s.io-b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69-runc.8Syedv.mount: Deactivated successfully. Aug 13 01:03:19.412776 kubelet[2589]: E0813 01:03:19.411360 2589 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1m7.594s" Aug 13 01:03:20.198851 sshd[6217]: pam_unix(sshd:session): session closed for user core Aug 13 01:03:20.251357 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 01:03:20.254840 kernel: audit: type=1106 audit(1755047000.236:1688): pid=6217 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:20.236000 audit[6217]: USER_END pid=6217 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:20.271845 kernel: audit: type=1104 audit(1755047000.236:1689): pid=6217 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:20.236000 audit[6217]: CRED_DISP pid=6217 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Aug 13 01:03:20.257824 systemd[1]: sshd@19-172.31.17.234:22-147.75.109.163:55634.service: Deactivated successfully. Aug 13 01:03:20.286320 kernel: audit: type=1131 audit(1755047000.257:1690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.234:22-147.75.109.163:55634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:20.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.234:22-147.75.109.163:55634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 01:03:20.265466 systemd[1]: session-20.scope: Deactivated successfully. Aug 13 01:03:20.265674 systemd[1]: session-20.scope: Consumed 1.361s CPU time. Aug 13 01:03:20.268397 systemd-logind[1707]: Session 20 logged out. Waiting for processes to exit. Aug 13 01:03:20.274942 systemd-logind[1707]: Removed session 20. Aug 13 01:03:20.369000 audit[6291]: NETFILTER_CFG table=filter:140 family=2 entries=21 op=nft_register_rule pid=6291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:20.369000 audit[6291]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcb7567420 a2=0 a3=7ffcb756740c items=0 ppid=2712 pid=6291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.386560 kernel: audit: type=1325 audit(1755047000.369:1691): table=filter:140 family=2 entries=21 op=nft_register_rule pid=6291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:20.386723 kernel: audit: type=1300 audit(1755047000.369:1691): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcb7567420 a2=0 a3=7ffcb756740c items=0 ppid=2712 pid=6291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.392440 kernel: audit: type=1327 audit(1755047000.369:1691): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:20.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:20.395000 audit[6291]: NETFILTER_CFG table=nat:141 family=2 entries=43 op=nft_register_chain pid=6291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:20.413905 kernel: audit: type=1325 audit(1755047000.395:1692): table=nat:141 family=2 entries=43 op=nft_register_chain pid=6291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 01:03:20.419863 kernel: audit: type=1300 audit(1755047000.395:1692): arch=c000003e syscall=46 success=yes exit=15492 a0=3 a1=7ffcb7567420 a2=0 a3=7ffcb756740c items=0 ppid=2712 pid=6291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.419960 kernel: audit: type=1327 audit(1755047000.395:1692): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:20.395000 audit[6291]: SYSCALL arch=c000003e syscall=46 success=yes exit=15492 a0=3 a1=7ffcb7567420 a2=0 a3=7ffcb756740c items=0 ppid=2712 pid=6291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:20.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 01:03:33.386000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.472439 kernel: audit: type=1400 audit(1755047013.386:1693): avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.475413 kernel: audit: type=1300 audit(1755047013.386:1693): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8a8a0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:03:33.475549 kernel: audit: type=1327 audit(1755047013.386:1693): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:33.476628 kernel: audit: type=1400 audit(1755047013.395:1694): avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.477794 kernel: audit: type=1300 audit(1755047013.395:1694): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d8cc80 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:03:33.477848 kernel: audit: type=1327 audit(1755047013.395:1694): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:33.386000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8a8a0 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:03:33.386000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:33.395000 audit[2461]: AVC avc: denied { watch } for pid=2461 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:33.395000 audit[2461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d8cc80 a2=fc6 a3=0 items=0 ppid=2298 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:03:33.395000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:34.447000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.447000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c009e38780 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:03:34.467075 kernel: audit: type=1400 audit(1755047014.447:1695): avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.467263 kernel: audit: type=1300 audit(1755047014.447:1695): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c009e38780 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:03:34.467399 kernel: audit: type=1327 audit(1755047014.447:1695): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:03:34.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:03:34.596000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.596000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0104da420 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:03:34.607651 kernel: audit: type=1400 audit(1755047014.596:1696): avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.596000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:03:34.752000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.752000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0104da870 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:03:34.752000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:03:34.814000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.814000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c006580b10 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:03:34.814000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:03:34.841000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.841000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c009e38d40 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:03:34.841000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:03:34.876632 systemd[1]: cri-containerd-464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f.scope: Deactivated successfully. Aug 13 01:03:34.883000 audit: BPF prog-id=86 op=UNLOAD Aug 13 01:03:34.883000 audit: BPF prog-id=106 op=UNLOAD Aug 13 01:03:34.880071 systemd[1]: cri-containerd-464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f.scope: Consumed 5.263s CPU time. Aug 13 01:03:34.897000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:34.897000 audit[2419]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c007276d20 a2=fc6 a3=0 items=0 ppid=2279 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c672 key=(null) Aug 13 01:03:34.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E323334002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 01:03:34.944752 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f-rootfs.mount: Deactivated successfully. Aug 13 01:03:34.945965 env[1714]: time="2025-08-13T01:03:34.945909355Z" level=info msg="shim disconnected" id=464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f Aug 13 01:03:34.953016 env[1714]: time="2025-08-13T01:03:34.946396877Z" level=warning msg="cleaning up after shim disconnected" id=464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f namespace=k8s.io Aug 13 01:03:34.953016 env[1714]: time="2025-08-13T01:03:34.946429522Z" level=info msg="cleaning up dead shim" Aug 13 01:03:34.967685 env[1714]: time="2025-08-13T01:03:34.967620694Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:03:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6343 runtime=io.containerd.runc.v2\n" Aug 13 01:03:34.969000 audit: BPF prog-id=126 op=UNLOAD Aug 13 01:03:34.972000 audit: BPF prog-id=129 op=UNLOAD Aug 13 01:03:34.970607 systemd[1]: cri-containerd-b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4.scope: Deactivated successfully. Aug 13 01:03:34.971007 systemd[1]: cri-containerd-b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4.scope: Consumed 11.527s CPU time. Aug 13 01:03:35.003414 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4-rootfs.mount: Deactivated successfully. Aug 13 01:03:35.006801 env[1714]: time="2025-08-13T01:03:35.006741161Z" level=info msg="shim disconnected" id=b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4 Aug 13 01:03:35.007023 env[1714]: time="2025-08-13T01:03:35.006814461Z" level=warning msg="cleaning up after shim disconnected" id=b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4 namespace=k8s.io Aug 13 01:03:35.007023 env[1714]: time="2025-08-13T01:03:35.006827862Z" level=info msg="cleaning up dead shim" Aug 13 01:03:35.016419 env[1714]: time="2025-08-13T01:03:35.016366987Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:03:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6368 runtime=io.containerd.runc.v2\n" Aug 13 01:03:35.222393 kubelet[2589]: I0813 01:03:35.220906 2589 scope.go:117] "RemoveContainer" containerID="464400be96901e5b76996b1778c6409d4d9bbdaf49b7112e64f0becb8cd3639f" Aug 13 01:03:35.226024 kubelet[2589]: I0813 01:03:35.225992 2589 scope.go:117] "RemoveContainer" containerID="b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4" Aug 13 01:03:35.299494 env[1714]: time="2025-08-13T01:03:35.299290306Z" level=info msg="CreateContainer within sandbox \"a12f0b6918edad0cf6985d27041234addd4b13a2184680027f8018ba2e392029\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Aug 13 01:03:35.300400 env[1714]: time="2025-08-13T01:03:35.300358197Z" level=info msg="CreateContainer within sandbox \"44ddcf67a290992ec9ce64d51f2289fc13ebeb55935306dc3b9b4ad80ea6e3fd\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Aug 13 01:03:35.350413 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount362024648.mount: Deactivated successfully. Aug 13 01:03:35.364360 env[1714]: time="2025-08-13T01:03:35.364304513Z" level=info msg="CreateContainer within sandbox \"44ddcf67a290992ec9ce64d51f2289fc13ebeb55935306dc3b9b4ad80ea6e3fd\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183\"" Aug 13 01:03:35.365532 env[1714]: time="2025-08-13T01:03:35.364854442Z" level=info msg="StartContainer for \"b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183\"" Aug 13 01:03:35.375741 env[1714]: time="2025-08-13T01:03:35.375686383Z" level=info msg="CreateContainer within sandbox \"a12f0b6918edad0cf6985d27041234addd4b13a2184680027f8018ba2e392029\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"5939c954159d8f5a311d14816abac9024299d5359fd1c27c6da5596c62a985a8\"" Aug 13 01:03:35.376896 env[1714]: time="2025-08-13T01:03:35.376861945Z" level=info msg="StartContainer for \"5939c954159d8f5a311d14816abac9024299d5359fd1c27c6da5596c62a985a8\"" Aug 13 01:03:35.400469 systemd[1]: Started cri-containerd-b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183.scope. Aug 13 01:03:35.418567 systemd[1]: Started cri-containerd-5939c954159d8f5a311d14816abac9024299d5359fd1c27c6da5596c62a985a8.scope. Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.445000 audit: BPF prog-id=243 op=LOAD Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2700 pid=6388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626436663338623762633932663961303431633134393564323032 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2700 pid=6388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626436663338623762633932663961303431633134393564323032 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit: BPF prog-id=244 op=LOAD Aug 13 01:03:35.446000 audit[6388]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000fbf90 items=0 ppid=2700 pid=6388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626436663338623762633932663961303431633134393564323032 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.446000 audit: BPF prog-id=245 op=LOAD Aug 13 01:03:35.446000 audit[6388]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000fbfd8 items=0 ppid=2700 pid=6388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626436663338623762633932663961303431633134393564323032 Aug 13 01:03:35.447000 audit: BPF prog-id=245 op=UNLOAD Aug 13 01:03:35.447000 audit: BPF prog-id=244 op=UNLOAD Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { perfmon } for pid=6388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit[6388]: AVC avc: denied { bpf } for pid=6388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.447000 audit: BPF prog-id=246 op=LOAD Aug 13 01:03:35.447000 audit[6388]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c03e8 items=0 ppid=2700 pid=6388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626436663338623762633932663961303431633134393564323032 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.464000 audit: BPF prog-id=247 op=LOAD Aug 13 01:03:35.466000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.466000 audit[6406]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2298 pid=6406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539333963393534313539643866356133313164313438313661626163 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2298 pid=6406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539333963393534313539643866356133313164313438313661626163 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.470000 audit: BPF prog-id=248 op=LOAD Aug 13 01:03:35.470000 audit[6406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00028e450 items=0 ppid=2298 pid=6406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539333963393534313539643866356133313164313438313661626163 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.471000 audit: BPF prog-id=249 op=LOAD Aug 13 01:03:35.471000 audit[6406]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00028e498 items=0 ppid=2298 pid=6406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539333963393534313539643866356133313164313438313661626163 Aug 13 01:03:35.473000 audit: BPF prog-id=249 op=UNLOAD Aug 13 01:03:35.473000 audit: BPF prog-id=248 op=UNLOAD Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { perfmon } for pid=6406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit[6406]: AVC avc: denied { bpf } for pid=6406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:35.473000 audit: BPF prog-id=250 op=LOAD Aug 13 01:03:35.473000 audit[6406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00028e8a8 items=0 ppid=2298 pid=6406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:35.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539333963393534313539643866356133313164313438313661626163 Aug 13 01:03:35.482543 env[1714]: time="2025-08-13T01:03:35.482475440Z" level=info msg="StartContainer for \"b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183\" returns successfully" Aug 13 01:03:35.527126 env[1714]: time="2025-08-13T01:03:35.527073640Z" level=info msg="StartContainer for \"5939c954159d8f5a311d14816abac9024299d5359fd1c27c6da5596c62a985a8\" returns successfully" Aug 13 01:03:35.949242 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3083225002.mount: Deactivated successfully. Aug 13 01:03:35.949365 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1534148084.mount: Deactivated successfully. Aug 13 01:03:37.483000 audit[6424]: AVC avc: denied { watch } for pid=6424 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:37.483000 audit[6424]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00094b5f0 a2=fc6 a3=0 items=0 ppid=2298 pid=6424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:03:37.483000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:37.483000 audit[6424]: AVC avc: denied { watch } for pid=6424 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 01:03:37.483000 audit[6424]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00099e880 a2=fc6 a3=0 items=0 ppid=2298 pid=6424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c155,c676 key=(null) Aug 13 01:03:37.483000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 01:03:37.660593 kubelet[2589]: E0813 01:03:37.657540 2589 kubelet_node_status.go:535] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"NetworkUnavailable\\\"},{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"lastTransitionTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"message\\\":\\\"kubelet has sufficient memory available\\\",\\\"reason\\\":\\\"KubeletHasSufficientMemory\\\",\\\"status\\\":\\\"False\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"lastTransitionTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"message\\\":\\\"kubelet has no disk pressure\\\",\\\"reason\\\":\\\"KubeletHasNoDiskPressure\\\",\\\"status\\\":\\\"False\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"lastTransitionTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"message\\\":\\\"kubelet has sufficient PID available\\\",\\\"reason\\\":\\\"KubeletHasSufficientPID\\\",\\\"status\\\":\\\"False\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"lastTransitionTime\\\":\\\"2025-08-13T01:03:27Z\\\",\\\"message\\\":\\\"kubelet is posting ready status\\\",\\\"reason\\\":\\\"KubeletReady\\\",\\\"status\\\":\\\"True\\\",\\\"type\\\":\\\"Ready\\\"}]}}\" for node \"ip-172-31-17-234\": Patch \"https://172.31.17.234:6443/api/v1/nodes/ip-172-31-17-234/status?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Aug 13 01:03:39.597898 kubelet[2589]: E0813 01:03:39.597814 2589 controller.go:195] "Failed to update lease" err="Put \"https://172.31.17.234:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-234?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Aug 13 01:03:39.933041 systemd[1]: cri-containerd-d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5.scope: Deactivated successfully. Aug 13 01:03:39.945288 kernel: kauditd_printk_skb: 138 callbacks suppressed Aug 13 01:03:39.950399 kernel: audit: type=1334 audit(1755047019.937:1743): prog-id=90 op=UNLOAD Aug 13 01:03:39.951074 kernel: audit: type=1334 audit(1755047019.937:1744): prog-id=94 op=UNLOAD Aug 13 01:03:39.937000 audit: BPF prog-id=90 op=UNLOAD Aug 13 01:03:39.937000 audit: BPF prog-id=94 op=UNLOAD Aug 13 01:03:39.933315 systemd[1]: cri-containerd-d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5.scope: Consumed 2.402s CPU time. Aug 13 01:03:39.975796 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5-rootfs.mount: Deactivated successfully. Aug 13 01:03:39.978077 env[1714]: time="2025-08-13T01:03:39.977749066Z" level=info msg="shim disconnected" id=d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5 Aug 13 01:03:39.978077 env[1714]: time="2025-08-13T01:03:39.977808718Z" level=warning msg="cleaning up after shim disconnected" id=d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5 namespace=k8s.io Aug 13 01:03:39.978077 env[1714]: time="2025-08-13T01:03:39.977822144Z" level=info msg="cleaning up dead shim" Aug 13 01:03:39.993350 env[1714]: time="2025-08-13T01:03:39.993284486Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:03:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6490 runtime=io.containerd.runc.v2\n" Aug 13 01:03:40.203449 kubelet[2589]: I0813 01:03:40.203080 2589 scope.go:117] "RemoveContainer" containerID="d7b334955cc1e9348d0e785f0e4be0f81e07a0a79ae0896c102fe0efe4accfd5" Aug 13 01:03:40.213036 env[1714]: time="2025-08-13T01:03:40.212990357Z" level=info msg="CreateContainer within sandbox \"8b0d89cd603a1f8226304d78680cf06e5c6277d4d1498f041cd907f39ceda02f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Aug 13 01:03:40.245340 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1227411229.mount: Deactivated successfully. Aug 13 01:03:40.262141 env[1714]: time="2025-08-13T01:03:40.262027477Z" level=info msg="CreateContainer within sandbox \"8b0d89cd603a1f8226304d78680cf06e5c6277d4d1498f041cd907f39ceda02f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"db8ae9463d26382aad9e75e0ed55f4fd384537aa1999536b82fb3d25d6731acb\"" Aug 13 01:03:40.262878 env[1714]: time="2025-08-13T01:03:40.262790979Z" level=info msg="StartContainer for \"db8ae9463d26382aad9e75e0ed55f4fd384537aa1999536b82fb3d25d6731acb\"" Aug 13 01:03:40.285428 systemd[1]: Started cri-containerd-db8ae9463d26382aad9e75e0ed55f4fd384537aa1999536b82fb3d25d6731acb.scope. Aug 13 01:03:40.321439 kernel: audit: type=1400 audit(1755047020.307:1745): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.321754 kernel: audit: type=1400 audit(1755047020.307:1746): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.331151 kernel: audit: type=1400 audit(1755047020.307:1747): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.340368 kernel: audit: type=1400 audit(1755047020.307:1748): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.349254 kernel: audit: type=1400 audit(1755047020.307:1749): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.357017 kernel: audit: type=1400 audit(1755047020.307:1750): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.364591 kernel: audit: type=1400 audit(1755047020.307:1751): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.374515 kernel: audit: type=1400 audit(1755047020.307:1752): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.320000 audit: BPF prog-id=251 op=LOAD Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=2326 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:40.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386165393436336432363338326161643965373565306564353566 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=8 items=0 ppid=2326 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:40.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386165393436336432363338326161643965373565306564353566 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit: BPF prog-id=252 op=LOAD Aug 13 01:03:40.322000 audit[6513]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c00035bf40 items=0 ppid=2326 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:40.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386165393436336432363338326161643965373565306564353566 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit: BPF prog-id=253 op=LOAD Aug 13 01:03:40.322000 audit[6513]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c00035bf88 items=0 ppid=2326 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:40.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386165393436336432363338326161643965373565306564353566 Aug 13 01:03:40.322000 audit: BPF prog-id=253 op=UNLOAD Aug 13 01:03:40.322000 audit: BPF prog-id=252 op=UNLOAD Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { perfmon } for pid=6513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit[6513]: AVC avc: denied { bpf } for pid=6513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 01:03:40.322000 audit: BPF prog-id=254 op=LOAD Aug 13 01:03:40.322000 audit[6513]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c0003d4398 items=0 ppid=2326 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 01:03:40.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386165393436336432363338326161643965373565306564353566 Aug 13 01:03:40.391609 env[1714]: time="2025-08-13T01:03:40.391558699Z" level=info msg="StartContainer for \"db8ae9463d26382aad9e75e0ed55f4fd384537aa1999536b82fb3d25d6731acb\" returns successfully" Aug 13 01:03:42.047844 systemd[1]: run-containerd-runc-k8s.io-b69e26eee8a40ce5ae1278bc56b5af0d0a868e8d23f5523ccea47dec86846e69-runc.QBvIPb.mount: Deactivated successfully. Aug 13 01:03:47.217000 audit[5750]: AVC avc: denied { watch } for pid=5750 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.1481757705/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c79,c294 tclass=file permissive=0 Aug 13 01:03:47.223727 kernel: kauditd_printk_skb: 49 callbacks suppressed Aug 13 01:03:47.223852 kernel: audit: type=1400 audit(1755047027.217:1763): avc: denied { watch } for pid=5750 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.1481757705/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c79,c294 tclass=file permissive=0 Aug 13 01:03:47.217000 audit[5750]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001e38000 a2=fc6 a3=0 items=0 ppid=4676 pid=5750 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 key=(null) Aug 13 01:03:47.217000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:03:47.250300 kernel: audit: type=1300 audit(1755047027.217:1763): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001e38000 a2=fc6 a3=0 items=0 ppid=4676 pid=5750 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c79,c294 key=(null) Aug 13 01:03:47.250401 kernel: audit: type=1327 audit(1755047027.217:1763): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:03:47.601000 audit: BPF prog-id=243 op=UNLOAD Aug 13 01:03:47.604599 kernel: audit: type=1334 audit(1755047027.601:1764): prog-id=243 op=UNLOAD Aug 13 01:03:47.601776 systemd[1]: cri-containerd-b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183.scope: Deactivated successfully. Aug 13 01:03:47.606000 audit: BPF prog-id=246 op=UNLOAD Aug 13 01:03:47.610572 kernel: audit: type=1334 audit(1755047027.606:1765): prog-id=246 op=UNLOAD Aug 13 01:03:47.629997 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183-rootfs.mount: Deactivated successfully. Aug 13 01:03:47.663850 env[1714]: time="2025-08-13T01:03:47.663787266Z" level=info msg="shim disconnected" id=b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183 Aug 13 01:03:47.663850 env[1714]: time="2025-08-13T01:03:47.663850434Z" level=warning msg="cleaning up after shim disconnected" id=b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183 namespace=k8s.io Aug 13 01:03:47.664510 env[1714]: time="2025-08-13T01:03:47.663864118Z" level=info msg="cleaning up dead shim" Aug 13 01:03:47.676009 env[1714]: time="2025-08-13T01:03:47.675923505Z" level=warning msg="cleanup warnings time=\"2025-08-13T01:03:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6595 runtime=io.containerd.runc.v2\n" Aug 13 01:03:47.706123 kubelet[2589]: E0813 01:03:47.702727 2589 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"ip-172-31-17-234\": Get \"https://172.31.17.234:6443/api/v1/nodes/ip-172-31-17-234?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Aug 13 01:03:48.251627 kubelet[2589]: I0813 01:03:48.251587 2589 scope.go:117] "RemoveContainer" containerID="b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4" Aug 13 01:03:48.251948 kubelet[2589]: I0813 01:03:48.251699 2589 scope.go:117] "RemoveContainer" containerID="b2bd6f38b7bc92f9a041c1495d202e2aeb2de4fb0d42a148e5b42039dd98f183" Aug 13 01:03:48.285304 kubelet[2589]: E0813 01:03:48.285245 2589 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-5bf8dfcb4-kq8gb_tigera-operator(687247d8-922c-41cb-8f3e-68fe8db4749a)\"" pod="tigera-operator/tigera-operator-5bf8dfcb4-kq8gb" podUID="687247d8-922c-41cb-8f3e-68fe8db4749a" Aug 13 01:03:48.301137 env[1714]: time="2025-08-13T01:03:48.301084978Z" level=info msg="RemoveContainer for \"b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4\"" Aug 13 01:03:48.307858 env[1714]: time="2025-08-13T01:03:48.307765347Z" level=info msg="RemoveContainer for \"b866d58dde9b749399458052322ee69eca3b094d6d21017cf0425e8bb6e9d2a4\" returns successfully" Aug 13 01:03:49.610416 kubelet[2589]: E0813 01:03:49.610374 2589 controller.go:195] "Failed to update lease" err="Put \"https://172.31.17.234:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-234?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Aug 13 01:03:49.666000 audit[5835]: AVC avc: denied { watch } for pid=5835 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.2602478307/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c873,c908 tclass=file permissive=0 Aug 13 01:03:49.666000 audit[5835]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0017f22e0 a2=fc6 a3=0 items=0 ppid=5027 pid=5835 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 key=(null) Aug 13 01:03:49.686998 kernel: audit: type=1400 audit(1755047029.666:1766): avc: denied { watch } for pid=5835 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_01_01_13.2602478307/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c873,c908 tclass=file permissive=0 Aug 13 01:03:49.687234 kernel: audit: type=1300 audit(1755047029.666:1766): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0017f22e0 a2=fc6 a3=0 items=0 ppid=5027 pid=5835 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c873,c908 key=(null) Aug 13 01:03:49.666000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 01:03:49.695551 kernel: audit: type=1327 audit(1755047029.666:1766): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274