Aug 13 00:01:18.034496 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Aug 13 00:01:18.034543 kernel: Linux version 5.15.189-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Tue Aug 12 22:50:30 -00 2025 Aug 13 00:01:18.034567 kernel: efi: EFI v2.70 by EDK II Aug 13 00:01:18.034583 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Aug 13 00:01:18.034597 kernel: ACPI: Early table checksum verification disabled Aug 13 00:01:18.034611 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Aug 13 00:01:18.034627 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Aug 13 00:01:18.034641 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Aug 13 00:01:18.034655 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Aug 13 00:01:18.034668 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Aug 13 00:01:18.034687 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Aug 13 00:01:18.034701 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Aug 13 00:01:18.034715 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Aug 13 00:01:18.034729 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Aug 13 00:01:18.034745 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Aug 13 00:01:18.034765 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Aug 13 00:01:18.034779 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Aug 13 00:01:18.034793 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Aug 13 00:01:18.034808 kernel: printk: bootconsole [uart0] enabled Aug 13 00:01:18.034822 kernel: NUMA: Failed to initialise from firmware Aug 13 00:01:18.034836 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Aug 13 00:01:18.034851 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Aug 13 00:01:18.034866 kernel: Zone ranges: Aug 13 00:01:18.034880 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Aug 13 00:01:18.034895 kernel: DMA32 empty Aug 13 00:01:18.034909 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Aug 13 00:01:18.034927 kernel: Movable zone start for each node Aug 13 00:01:18.034942 kernel: Early memory node ranges Aug 13 00:01:18.034956 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Aug 13 00:01:18.034971 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Aug 13 00:01:18.034985 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Aug 13 00:01:18.034999 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Aug 13 00:01:18.035014 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Aug 13 00:01:18.035028 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Aug 13 00:01:18.035043 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Aug 13 00:01:18.035079 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Aug 13 00:01:18.035098 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Aug 13 00:01:18.035113 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Aug 13 00:01:18.035134 kernel: psci: probing for conduit method from ACPI. Aug 13 00:01:18.035149 kernel: psci: PSCIv1.0 detected in firmware. Aug 13 00:01:18.035171 kernel: psci: Using standard PSCI v0.2 function IDs Aug 13 00:01:18.035187 kernel: psci: Trusted OS migration not required Aug 13 00:01:18.035202 kernel: psci: SMC Calling Convention v1.1 Aug 13 00:01:18.035222 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Aug 13 00:01:18.035237 kernel: ACPI: SRAT not present Aug 13 00:01:18.035253 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Aug 13 00:01:18.035268 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Aug 13 00:01:18.035284 kernel: pcpu-alloc: [0] 0 [0] 1 Aug 13 00:01:18.035299 kernel: Detected PIPT I-cache on CPU0 Aug 13 00:01:18.035314 kernel: CPU features: detected: GIC system register CPU interface Aug 13 00:01:18.035330 kernel: CPU features: detected: Spectre-v2 Aug 13 00:01:18.035345 kernel: CPU features: detected: Spectre-v3a Aug 13 00:01:18.035380 kernel: CPU features: detected: Spectre-BHB Aug 13 00:01:18.035399 kernel: CPU features: kernel page table isolation forced ON by KASLR Aug 13 00:01:18.035419 kernel: CPU features: detected: Kernel page table isolation (KPTI) Aug 13 00:01:18.035435 kernel: CPU features: detected: ARM erratum 1742098 Aug 13 00:01:18.035450 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Aug 13 00:01:18.035465 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Aug 13 00:01:18.035480 kernel: Policy zone: Normal Aug 13 00:01:18.035498 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=32404c0887e5b8a80b0f069916a8040bfd969c7a8f47a2db1168b24bc04220cc Aug 13 00:01:18.035514 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Aug 13 00:01:18.035530 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Aug 13 00:01:18.035545 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Aug 13 00:01:18.035560 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Aug 13 00:01:18.035580 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Aug 13 00:01:18.035596 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Aug 13 00:01:18.035612 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Aug 13 00:01:18.035627 kernel: trace event string verifier disabled Aug 13 00:01:18.035642 kernel: rcu: Preemptible hierarchical RCU implementation. Aug 13 00:01:18.035658 kernel: rcu: RCU event tracing is enabled. Aug 13 00:01:18.035674 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Aug 13 00:01:18.035690 kernel: Trampoline variant of Tasks RCU enabled. Aug 13 00:01:18.035706 kernel: Tracing variant of Tasks RCU enabled. Aug 13 00:01:18.035721 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Aug 13 00:01:18.035736 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Aug 13 00:01:18.035751 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Aug 13 00:01:18.035772 kernel: GICv3: 96 SPIs implemented Aug 13 00:01:18.035787 kernel: GICv3: 0 Extended SPIs implemented Aug 13 00:01:18.035802 kernel: GICv3: Distributor has no Range Selector support Aug 13 00:01:18.035817 kernel: Root IRQ handler: gic_handle_irq Aug 13 00:01:18.035832 kernel: GICv3: 16 PPIs implemented Aug 13 00:01:18.035848 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Aug 13 00:01:18.035863 kernel: ACPI: SRAT not present Aug 13 00:01:18.035877 kernel: ITS [mem 0x10080000-0x1009ffff] Aug 13 00:01:18.035892 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Aug 13 00:01:18.035908 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Aug 13 00:01:18.035923 kernel: GICv3: using LPI property table @0x00000004000b0000 Aug 13 00:01:18.035942 kernel: ITS: Using hypervisor restricted LPI range [128] Aug 13 00:01:18.035958 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Aug 13 00:01:18.035973 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Aug 13 00:01:18.035989 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Aug 13 00:01:18.036004 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Aug 13 00:01:18.036019 kernel: Console: colour dummy device 80x25 Aug 13 00:01:18.036035 kernel: printk: console [tty1] enabled Aug 13 00:01:18.036051 kernel: ACPI: Core revision 20210730 Aug 13 00:01:18.036067 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Aug 13 00:01:18.036082 kernel: pid_max: default: 32768 minimum: 301 Aug 13 00:01:18.036102 kernel: LSM: Security Framework initializing Aug 13 00:01:18.036119 kernel: SELinux: Initializing. Aug 13 00:01:18.036135 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Aug 13 00:01:18.036151 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Aug 13 00:01:18.036166 kernel: rcu: Hierarchical SRCU implementation. Aug 13 00:01:18.036182 kernel: Platform MSI: ITS@0x10080000 domain created Aug 13 00:01:18.036197 kernel: PCI/MSI: ITS@0x10080000 domain created Aug 13 00:01:18.036212 kernel: Remapping and enabling EFI services. Aug 13 00:01:18.036228 kernel: smp: Bringing up secondary CPUs ... Aug 13 00:01:18.036243 kernel: Detected PIPT I-cache on CPU1 Aug 13 00:01:18.036263 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Aug 13 00:01:18.036279 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Aug 13 00:01:18.036295 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Aug 13 00:01:18.036311 kernel: smp: Brought up 1 node, 2 CPUs Aug 13 00:01:18.036326 kernel: SMP: Total of 2 processors activated. Aug 13 00:01:18.036341 kernel: CPU features: detected: 32-bit EL0 Support Aug 13 00:01:18.038851 kernel: CPU features: detected: 32-bit EL1 Support Aug 13 00:01:18.038886 kernel: CPU features: detected: CRC32 instructions Aug 13 00:01:18.038902 kernel: CPU: All CPU(s) started at EL1 Aug 13 00:01:18.038927 kernel: alternatives: patching kernel code Aug 13 00:01:18.038944 kernel: devtmpfs: initialized Aug 13 00:01:18.038971 kernel: KASLR disabled due to lack of seed Aug 13 00:01:18.038992 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Aug 13 00:01:18.039009 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Aug 13 00:01:18.039025 kernel: pinctrl core: initialized pinctrl subsystem Aug 13 00:01:18.039041 kernel: SMBIOS 3.0.0 present. Aug 13 00:01:18.039076 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Aug 13 00:01:18.039095 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Aug 13 00:01:18.039111 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Aug 13 00:01:18.039128 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Aug 13 00:01:18.039150 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Aug 13 00:01:18.039167 kernel: audit: initializing netlink subsys (disabled) Aug 13 00:01:18.039183 kernel: audit: type=2000 audit(0.298:1): state=initialized audit_enabled=0 res=1 Aug 13 00:01:18.039200 kernel: thermal_sys: Registered thermal governor 'step_wise' Aug 13 00:01:18.039216 kernel: cpuidle: using governor menu Aug 13 00:01:18.039236 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Aug 13 00:01:18.039252 kernel: ASID allocator initialised with 32768 entries Aug 13 00:01:18.039268 kernel: ACPI: bus type PCI registered Aug 13 00:01:18.039285 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Aug 13 00:01:18.039302 kernel: Serial: AMBA PL011 UART driver Aug 13 00:01:18.039318 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Aug 13 00:01:18.039334 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Aug 13 00:01:18.039351 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Aug 13 00:01:18.039396 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Aug 13 00:01:18.039419 kernel: cryptd: max_cpu_qlen set to 1000 Aug 13 00:01:18.039436 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Aug 13 00:01:18.039452 kernel: ACPI: Added _OSI(Module Device) Aug 13 00:01:18.039468 kernel: ACPI: Added _OSI(Processor Device) Aug 13 00:01:18.039484 kernel: ACPI: Added _OSI(Processor Aggregator Device) Aug 13 00:01:18.039500 kernel: ACPI: Added _OSI(Linux-Dell-Video) Aug 13 00:01:18.039516 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Aug 13 00:01:18.039532 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Aug 13 00:01:18.039548 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Aug 13 00:01:18.039564 kernel: ACPI: Interpreter enabled Aug 13 00:01:18.039584 kernel: ACPI: Using GIC for interrupt routing Aug 13 00:01:18.039600 kernel: ACPI: MCFG table detected, 1 entries Aug 13 00:01:18.039616 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Aug 13 00:01:18.039907 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Aug 13 00:01:18.040095 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Aug 13 00:01:18.040277 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Aug 13 00:01:18.053561 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Aug 13 00:01:18.053793 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Aug 13 00:01:18.053818 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Aug 13 00:01:18.053836 kernel: acpiphp: Slot [1] registered Aug 13 00:01:18.053852 kernel: acpiphp: Slot [2] registered Aug 13 00:01:18.053869 kernel: acpiphp: Slot [3] registered Aug 13 00:01:18.053885 kernel: acpiphp: Slot [4] registered Aug 13 00:01:18.053901 kernel: acpiphp: Slot [5] registered Aug 13 00:01:18.053917 kernel: acpiphp: Slot [6] registered Aug 13 00:01:18.053933 kernel: acpiphp: Slot [7] registered Aug 13 00:01:18.053955 kernel: acpiphp: Slot [8] registered Aug 13 00:01:18.053971 kernel: acpiphp: Slot [9] registered Aug 13 00:01:18.053986 kernel: acpiphp: Slot [10] registered Aug 13 00:01:18.054002 kernel: acpiphp: Slot [11] registered Aug 13 00:01:18.054018 kernel: acpiphp: Slot [12] registered Aug 13 00:01:18.054034 kernel: acpiphp: Slot [13] registered Aug 13 00:01:18.054050 kernel: acpiphp: Slot [14] registered Aug 13 00:01:18.054066 kernel: acpiphp: Slot [15] registered Aug 13 00:01:18.054082 kernel: acpiphp: Slot [16] registered Aug 13 00:01:18.054102 kernel: acpiphp: Slot [17] registered Aug 13 00:01:18.054119 kernel: acpiphp: Slot [18] registered Aug 13 00:01:18.054134 kernel: acpiphp: Slot [19] registered Aug 13 00:01:18.054150 kernel: acpiphp: Slot [20] registered Aug 13 00:01:18.054166 kernel: acpiphp: Slot [21] registered Aug 13 00:01:18.054182 kernel: acpiphp: Slot [22] registered Aug 13 00:01:18.054198 kernel: acpiphp: Slot [23] registered Aug 13 00:01:18.054213 kernel: acpiphp: Slot [24] registered Aug 13 00:01:18.054229 kernel: acpiphp: Slot [25] registered Aug 13 00:01:18.054245 kernel: acpiphp: Slot [26] registered Aug 13 00:01:18.054265 kernel: acpiphp: Slot [27] registered Aug 13 00:01:18.054281 kernel: acpiphp: Slot [28] registered Aug 13 00:01:18.054297 kernel: acpiphp: Slot [29] registered Aug 13 00:01:18.054312 kernel: acpiphp: Slot [30] registered Aug 13 00:01:18.054328 kernel: acpiphp: Slot [31] registered Aug 13 00:01:18.054344 kernel: PCI host bridge to bus 0000:00 Aug 13 00:01:18.054558 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Aug 13 00:01:18.054726 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Aug 13 00:01:18.054896 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Aug 13 00:01:18.055078 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Aug 13 00:01:18.055315 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Aug 13 00:01:18.055543 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Aug 13 00:01:18.055735 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Aug 13 00:01:18.055937 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Aug 13 00:01:18.056138 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Aug 13 00:01:18.056329 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Aug 13 00:01:18.056557 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Aug 13 00:01:18.056748 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Aug 13 00:01:18.056937 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Aug 13 00:01:18.057125 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Aug 13 00:01:18.057314 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Aug 13 00:01:18.071647 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Aug 13 00:01:18.071863 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Aug 13 00:01:18.072060 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Aug 13 00:01:18.072247 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Aug 13 00:01:18.072475 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Aug 13 00:01:18.072653 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Aug 13 00:01:18.072819 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Aug 13 00:01:18.072993 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Aug 13 00:01:18.073016 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Aug 13 00:01:18.073033 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Aug 13 00:01:18.073050 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Aug 13 00:01:18.073066 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Aug 13 00:01:18.073082 kernel: iommu: Default domain type: Translated Aug 13 00:01:18.073099 kernel: iommu: DMA domain TLB invalidation policy: strict mode Aug 13 00:01:18.073116 kernel: vgaarb: loaded Aug 13 00:01:18.073131 kernel: pps_core: LinuxPPS API ver. 1 registered Aug 13 00:01:18.073153 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Aug 13 00:01:18.073169 kernel: PTP clock support registered Aug 13 00:01:18.073185 kernel: Registered efivars operations Aug 13 00:01:18.073201 kernel: clocksource: Switched to clocksource arch_sys_counter Aug 13 00:01:18.073217 kernel: VFS: Disk quotas dquot_6.6.0 Aug 13 00:01:18.073233 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Aug 13 00:01:18.073249 kernel: pnp: PnP ACPI init Aug 13 00:01:18.078437 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Aug 13 00:01:18.078552 kernel: pnp: PnP ACPI: found 1 devices Aug 13 00:01:18.078571 kernel: NET: Registered PF_INET protocol family Aug 13 00:01:18.078588 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Aug 13 00:01:18.078606 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Aug 13 00:01:18.078623 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Aug 13 00:01:18.078640 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Aug 13 00:01:18.078657 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Aug 13 00:01:18.078673 kernel: TCP: Hash tables configured (established 32768 bind 32768) Aug 13 00:01:18.078690 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Aug 13 00:01:18.078711 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Aug 13 00:01:18.078727 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Aug 13 00:01:18.078744 kernel: PCI: CLS 0 bytes, default 64 Aug 13 00:01:18.078760 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Aug 13 00:01:18.078776 kernel: kvm [1]: HYP mode not available Aug 13 00:01:18.078793 kernel: Initialise system trusted keyrings Aug 13 00:01:18.078810 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Aug 13 00:01:18.078826 kernel: Key type asymmetric registered Aug 13 00:01:18.078843 kernel: Asymmetric key parser 'x509' registered Aug 13 00:01:18.082161 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Aug 13 00:01:18.082186 kernel: io scheduler mq-deadline registered Aug 13 00:01:18.082203 kernel: io scheduler kyber registered Aug 13 00:01:18.082220 kernel: io scheduler bfq registered Aug 13 00:01:18.082498 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Aug 13 00:01:18.082525 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Aug 13 00:01:18.082544 kernel: ACPI: button: Power Button [PWRB] Aug 13 00:01:18.082560 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Aug 13 00:01:18.082577 kernel: ACPI: button: Sleep Button [SLPB] Aug 13 00:01:18.082599 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Aug 13 00:01:18.082618 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Aug 13 00:01:18.082810 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Aug 13 00:01:18.082836 kernel: printk: console [ttyS0] disabled Aug 13 00:01:18.082853 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Aug 13 00:01:18.082870 kernel: printk: console [ttyS0] enabled Aug 13 00:01:18.082886 kernel: printk: bootconsole [uart0] disabled Aug 13 00:01:18.082903 kernel: thunder_xcv, ver 1.0 Aug 13 00:01:18.082919 kernel: thunder_bgx, ver 1.0 Aug 13 00:01:18.082940 kernel: nicpf, ver 1.0 Aug 13 00:01:18.082956 kernel: nicvf, ver 1.0 Aug 13 00:01:18.083201 kernel: rtc-efi rtc-efi.0: registered as rtc0 Aug 13 00:01:18.083430 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-08-13T00:01:17 UTC (1755043277) Aug 13 00:01:18.083456 kernel: hid: raw HID events driver (C) Jiri Kosina Aug 13 00:01:18.083473 kernel: NET: Registered PF_INET6 protocol family Aug 13 00:01:18.083489 kernel: Segment Routing with IPv6 Aug 13 00:01:18.083505 kernel: In-situ OAM (IOAM) with IPv6 Aug 13 00:01:18.083528 kernel: NET: Registered PF_PACKET protocol family Aug 13 00:01:18.083544 kernel: Key type dns_resolver registered Aug 13 00:01:18.083560 kernel: registered taskstats version 1 Aug 13 00:01:18.083576 kernel: Loading compiled-in X.509 certificates Aug 13 00:01:18.083593 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.189-flatcar: 72b807ae6dac6ab18c2f4ab9460d3472cf28c19d' Aug 13 00:01:18.083609 kernel: Key type .fscrypt registered Aug 13 00:01:18.083625 kernel: Key type fscrypt-provisioning registered Aug 13 00:01:18.083640 kernel: ima: No TPM chip found, activating TPM-bypass! Aug 13 00:01:18.083656 kernel: ima: Allocated hash algorithm: sha1 Aug 13 00:01:18.083676 kernel: ima: No architecture policies found Aug 13 00:01:18.083693 kernel: clk: Disabling unused clocks Aug 13 00:01:18.083709 kernel: Freeing unused kernel memory: 36416K Aug 13 00:01:18.083725 kernel: Run /init as init process Aug 13 00:01:18.083741 kernel: with arguments: Aug 13 00:01:18.083757 kernel: /init Aug 13 00:01:18.083772 kernel: with environment: Aug 13 00:01:18.083788 kernel: HOME=/ Aug 13 00:01:18.083803 kernel: TERM=linux Aug 13 00:01:18.083823 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Aug 13 00:01:18.083844 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:01:18.083865 systemd[1]: Detected virtualization amazon. Aug 13 00:01:18.083883 systemd[1]: Detected architecture arm64. Aug 13 00:01:18.083900 systemd[1]: Running in initrd. Aug 13 00:01:18.083918 systemd[1]: No hostname configured, using default hostname. Aug 13 00:01:18.083935 systemd[1]: Hostname set to . Aug 13 00:01:18.083957 systemd[1]: Initializing machine ID from VM UUID. Aug 13 00:01:18.083975 systemd[1]: Queued start job for default target initrd.target. Aug 13 00:01:18.083992 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:01:18.084010 systemd[1]: Reached target cryptsetup.target. Aug 13 00:01:18.084026 systemd[1]: Reached target paths.target. Aug 13 00:01:18.084044 systemd[1]: Reached target slices.target. Aug 13 00:01:18.084061 systemd[1]: Reached target swap.target. Aug 13 00:01:18.084078 systemd[1]: Reached target timers.target. Aug 13 00:01:18.084100 systemd[1]: Listening on iscsid.socket. Aug 13 00:01:18.084117 systemd[1]: Listening on iscsiuio.socket. Aug 13 00:01:18.084135 systemd[1]: Listening on systemd-journald-audit.socket. Aug 13 00:01:18.084152 systemd[1]: Listening on systemd-journald-dev-log.socket. Aug 13 00:01:18.084169 systemd[1]: Listening on systemd-journald.socket. Aug 13 00:01:18.084187 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:01:18.084204 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:01:18.084222 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:01:18.084243 systemd[1]: Reached target sockets.target. Aug 13 00:01:18.084261 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:01:18.084278 systemd[1]: Finished network-cleanup.service. Aug 13 00:01:18.084295 systemd[1]: Starting systemd-fsck-usr.service... Aug 13 00:01:18.084313 systemd[1]: Starting systemd-journald.service... Aug 13 00:01:18.084330 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:01:18.084348 systemd[1]: Starting systemd-resolved.service... Aug 13 00:01:18.084397 systemd[1]: Starting systemd-vconsole-setup.service... Aug 13 00:01:18.084418 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:01:18.084441 systemd[1]: Finished systemd-fsck-usr.service. Aug 13 00:01:18.084459 systemd[1]: Finished systemd-vconsole-setup.service. Aug 13 00:01:18.084477 systemd[1]: Starting dracut-cmdline-ask.service... Aug 13 00:01:18.084494 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 00:01:18.084512 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 00:01:18.084530 kernel: audit: type=1130 audit(1755043278.042:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.084548 systemd[1]: Finished dracut-cmdline-ask.service. Aug 13 00:01:18.084566 kernel: audit: type=1130 audit(1755043278.058:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.084588 systemd[1]: Starting dracut-cmdline.service... Aug 13 00:01:18.084609 systemd-journald[310]: Journal started Aug 13 00:01:18.084695 systemd-journald[310]: Runtime Journal (/run/log/journal/ec27a952b1cf92ad5edde044e9ead7dd) is 8.0M, max 75.4M, 67.4M free. Aug 13 00:01:18.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:17.995246 systemd-modules-load[311]: Inserted module 'overlay' Aug 13 00:01:18.099668 systemd[1]: Started systemd-journald.service. Aug 13 00:01:18.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.115000 dracut-cmdline[327]: dracut-dracut-053 Aug 13 00:01:18.120575 systemd-resolved[312]: Positive Trust Anchors: Aug 13 00:01:18.128558 kernel: audit: type=1130 audit(1755043278.102:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.128606 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Aug 13 00:01:18.121976 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 00:01:18.133734 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=32404c0887e5b8a80b0f069916a8040bfd969c7a8f47a2db1168b24bc04220cc Aug 13 00:01:18.122034 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 00:01:18.180574 systemd-modules-load[311]: Inserted module 'br_netfilter' Aug 13 00:01:18.184799 kernel: Bridge firewalling registered Aug 13 00:01:18.207415 kernel: SCSI subsystem initialized Aug 13 00:01:18.226209 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Aug 13 00:01:18.226297 kernel: device-mapper: uevent: version 1.0.3 Aug 13 00:01:18.232477 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Aug 13 00:01:18.238040 systemd-modules-load[311]: Inserted module 'dm_multipath' Aug 13 00:01:18.240407 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:01:18.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.248308 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:01:18.266391 kernel: audit: type=1130 audit(1755043278.241:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.275394 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:01:18.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.287382 kernel: audit: type=1130 audit(1755043278.276:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.360453 kernel: Loading iSCSI transport class v2.0-870. Aug 13 00:01:18.382403 kernel: iscsi: registered transport (tcp) Aug 13 00:01:18.410599 kernel: iscsi: registered transport (qla4xxx) Aug 13 00:01:18.410700 kernel: QLogic iSCSI HBA Driver Aug 13 00:01:18.586393 kernel: random: crng init done Aug 13 00:01:18.586731 systemd-resolved[312]: Defaulting to hostname 'linux'. Aug 13 00:01:18.589336 systemd[1]: Started systemd-resolved.service. Aug 13 00:01:18.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.591272 systemd[1]: Reached target nss-lookup.target. Aug 13 00:01:18.606305 kernel: audit: type=1130 audit(1755043278.589:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.620121 systemd[1]: Finished dracut-cmdline.service. Aug 13 00:01:18.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.627741 systemd[1]: Starting dracut-pre-udev.service... Aug 13 00:01:18.635425 kernel: audit: type=1130 audit(1755043278.620:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:18.696411 kernel: raid6: neonx8 gen() 6399 MB/s Aug 13 00:01:18.713392 kernel: raid6: neonx8 xor() 4729 MB/s Aug 13 00:01:18.731393 kernel: raid6: neonx4 gen() 6521 MB/s Aug 13 00:01:18.749396 kernel: raid6: neonx4 xor() 4911 MB/s Aug 13 00:01:18.767393 kernel: raid6: neonx2 gen() 5775 MB/s Aug 13 00:01:18.785394 kernel: raid6: neonx2 xor() 4508 MB/s Aug 13 00:01:18.803392 kernel: raid6: neonx1 gen() 4463 MB/s Aug 13 00:01:18.821393 kernel: raid6: neonx1 xor() 3675 MB/s Aug 13 00:01:18.839391 kernel: raid6: int64x8 gen() 3420 MB/s Aug 13 00:01:18.857395 kernel: raid6: int64x8 xor() 2088 MB/s Aug 13 00:01:18.875392 kernel: raid6: int64x4 gen() 3785 MB/s Aug 13 00:01:18.893391 kernel: raid6: int64x4 xor() 2190 MB/s Aug 13 00:01:18.911392 kernel: raid6: int64x2 gen() 3597 MB/s Aug 13 00:01:18.929393 kernel: raid6: int64x2 xor() 1946 MB/s Aug 13 00:01:18.947393 kernel: raid6: int64x1 gen() 2764 MB/s Aug 13 00:01:18.966951 kernel: raid6: int64x1 xor() 1450 MB/s Aug 13 00:01:18.966990 kernel: raid6: using algorithm neonx4 gen() 6521 MB/s Aug 13 00:01:18.967014 kernel: raid6: .... xor() 4911 MB/s, rmw enabled Aug 13 00:01:18.968829 kernel: raid6: using neon recovery algorithm Aug 13 00:01:18.987398 kernel: xor: measuring software checksum speed Aug 13 00:01:18.989389 kernel: 8regs : 8805 MB/sec Aug 13 00:01:18.991391 kernel: 32regs : 10448 MB/sec Aug 13 00:01:18.995059 kernel: arm64_neon : 8691 MB/sec Aug 13 00:01:18.995092 kernel: xor: using function: 32regs (10448 MB/sec) Aug 13 00:01:19.091407 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Aug 13 00:01:19.108978 systemd[1]: Finished dracut-pre-udev.service. Aug 13 00:01:19.120118 kernel: audit: type=1130 audit(1755043279.109:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:19.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:19.118000 audit: BPF prog-id=7 op=LOAD Aug 13 00:01:19.120919 systemd[1]: Starting systemd-udevd.service... Aug 13 00:01:19.127513 kernel: audit: type=1334 audit(1755043279.118:10): prog-id=7 op=LOAD Aug 13 00:01:19.118000 audit: BPF prog-id=8 op=LOAD Aug 13 00:01:19.152252 systemd-udevd[508]: Using default interface naming scheme 'v252'. Aug 13 00:01:19.163248 systemd[1]: Started systemd-udevd.service. Aug 13 00:01:19.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:19.167780 systemd[1]: Starting dracut-pre-trigger.service... Aug 13 00:01:19.198940 dracut-pre-trigger[512]: rd.md=0: removing MD RAID activation Aug 13 00:01:19.266981 systemd[1]: Finished dracut-pre-trigger.service. Aug 13 00:01:19.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:19.270653 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:01:19.371468 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:01:19.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:19.498652 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Aug 13 00:01:19.498724 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Aug 13 00:01:19.520901 kernel: ena 0000:00:05.0: ENA device version: 0.10 Aug 13 00:01:19.521147 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Aug 13 00:01:19.521342 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Aug 13 00:01:19.521399 kernel: nvme nvme0: pci function 0000:00:04.0 Aug 13 00:01:19.521655 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:5c:02:3b:70:95 Aug 13 00:01:19.527412 kernel: nvme nvme0: 2/0/0 default/read/poll queues Aug 13 00:01:19.537797 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Aug 13 00:01:19.537844 kernel: GPT:9289727 != 16777215 Aug 13 00:01:19.537868 kernel: GPT:Alternate GPT header not at the end of the disk. Aug 13 00:01:19.540043 kernel: GPT:9289727 != 16777215 Aug 13 00:01:19.541371 kernel: GPT: Use GNU Parted to correct GPT errors. Aug 13 00:01:19.544855 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:01:19.549665 (udev-worker)[560]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:01:19.620413 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (571) Aug 13 00:01:19.648464 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Aug 13 00:01:19.707740 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Aug 13 00:01:19.725622 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Aug 13 00:01:19.731534 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Aug 13 00:01:19.755452 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:01:19.769139 systemd[1]: Starting disk-uuid.service... Aug 13 00:01:19.787056 disk-uuid[670]: Primary Header is updated. Aug 13 00:01:19.787056 disk-uuid[670]: Secondary Entries is updated. Aug 13 00:01:19.787056 disk-uuid[670]: Secondary Header is updated. Aug 13 00:01:19.801081 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:01:19.801116 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:01:20.810232 disk-uuid[671]: The operation has completed successfully. Aug 13 00:01:20.815007 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:01:20.985157 systemd[1]: disk-uuid.service: Deactivated successfully. Aug 13 00:01:20.987657 systemd[1]: Finished disk-uuid.service. Aug 13 00:01:20.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:20.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.020246 systemd[1]: Starting verity-setup.service... Aug 13 00:01:21.058398 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Aug 13 00:01:21.159482 systemd[1]: Found device dev-mapper-usr.device. Aug 13 00:01:21.166057 systemd[1]: Mounting sysusr-usr.mount... Aug 13 00:01:21.174418 systemd[1]: Finished verity-setup.service. Aug 13 00:01:21.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.272394 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Aug 13 00:01:21.272710 systemd[1]: Mounted sysusr-usr.mount. Aug 13 00:01:21.275875 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Aug 13 00:01:21.279989 systemd[1]: Starting ignition-setup.service... Aug 13 00:01:21.286283 systemd[1]: Starting parse-ip-for-networkd.service... Aug 13 00:01:21.321842 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:01:21.321909 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:01:21.324430 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:01:21.359395 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:01:21.379167 systemd[1]: mnt-oem.mount: Deactivated successfully. Aug 13 00:01:21.394914 systemd[1]: Finished ignition-setup.service. Aug 13 00:01:21.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.400217 systemd[1]: Starting ignition-fetch-offline.service... Aug 13 00:01:21.461079 systemd[1]: Finished parse-ip-for-networkd.service. Aug 13 00:01:21.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.469000 audit: BPF prog-id=9 op=LOAD Aug 13 00:01:21.472509 systemd[1]: Starting systemd-networkd.service... Aug 13 00:01:21.518645 systemd-networkd[1183]: lo: Link UP Aug 13 00:01:21.518666 systemd-networkd[1183]: lo: Gained carrier Aug 13 00:01:21.522542 systemd-networkd[1183]: Enumeration completed Aug 13 00:01:21.522708 systemd[1]: Started systemd-networkd.service. Aug 13 00:01:21.524761 systemd[1]: Reached target network.target. Aug 13 00:01:21.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.532477 systemd[1]: Starting iscsiuio.service... Aug 13 00:01:21.540070 systemd-networkd[1183]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:01:21.555240 systemd[1]: Started iscsiuio.service. Aug 13 00:01:21.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.560086 systemd[1]: Starting iscsid.service... Aug 13 00:01:21.560785 systemd-networkd[1183]: eth0: Link UP Aug 13 00:01:21.572595 iscsid[1188]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:01:21.572595 iscsid[1188]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Aug 13 00:01:21.572595 iscsid[1188]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Aug 13 00:01:21.572595 iscsid[1188]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Aug 13 00:01:21.572595 iscsid[1188]: If using hardware iscsi like qla4xxx this message can be ignored. Aug 13 00:01:21.572595 iscsid[1188]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:01:21.572595 iscsid[1188]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Aug 13 00:01:21.560794 systemd-networkd[1183]: eth0: Gained carrier Aug 13 00:01:21.573535 systemd-networkd[1183]: eth0: DHCPv4 address 172.31.17.40/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 00:01:21.609273 systemd[1]: Started iscsid.service. Aug 13 00:01:21.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.614303 systemd[1]: Starting dracut-initqueue.service... Aug 13 00:01:21.642634 systemd[1]: Finished dracut-initqueue.service. Aug 13 00:01:21.646260 systemd[1]: Reached target remote-fs-pre.target. Aug 13 00:01:21.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.650173 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:01:21.650322 systemd[1]: Reached target remote-fs.target. Aug 13 00:01:21.657118 systemd[1]: Starting dracut-pre-mount.service... Aug 13 00:01:21.680384 systemd[1]: Finished dracut-pre-mount.service. Aug 13 00:01:21.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.734143 ignition[1143]: Ignition 2.14.0 Aug 13 00:01:21.734171 ignition[1143]: Stage: fetch-offline Aug 13 00:01:21.734795 ignition[1143]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:21.734858 ignition[1143]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:21.762985 ignition[1143]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:21.765917 ignition[1143]: Ignition finished successfully Aug 13 00:01:21.769276 systemd[1]: Finished ignition-fetch-offline.service. Aug 13 00:01:21.784827 kernel: kauditd_printk_skb: 15 callbacks suppressed Aug 13 00:01:21.784865 kernel: audit: type=1130 audit(1755043281.769:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.772789 systemd[1]: Starting ignition-fetch.service... Aug 13 00:01:21.792781 ignition[1207]: Ignition 2.14.0 Aug 13 00:01:21.794566 ignition[1207]: Stage: fetch Aug 13 00:01:21.796297 ignition[1207]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:21.798873 ignition[1207]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:21.810472 ignition[1207]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:21.813039 ignition[1207]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:21.826344 ignition[1207]: INFO : PUT result: OK Aug 13 00:01:21.830082 ignition[1207]: DEBUG : parsed url from cmdline: "" Aug 13 00:01:21.832313 ignition[1207]: INFO : no config URL provided Aug 13 00:01:21.832313 ignition[1207]: INFO : reading system config file "/usr/lib/ignition/user.ign" Aug 13 00:01:21.832313 ignition[1207]: INFO : no config at "/usr/lib/ignition/user.ign" Aug 13 00:01:21.832313 ignition[1207]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:21.841981 ignition[1207]: INFO : PUT result: OK Aug 13 00:01:21.843603 ignition[1207]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Aug 13 00:01:21.846873 ignition[1207]: INFO : GET result: OK Aug 13 00:01:21.848581 ignition[1207]: DEBUG : parsing config with SHA512: c3a5d96af47f1ca32e5ae5e49c4adf7d49a25959079caf13eed99e4dde131670cf37f6bfb0e4c2426e28c3d03d09aca3300120be148c5169a69a54dcc5d952b6 Aug 13 00:01:21.862650 unknown[1207]: fetched base config from "system" Aug 13 00:01:21.862680 unknown[1207]: fetched base config from "system" Aug 13 00:01:21.862695 unknown[1207]: fetched user config from "aws" Aug 13 00:01:21.868877 ignition[1207]: fetch: fetch complete Aug 13 00:01:21.868902 ignition[1207]: fetch: fetch passed Aug 13 00:01:21.869004 ignition[1207]: Ignition finished successfully Aug 13 00:01:21.873928 systemd[1]: Finished ignition-fetch.service. Aug 13 00:01:21.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.878756 systemd[1]: Starting ignition-kargs.service... Aug 13 00:01:21.889117 kernel: audit: type=1130 audit(1755043281.876:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.902314 ignition[1213]: Ignition 2.14.0 Aug 13 00:01:21.902342 ignition[1213]: Stage: kargs Aug 13 00:01:21.902683 ignition[1213]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:21.902742 ignition[1213]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:21.918519 ignition[1213]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:21.921034 ignition[1213]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:21.924261 ignition[1213]: INFO : PUT result: OK Aug 13 00:01:21.930700 ignition[1213]: kargs: kargs passed Aug 13 00:01:21.930979 ignition[1213]: Ignition finished successfully Aug 13 00:01:21.936641 systemd[1]: Finished ignition-kargs.service. Aug 13 00:01:21.959316 kernel: audit: type=1130 audit(1755043281.935:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.938254 systemd[1]: Starting ignition-disks.service... Aug 13 00:01:21.960591 ignition[1219]: Ignition 2.14.0 Aug 13 00:01:21.960606 ignition[1219]: Stage: disks Aug 13 00:01:21.960906 ignition[1219]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:21.960963 ignition[1219]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:21.975380 ignition[1219]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:21.980615 ignition[1219]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:21.980615 ignition[1219]: INFO : PUT result: OK Aug 13 00:01:21.987579 ignition[1219]: disks: disks passed Aug 13 00:01:21.987664 ignition[1219]: Ignition finished successfully Aug 13 00:01:21.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.000415 kernel: audit: type=1130 audit(1755043281.990:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:21.989244 systemd[1]: Finished ignition-disks.service. Aug 13 00:01:21.992431 systemd[1]: Reached target initrd-root-device.target. Aug 13 00:01:22.002437 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:01:22.005789 systemd[1]: Reached target local-fs.target. Aug 13 00:01:22.009169 systemd[1]: Reached target sysinit.target. Aug 13 00:01:22.012416 systemd[1]: Reached target basic.target. Aug 13 00:01:22.020012 systemd[1]: Starting systemd-fsck-root.service... Aug 13 00:01:22.065843 systemd-fsck[1227]: ROOT: clean, 629/553520 files, 56026/553472 blocks Aug 13 00:01:22.073251 systemd[1]: Finished systemd-fsck-root.service. Aug 13 00:01:22.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.087701 kernel: audit: type=1130 audit(1755043282.072:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.074784 systemd[1]: Mounting sysroot.mount... Aug 13 00:01:22.104422 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Aug 13 00:01:22.105628 systemd[1]: Mounted sysroot.mount. Aug 13 00:01:22.105934 systemd[1]: Reached target initrd-root-fs.target. Aug 13 00:01:22.121148 systemd[1]: Mounting sysroot-usr.mount... Aug 13 00:01:22.125506 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Aug 13 00:01:22.126858 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Aug 13 00:01:22.126917 systemd[1]: Reached target ignition-diskful.target. Aug 13 00:01:22.138231 systemd[1]: Mounted sysroot-usr.mount. Aug 13 00:01:22.146428 systemd[1]: Starting initrd-setup-root.service... Aug 13 00:01:22.165494 initrd-setup-root[1248]: cut: /sysroot/etc/passwd: No such file or directory Aug 13 00:01:22.187534 initrd-setup-root[1256]: cut: /sysroot/etc/group: No such file or directory Aug 13 00:01:22.195948 initrd-setup-root[1264]: cut: /sysroot/etc/shadow: No such file or directory Aug 13 00:01:22.201096 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 00:01:22.213148 initrd-setup-root[1273]: cut: /sysroot/etc/gshadow: No such file or directory Aug 13 00:01:22.231406 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1267) Aug 13 00:01:22.237875 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:01:22.237924 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:01:22.240377 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:01:22.249395 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:01:22.259532 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 00:01:22.352627 systemd[1]: Finished initrd-setup-root.service. Aug 13 00:01:22.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.375210 kernel: audit: type=1130 audit(1755043282.351:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.354162 systemd[1]: Starting ignition-mount.service... Aug 13 00:01:22.371909 systemd[1]: Starting sysroot-boot.service... Aug 13 00:01:22.385585 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Aug 13 00:01:22.385748 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Aug 13 00:01:22.412786 ignition[1310]: INFO : Ignition 2.14.0 Aug 13 00:01:22.417463 ignition[1310]: INFO : Stage: mount Aug 13 00:01:22.417463 ignition[1310]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:22.417463 ignition[1310]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:22.432084 systemd[1]: Finished sysroot-boot.service. Aug 13 00:01:22.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.446645 kernel: audit: type=1130 audit(1755043282.433:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.451481 ignition[1310]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:22.454277 ignition[1310]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:22.457835 ignition[1310]: INFO : PUT result: OK Aug 13 00:01:22.463329 ignition[1310]: INFO : mount: mount passed Aug 13 00:01:22.465104 ignition[1310]: INFO : Ignition finished successfully Aug 13 00:01:22.468443 systemd[1]: Finished ignition-mount.service. Aug 13 00:01:22.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.476599 systemd[1]: Starting ignition-files.service... Aug 13 00:01:22.486388 kernel: audit: type=1130 audit(1755043282.474:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:22.493612 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 00:01:22.522384 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1319) Aug 13 00:01:22.528420 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:01:22.528462 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:01:22.530636 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:01:22.544377 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:01:22.550614 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 00:01:22.569809 ignition[1338]: INFO : Ignition 2.14.0 Aug 13 00:01:22.569809 ignition[1338]: INFO : Stage: files Aug 13 00:01:22.573435 ignition[1338]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:22.573435 ignition[1338]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:22.590492 ignition[1338]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:22.593142 ignition[1338]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:22.596877 ignition[1338]: INFO : PUT result: OK Aug 13 00:01:22.603606 ignition[1338]: DEBUG : files: compiled without relabeling support, skipping Aug 13 00:01:22.609576 ignition[1338]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Aug 13 00:01:22.609576 ignition[1338]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Aug 13 00:01:22.632001 ignition[1338]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Aug 13 00:01:22.639377 ignition[1338]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Aug 13 00:01:22.644727 unknown[1338]: wrote ssh authorized keys file for user: core Aug 13 00:01:22.647589 ignition[1338]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Aug 13 00:01:22.651277 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Aug 13 00:01:22.655744 ignition[1338]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Aug 13 00:01:22.733481 ignition[1338]: INFO : GET result: OK Aug 13 00:01:23.214662 systemd-networkd[1183]: eth0: Gained IPv6LL Aug 13 00:01:23.748491 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Aug 13 00:01:23.755072 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 00:01:23.755072 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:23.768090 ignition[1338]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2729918002" Aug 13 00:01:23.771248 ignition[1338]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2729918002": device or resource busy Aug 13 00:01:23.774778 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2729918002", trying btrfs: device or resource busy Aug 13 00:01:23.778594 ignition[1338]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2729918002" Aug 13 00:01:23.781571 ignition[1338]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2729918002" Aug 13 00:01:23.786532 ignition[1338]: INFO : op(3): [started] unmounting "/mnt/oem2729918002" Aug 13 00:01:23.789114 ignition[1338]: INFO : op(3): [finished] unmounting "/mnt/oem2729918002" Aug 13 00:01:23.789114 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 00:01:23.789114 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Aug 13 00:01:23.799210 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Aug 13 00:01:23.799210 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:01:23.807702 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:01:23.807702 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:01:23.807702 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:01:23.807702 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:01:23.807702 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:01:23.826834 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:01:23.826834 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:01:23.826834 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:01:23.826834 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:01:23.826834 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 00:01:23.809956 systemd[1]: mnt-oem2729918002.mount: Deactivated successfully. Aug 13 00:01:23.870127 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:23.870127 ignition[1338]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979303010" Aug 13 00:01:23.870127 ignition[1338]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979303010": device or resource busy Aug 13 00:01:23.870127 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem979303010", trying btrfs: device or resource busy Aug 13 00:01:23.870127 ignition[1338]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979303010" Aug 13 00:01:23.870127 ignition[1338]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979303010" Aug 13 00:01:23.870127 ignition[1338]: INFO : op(6): [started] unmounting "/mnt/oem979303010" Aug 13 00:01:23.893927 ignition[1338]: INFO : op(6): [finished] unmounting "/mnt/oem979303010" Aug 13 00:01:23.893927 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 00:01:23.893927 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 00:01:23.893927 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:23.896863 systemd[1]: mnt-oem979303010.mount: Deactivated successfully. Aug 13 00:01:23.916752 ignition[1338]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4281001845" Aug 13 00:01:23.921420 ignition[1338]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4281001845": device or resource busy Aug 13 00:01:23.921420 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4281001845", trying btrfs: device or resource busy Aug 13 00:01:23.921420 ignition[1338]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4281001845" Aug 13 00:01:23.931937 ignition[1338]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4281001845" Aug 13 00:01:23.931937 ignition[1338]: INFO : op(9): [started] unmounting "/mnt/oem4281001845" Aug 13 00:01:23.937587 ignition[1338]: INFO : op(9): [finished] unmounting "/mnt/oem4281001845" Aug 13 00:01:23.937587 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 00:01:23.949183 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:01:23.955567 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:23.971714 ignition[1338]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1068825773" Aug 13 00:01:23.974931 ignition[1338]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1068825773": device or resource busy Aug 13 00:01:23.974931 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1068825773", trying btrfs: device or resource busy Aug 13 00:01:23.974931 ignition[1338]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1068825773" Aug 13 00:01:23.974931 ignition[1338]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1068825773" Aug 13 00:01:23.988709 ignition[1338]: INFO : op(c): [started] unmounting "/mnt/oem1068825773" Aug 13 00:01:23.988709 ignition[1338]: INFO : op(c): [finished] unmounting "/mnt/oem1068825773" Aug 13 00:01:23.988709 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:01:23.997523 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:01:24.002178 ignition[1338]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Aug 13 00:01:24.487749 ignition[1338]: INFO : GET result: OK Aug 13 00:01:24.781169 systemd[1]: mnt-oem4281001845.mount: Deactivated successfully. Aug 13 00:01:25.106104 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:01:25.106104 ignition[1338]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Aug 13 00:01:25.106104 ignition[1338]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Aug 13 00:01:25.106104 ignition[1338]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(12): [started] processing unit "nvidia.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(12): [finished] processing unit "nvidia.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Aug 13 00:01:25.123219 ignition[1338]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Aug 13 00:01:25.181570 ignition[1338]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:01:25.181570 ignition[1338]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:01:25.181570 ignition[1338]: INFO : files: files passed Aug 13 00:01:25.181570 ignition[1338]: INFO : Ignition finished successfully Aug 13 00:01:25.202892 kernel: audit: type=1130 audit(1755043285.182:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.179239 systemd[1]: Finished ignition-files.service. Aug 13 00:01:25.209234 systemd[1]: Starting initrd-setup-root-after-ignition.service... Aug 13 00:01:25.213656 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Aug 13 00:01:25.216881 systemd[1]: Starting ignition-quench.service... Aug 13 00:01:25.226543 systemd[1]: ignition-quench.service: Deactivated successfully. Aug 13 00:01:25.229207 systemd[1]: Finished ignition-quench.service. Aug 13 00:01:25.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.241434 kernel: audit: type=1130 audit(1755043285.231:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.244704 initrd-setup-root-after-ignition[1363]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Aug 13 00:01:25.249737 systemd[1]: Finished initrd-setup-root-after-ignition.service. Aug 13 00:01:25.254163 systemd[1]: Reached target ignition-complete.target. Aug 13 00:01:25.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.263273 systemd[1]: Starting initrd-parse-etc.service... Aug 13 00:01:25.293711 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Aug 13 00:01:25.294955 systemd[1]: Finished initrd-parse-etc.service. Aug 13 00:01:25.298213 systemd[1]: Reached target initrd-fs.target. Aug 13 00:01:25.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.301393 systemd[1]: Reached target initrd.target. Aug 13 00:01:25.304733 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Aug 13 00:01:25.306250 systemd[1]: Starting dracut-pre-pivot.service... Aug 13 00:01:25.333747 systemd[1]: Finished dracut-pre-pivot.service. Aug 13 00:01:25.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.338794 systemd[1]: Starting initrd-cleanup.service... Aug 13 00:01:25.360441 systemd[1]: Stopped target nss-lookup.target. Aug 13 00:01:25.364282 systemd[1]: Stopped target remote-cryptsetup.target. Aug 13 00:01:25.368317 systemd[1]: Stopped target timers.target. Aug 13 00:01:25.371813 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Aug 13 00:01:25.374190 systemd[1]: Stopped dracut-pre-pivot.service. Aug 13 00:01:25.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.378011 systemd[1]: Stopped target initrd.target. Aug 13 00:01:25.381319 systemd[1]: Stopped target basic.target. Aug 13 00:01:25.384745 systemd[1]: Stopped target ignition-complete.target. Aug 13 00:01:25.388963 systemd[1]: Stopped target ignition-diskful.target. Aug 13 00:01:25.393101 systemd[1]: Stopped target initrd-root-device.target. Aug 13 00:01:25.396964 systemd[1]: Stopped target remote-fs.target. Aug 13 00:01:25.400822 systemd[1]: Stopped target remote-fs-pre.target. Aug 13 00:01:25.404662 systemd[1]: Stopped target sysinit.target. Aug 13 00:01:25.408298 systemd[1]: Stopped target local-fs.target. Aug 13 00:01:25.411764 systemd[1]: Stopped target local-fs-pre.target. Aug 13 00:01:25.415574 systemd[1]: Stopped target swap.target. Aug 13 00:01:25.418832 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Aug 13 00:01:25.421261 systemd[1]: Stopped dracut-pre-mount.service. Aug 13 00:01:25.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.424939 systemd[1]: Stopped target cryptsetup.target. Aug 13 00:01:25.432427 systemd[1]: dracut-initqueue.service: Deactivated successfully. Aug 13 00:01:25.434628 systemd[1]: Stopped dracut-initqueue.service. Aug 13 00:01:25.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.438571 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Aug 13 00:01:25.441159 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Aug 13 00:01:25.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.445742 systemd[1]: ignition-files.service: Deactivated successfully. Aug 13 00:01:25.445985 systemd[1]: Stopped ignition-files.service. Aug 13 00:01:25.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.453484 systemd[1]: Stopping ignition-mount.service... Aug 13 00:01:25.459285 systemd[1]: Stopping sysroot-boot.service... Aug 13 00:01:25.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.465596 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Aug 13 00:01:25.466218 systemd[1]: Stopped systemd-udev-trigger.service. Aug 13 00:01:25.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.471458 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Aug 13 00:01:25.471755 systemd[1]: Stopped dracut-pre-trigger.service. Aug 13 00:01:25.491977 systemd[1]: initrd-cleanup.service: Deactivated successfully. Aug 13 00:01:25.492651 systemd[1]: Finished initrd-cleanup.service. Aug 13 00:01:25.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.503962 ignition[1376]: INFO : Ignition 2.14.0 Aug 13 00:01:25.503962 ignition[1376]: INFO : Stage: umount Aug 13 00:01:25.508128 ignition[1376]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:25.508128 ignition[1376]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:25.518603 systemd[1]: sysroot-boot.mount: Deactivated successfully. Aug 13 00:01:25.533734 ignition[1376]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:25.536603 ignition[1376]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:25.540119 ignition[1376]: INFO : PUT result: OK Aug 13 00:01:25.544230 systemd[1]: sysroot-boot.service: Deactivated successfully. Aug 13 00:01:25.544909 systemd[1]: Stopped sysroot-boot.service. Aug 13 00:01:25.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.552986 ignition[1376]: INFO : umount: umount passed Aug 13 00:01:25.555027 ignition[1376]: INFO : Ignition finished successfully Aug 13 00:01:25.558726 systemd[1]: ignition-mount.service: Deactivated successfully. Aug 13 00:01:25.558963 systemd[1]: Stopped ignition-mount.service. Aug 13 00:01:25.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.562944 systemd[1]: ignition-disks.service: Deactivated successfully. Aug 13 00:01:25.563052 systemd[1]: Stopped ignition-disks.service. Aug 13 00:01:25.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.566518 systemd[1]: ignition-kargs.service: Deactivated successfully. Aug 13 00:01:25.566601 systemd[1]: Stopped ignition-kargs.service. Aug 13 00:01:25.568449 systemd[1]: ignition-fetch.service: Deactivated successfully. Aug 13 00:01:25.568525 systemd[1]: Stopped ignition-fetch.service. Aug 13 00:01:25.570425 systemd[1]: Stopped target network.target. Aug 13 00:01:25.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.572182 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Aug 13 00:01:25.572275 systemd[1]: Stopped ignition-fetch-offline.service. Aug 13 00:01:25.576312 systemd[1]: Stopped target paths.target. Aug 13 00:01:25.579495 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Aug 13 00:01:25.580031 systemd[1]: Stopped systemd-ask-password-console.path. Aug 13 00:01:25.583449 systemd[1]: Stopped target slices.target. Aug 13 00:01:25.585135 systemd[1]: Stopped target sockets.target. Aug 13 00:01:25.588500 systemd[1]: iscsid.socket: Deactivated successfully. Aug 13 00:01:25.588561 systemd[1]: Closed iscsid.socket. Aug 13 00:01:25.590540 systemd[1]: iscsiuio.socket: Deactivated successfully. Aug 13 00:01:25.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.590595 systemd[1]: Closed iscsiuio.socket. Aug 13 00:01:25.593594 systemd[1]: ignition-setup.service: Deactivated successfully. Aug 13 00:01:25.593683 systemd[1]: Stopped ignition-setup.service. Aug 13 00:01:25.597120 systemd[1]: initrd-setup-root.service: Deactivated successfully. Aug 13 00:01:25.597207 systemd[1]: Stopped initrd-setup-root.service. Aug 13 00:01:25.599706 systemd[1]: Stopping systemd-networkd.service... Aug 13 00:01:25.602736 systemd[1]: Stopping systemd-resolved.service... Aug 13 00:01:25.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.604447 systemd-networkd[1183]: eth0: DHCPv6 lease lost Aug 13 00:01:25.644000 audit: BPF prog-id=9 op=UNLOAD Aug 13 00:01:25.646000 audit: BPF prog-id=6 op=UNLOAD Aug 13 00:01:25.622190 systemd[1]: systemd-networkd.service: Deactivated successfully. Aug 13 00:01:25.622466 systemd[1]: Stopped systemd-networkd.service. Aug 13 00:01:25.638608 systemd[1]: systemd-resolved.service: Deactivated successfully. Aug 13 00:01:25.642110 systemd[1]: Stopped systemd-resolved.service. Aug 13 00:01:25.644914 systemd[1]: systemd-networkd.socket: Deactivated successfully. Aug 13 00:01:25.645836 systemd[1]: Closed systemd-networkd.socket. Aug 13 00:01:25.659810 systemd[1]: Stopping network-cleanup.service... Aug 13 00:01:25.665925 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Aug 13 00:01:25.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.666066 systemd[1]: Stopped parse-ip-for-networkd.service. Aug 13 00:01:25.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.670573 systemd[1]: systemd-sysctl.service: Deactivated successfully. Aug 13 00:01:25.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.670664 systemd[1]: Stopped systemd-sysctl.service. Aug 13 00:01:25.674879 systemd[1]: systemd-modules-load.service: Deactivated successfully. Aug 13 00:01:25.674987 systemd[1]: Stopped systemd-modules-load.service. Aug 13 00:01:25.678893 systemd[1]: Stopping systemd-udevd.service... Aug 13 00:01:25.691333 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Aug 13 00:01:25.704478 systemd[1]: network-cleanup.service: Deactivated successfully. Aug 13 00:01:25.704690 systemd[1]: Stopped network-cleanup.service. Aug 13 00:01:25.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.713497 systemd[1]: systemd-udevd.service: Deactivated successfully. Aug 13 00:01:25.713824 systemd[1]: Stopped systemd-udevd.service. Aug 13 00:01:25.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.718319 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Aug 13 00:01:25.718464 systemd[1]: Closed systemd-udevd-control.socket. Aug 13 00:01:25.721415 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Aug 13 00:01:25.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.721495 systemd[1]: Closed systemd-udevd-kernel.socket. Aug 13 00:01:25.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.723386 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Aug 13 00:01:25.723474 systemd[1]: Stopped dracut-pre-udev.service. Aug 13 00:01:25.728633 systemd[1]: dracut-cmdline.service: Deactivated successfully. Aug 13 00:01:25.728714 systemd[1]: Stopped dracut-cmdline.service. Aug 13 00:01:25.732694 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Aug 13 00:01:25.732776 systemd[1]: Stopped dracut-cmdline-ask.service. Aug 13 00:01:25.736165 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Aug 13 00:01:25.761335 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Aug 13 00:01:25.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.761491 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Aug 13 00:01:25.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.765859 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Aug 13 00:01:25.765946 systemd[1]: Stopped kmod-static-nodes.service. Aug 13 00:01:25.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:25.769700 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Aug 13 00:01:25.769807 systemd[1]: Stopped systemd-vconsole-setup.service. Aug 13 00:01:25.773895 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Aug 13 00:01:25.774838 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Aug 13 00:01:25.775106 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Aug 13 00:01:25.777932 systemd[1]: Reached target initrd-switch-root.target. Aug 13 00:01:25.782191 systemd[1]: Starting initrd-switch-root.service... Aug 13 00:01:25.811940 systemd[1]: Switching root. Aug 13 00:01:25.838073 iscsid[1188]: iscsid shutting down. Aug 13 00:01:25.844538 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Aug 13 00:01:25.844651 systemd-journald[310]: Journal stopped Aug 13 00:01:30.482702 kernel: SELinux: Class mctp_socket not defined in policy. Aug 13 00:01:30.482823 kernel: SELinux: Class anon_inode not defined in policy. Aug 13 00:01:30.482860 kernel: SELinux: the above unknown classes and permissions will be allowed Aug 13 00:01:30.482924 kernel: SELinux: policy capability network_peer_controls=1 Aug 13 00:01:30.482965 kernel: SELinux: policy capability open_perms=1 Aug 13 00:01:30.482997 kernel: SELinux: policy capability extended_socket_class=1 Aug 13 00:01:30.483029 kernel: SELinux: policy capability always_check_network=0 Aug 13 00:01:30.483059 kernel: SELinux: policy capability cgroup_seclabel=1 Aug 13 00:01:30.483091 kernel: SELinux: policy capability nnp_nosuid_transition=1 Aug 13 00:01:30.483122 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Aug 13 00:01:30.483154 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Aug 13 00:01:30.483189 systemd[1]: Successfully loaded SELinux policy in 72.331ms. Aug 13 00:01:30.483253 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.684ms. Aug 13 00:01:30.483286 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:01:30.483323 systemd[1]: Detected virtualization amazon. Aug 13 00:01:30.483375 systemd[1]: Detected architecture arm64. Aug 13 00:01:30.483414 systemd[1]: Detected first boot. Aug 13 00:01:30.483448 systemd[1]: Initializing machine ID from VM UUID. Aug 13 00:01:30.483481 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Aug 13 00:01:30.483515 systemd[1]: Populated /etc with preset unit settings. Aug 13 00:01:30.483550 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:01:30.483588 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:01:30.483625 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:01:30.483658 kernel: kauditd_printk_skb: 55 callbacks suppressed Aug 13 00:01:30.483689 kernel: audit: type=1334 audit(1755043289.982:84): prog-id=12 op=LOAD Aug 13 00:01:30.483722 kernel: audit: type=1334 audit(1755043289.982:85): prog-id=3 op=UNLOAD Aug 13 00:01:30.483757 kernel: audit: type=1334 audit(1755043289.985:86): prog-id=13 op=LOAD Aug 13 00:01:30.483788 kernel: audit: type=1334 audit(1755043289.987:87): prog-id=14 op=LOAD Aug 13 00:01:30.483819 kernel: audit: type=1334 audit(1755043289.987:88): prog-id=4 op=UNLOAD Aug 13 00:01:30.483850 kernel: audit: type=1334 audit(1755043289.987:89): prog-id=5 op=UNLOAD Aug 13 00:01:30.483883 kernel: audit: type=1334 audit(1755043289.992:90): prog-id=15 op=LOAD Aug 13 00:01:30.483913 kernel: audit: type=1334 audit(1755043289.992:91): prog-id=12 op=UNLOAD Aug 13 00:01:30.483951 kernel: audit: type=1334 audit(1755043289.994:92): prog-id=16 op=LOAD Aug 13 00:01:30.483981 kernel: audit: type=1334 audit(1755043289.997:93): prog-id=17 op=LOAD Aug 13 00:01:30.484013 systemd[1]: iscsiuio.service: Deactivated successfully. Aug 13 00:01:30.484052 systemd[1]: Stopped iscsiuio.service. Aug 13 00:01:30.484084 systemd[1]: iscsid.service: Deactivated successfully. Aug 13 00:01:30.484113 systemd[1]: Stopped iscsid.service. Aug 13 00:01:30.484145 systemd[1]: initrd-switch-root.service: Deactivated successfully. Aug 13 00:01:30.484175 systemd[1]: Stopped initrd-switch-root.service. Aug 13 00:01:30.484206 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Aug 13 00:01:30.484237 systemd[1]: Created slice system-addon\x2dconfig.slice. Aug 13 00:01:30.484271 systemd[1]: Created slice system-addon\x2drun.slice. Aug 13 00:01:30.484304 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Aug 13 00:01:30.484336 systemd[1]: Created slice system-getty.slice. Aug 13 00:01:30.484388 systemd[1]: Created slice system-modprobe.slice. Aug 13 00:01:30.484425 systemd[1]: Created slice system-serial\x2dgetty.slice. Aug 13 00:01:30.484456 systemd[1]: Created slice system-system\x2dcloudinit.slice. Aug 13 00:01:30.484486 systemd[1]: Created slice system-systemd\x2dfsck.slice. Aug 13 00:01:30.484516 systemd[1]: Created slice user.slice. Aug 13 00:01:30.484551 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:01:30.484586 systemd[1]: Started systemd-ask-password-wall.path. Aug 13 00:01:30.484616 systemd[1]: Set up automount boot.automount. Aug 13 00:01:30.484646 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Aug 13 00:01:30.484678 systemd[1]: Stopped target initrd-switch-root.target. Aug 13 00:01:30.484710 systemd[1]: Stopped target initrd-fs.target. Aug 13 00:01:30.484743 systemd[1]: Stopped target initrd-root-fs.target. Aug 13 00:01:30.484776 systemd[1]: Reached target integritysetup.target. Aug 13 00:01:30.484806 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:01:30.484839 systemd[1]: Reached target remote-fs.target. Aug 13 00:01:30.484871 systemd[1]: Reached target slices.target. Aug 13 00:01:30.484905 systemd[1]: Reached target swap.target. Aug 13 00:01:30.484935 systemd[1]: Reached target torcx.target. Aug 13 00:01:30.484968 systemd[1]: Reached target veritysetup.target. Aug 13 00:01:30.485002 systemd[1]: Listening on systemd-coredump.socket. Aug 13 00:01:30.485036 systemd[1]: Listening on systemd-initctl.socket. Aug 13 00:01:30.485065 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:01:30.485098 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:01:30.485127 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:01:30.485157 systemd[1]: Listening on systemd-userdbd.socket. Aug 13 00:01:30.485190 systemd[1]: Mounting dev-hugepages.mount... Aug 13 00:01:30.485229 systemd[1]: Mounting dev-mqueue.mount... Aug 13 00:01:30.485259 systemd[1]: Mounting media.mount... Aug 13 00:01:30.485289 systemd[1]: Mounting sys-kernel-debug.mount... Aug 13 00:01:30.485321 systemd[1]: Mounting sys-kernel-tracing.mount... Aug 13 00:01:30.485351 systemd[1]: Mounting tmp.mount... Aug 13 00:01:30.485407 systemd[1]: Starting flatcar-tmpfiles.service... Aug 13 00:01:30.485442 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:30.485476 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:01:30.485511 systemd[1]: Starting modprobe@configfs.service... Aug 13 00:01:30.485544 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:30.485577 systemd[1]: Starting modprobe@drm.service... Aug 13 00:01:30.485607 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:01:30.485637 systemd[1]: Starting modprobe@fuse.service... Aug 13 00:01:30.485669 systemd[1]: Starting modprobe@loop.service... Aug 13 00:01:30.485699 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Aug 13 00:01:30.485728 kernel: fuse: init (API version 7.34) Aug 13 00:01:30.485758 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Aug 13 00:01:30.485792 systemd[1]: Stopped systemd-fsck-root.service. Aug 13 00:01:30.485821 kernel: loop: module loaded Aug 13 00:01:30.485850 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Aug 13 00:01:30.485880 systemd[1]: Stopped systemd-fsck-usr.service. Aug 13 00:01:30.485910 systemd[1]: Stopped systemd-journald.service. Aug 13 00:01:30.485940 systemd[1]: Starting systemd-journald.service... Aug 13 00:01:30.485969 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:01:30.486002 systemd[1]: Starting systemd-network-generator.service... Aug 13 00:01:30.486032 systemd[1]: Starting systemd-remount-fs.service... Aug 13 00:01:30.486067 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:01:30.486104 systemd[1]: verity-setup.service: Deactivated successfully. Aug 13 00:01:30.486136 systemd[1]: Stopped verity-setup.service. Aug 13 00:01:30.486166 systemd[1]: Mounted dev-hugepages.mount. Aug 13 00:01:30.486196 systemd[1]: Mounted dev-mqueue.mount. Aug 13 00:01:30.486227 systemd[1]: Mounted media.mount. Aug 13 00:01:30.486260 systemd[1]: Mounted sys-kernel-debug.mount. Aug 13 00:01:30.486294 systemd[1]: Mounted sys-kernel-tracing.mount. Aug 13 00:01:30.486328 systemd[1]: Mounted tmp.mount. Aug 13 00:01:30.486487 systemd[1]: Finished flatcar-tmpfiles.service. Aug 13 00:01:30.486532 systemd-journald[1508]: Journal started Aug 13 00:01:30.486630 systemd-journald[1508]: Runtime Journal (/run/log/journal/ec27a952b1cf92ad5edde044e9ead7dd) is 8.0M, max 75.4M, 67.4M free. Aug 13 00:01:26.199000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Aug 13 00:01:26.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:01:26.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:01:26.312000 audit: BPF prog-id=10 op=LOAD Aug 13 00:01:26.312000 audit: BPF prog-id=10 op=UNLOAD Aug 13 00:01:26.312000 audit: BPF prog-id=11 op=LOAD Aug 13 00:01:26.312000 audit: BPF prog-id=11 op=UNLOAD Aug 13 00:01:26.450000 audit[1409]: AVC avc: denied { associate } for pid=1409 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Aug 13 00:01:26.450000 audit[1409]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001838dc a1=4000028e40 a2=4000027100 a3=32 items=0 ppid=1392 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:26.450000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:01:26.454000 audit[1409]: AVC avc: denied { associate } for pid=1409 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Aug 13 00:01:26.454000 audit[1409]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001839b5 a2=1ed a3=0 items=2 ppid=1392 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:26.454000 audit: CWD cwd="/" Aug 13 00:01:26.454000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:01:26.454000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:01:26.454000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:01:29.982000 audit: BPF prog-id=12 op=LOAD Aug 13 00:01:29.982000 audit: BPF prog-id=3 op=UNLOAD Aug 13 00:01:29.985000 audit: BPF prog-id=13 op=LOAD Aug 13 00:01:29.987000 audit: BPF prog-id=14 op=LOAD Aug 13 00:01:29.987000 audit: BPF prog-id=4 op=UNLOAD Aug 13 00:01:29.987000 audit: BPF prog-id=5 op=UNLOAD Aug 13 00:01:29.992000 audit: BPF prog-id=15 op=LOAD Aug 13 00:01:29.992000 audit: BPF prog-id=12 op=UNLOAD Aug 13 00:01:29.994000 audit: BPF prog-id=16 op=LOAD Aug 13 00:01:29.997000 audit: BPF prog-id=17 op=LOAD Aug 13 00:01:29.997000 audit: BPF prog-id=13 op=UNLOAD Aug 13 00:01:29.997000 audit: BPF prog-id=14 op=UNLOAD Aug 13 00:01:29.999000 audit: BPF prog-id=18 op=LOAD Aug 13 00:01:29.999000 audit: BPF prog-id=15 op=UNLOAD Aug 13 00:01:30.002000 audit: BPF prog-id=19 op=LOAD Aug 13 00:01:30.005000 audit: BPF prog-id=20 op=LOAD Aug 13 00:01:30.005000 audit: BPF prog-id=16 op=UNLOAD Aug 13 00:01:30.005000 audit: BPF prog-id=17 op=UNLOAD Aug 13 00:01:30.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.022000 audit: BPF prog-id=18 op=UNLOAD Aug 13 00:01:30.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.368000 audit: BPF prog-id=21 op=LOAD Aug 13 00:01:30.371000 audit: BPF prog-id=22 op=LOAD Aug 13 00:01:30.371000 audit: BPF prog-id=23 op=LOAD Aug 13 00:01:30.371000 audit: BPF prog-id=19 op=UNLOAD Aug 13 00:01:30.371000 audit: BPF prog-id=20 op=UNLOAD Aug 13 00:01:30.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.479000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Aug 13 00:01:30.479000 audit[1508]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=fffff8056950 a2=4000 a3=1 items=0 ppid=1 pid=1508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:30.479000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Aug 13 00:01:30.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:26.446126 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:01:29.980248 systemd[1]: Queued start job for default target multi-user.target. Aug 13 00:01:26.447382 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:01:29.980270 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Aug 13 00:01:30.495510 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:01:26.447458 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:01:30.008170 systemd[1]: systemd-journald.service: Deactivated successfully. Aug 13 00:01:26.447526 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Aug 13 00:01:26.447553 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="skipped missing lower profile" missing profile=oem Aug 13 00:01:26.447619 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Aug 13 00:01:26.447650 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Aug 13 00:01:26.448045 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Aug 13 00:01:26.448124 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:01:26.448159 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:01:26.450271 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Aug 13 00:01:30.500581 systemd[1]: Started systemd-journald.service. Aug 13 00:01:30.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:26.450398 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Aug 13 00:01:26.450450 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Aug 13 00:01:26.450490 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Aug 13 00:01:26.450584 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Aug 13 00:01:26.450624 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Aug 13 00:01:29.208507 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:29Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:29.209042 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:29Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:29.209286 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:29Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:29.209756 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:29Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:29.209866 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:29Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Aug 13 00:01:29.210000 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-08-13T00:01:29Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Aug 13 00:01:30.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.505323 systemd[1]: modprobe@configfs.service: Deactivated successfully. Aug 13 00:01:30.505763 systemd[1]: Finished modprobe@configfs.service. Aug 13 00:01:30.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.508799 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:30.509151 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:30.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.512322 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 00:01:30.512700 systemd[1]: Finished modprobe@drm.service. Aug 13 00:01:30.515182 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:01:30.515472 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:01:30.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.518059 systemd[1]: modprobe@fuse.service: Deactivated successfully. Aug 13 00:01:30.518882 systemd[1]: Finished modprobe@fuse.service. Aug 13 00:01:30.521537 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:01:30.522617 systemd[1]: Finished modprobe@loop.service. Aug 13 00:01:30.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.525966 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:01:30.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.528821 systemd[1]: Finished systemd-network-generator.service. Aug 13 00:01:30.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.532149 systemd[1]: Finished systemd-remount-fs.service. Aug 13 00:01:30.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.535494 systemd[1]: Reached target network-pre.target. Aug 13 00:01:30.539780 systemd[1]: Mounting sys-fs-fuse-connections.mount... Aug 13 00:01:30.544430 systemd[1]: Mounting sys-kernel-config.mount... Aug 13 00:01:30.550435 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Aug 13 00:01:30.555944 systemd[1]: Starting systemd-hwdb-update.service... Aug 13 00:01:30.561892 systemd[1]: Starting systemd-journal-flush.service... Aug 13 00:01:30.565014 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:01:30.569291 systemd[1]: Starting systemd-random-seed.service... Aug 13 00:01:30.571470 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:01:30.574884 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:01:30.581027 systemd[1]: Starting systemd-sysusers.service... Aug 13 00:01:30.587175 systemd[1]: Mounted sys-fs-fuse-connections.mount. Aug 13 00:01:30.590828 systemd[1]: Mounted sys-kernel-config.mount. Aug 13 00:01:30.625686 systemd-journald[1508]: Time spent on flushing to /var/log/journal/ec27a952b1cf92ad5edde044e9ead7dd is 37.876ms for 1144 entries. Aug 13 00:01:30.625686 systemd-journald[1508]: System Journal (/var/log/journal/ec27a952b1cf92ad5edde044e9ead7dd) is 8.0M, max 195.6M, 187.6M free. Aug 13 00:01:30.690058 systemd-journald[1508]: Received client request to flush runtime journal. Aug 13 00:01:30.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.644872 systemd[1]: Finished systemd-random-seed.service. Aug 13 00:01:30.647238 systemd[1]: Reached target first-boot-complete.target. Aug 13 00:01:30.660406 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:01:30.692072 systemd[1]: Finished systemd-journal-flush.service. Aug 13 00:01:30.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.702654 systemd[1]: Finished systemd-sysusers.service. Aug 13 00:01:30.708351 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 00:01:30.749473 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:01:30.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.757667 systemd[1]: Starting systemd-udev-settle.service... Aug 13 00:01:30.794680 udevadm[1533]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Aug 13 00:01:30.812640 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 00:01:30.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.504023 systemd[1]: Finished systemd-hwdb-update.service. Aug 13 00:01:31.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.508000 audit: BPF prog-id=24 op=LOAD Aug 13 00:01:31.508000 audit: BPF prog-id=25 op=LOAD Aug 13 00:01:31.508000 audit: BPF prog-id=7 op=UNLOAD Aug 13 00:01:31.508000 audit: BPF prog-id=8 op=UNLOAD Aug 13 00:01:31.511483 systemd[1]: Starting systemd-udevd.service... Aug 13 00:01:31.550602 systemd-udevd[1535]: Using default interface naming scheme 'v252'. Aug 13 00:01:31.594716 systemd[1]: Started systemd-udevd.service. Aug 13 00:01:31.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.601000 audit: BPF prog-id=26 op=LOAD Aug 13 00:01:31.604566 systemd[1]: Starting systemd-networkd.service... Aug 13 00:01:31.614000 audit: BPF prog-id=27 op=LOAD Aug 13 00:01:31.615000 audit: BPF prog-id=28 op=LOAD Aug 13 00:01:31.615000 audit: BPF prog-id=29 op=LOAD Aug 13 00:01:31.617769 systemd[1]: Starting systemd-userdbd.service... Aug 13 00:01:31.697306 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Aug 13 00:01:31.709047 systemd[1]: Started systemd-userdbd.service. Aug 13 00:01:31.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.722671 (udev-worker)[1539]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:01:31.875501 systemd-networkd[1537]: lo: Link UP Aug 13 00:01:31.876058 systemd-networkd[1537]: lo: Gained carrier Aug 13 00:01:31.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.877141 systemd-networkd[1537]: Enumeration completed Aug 13 00:01:31.877328 systemd[1]: Started systemd-networkd.service. Aug 13 00:01:31.881935 systemd[1]: Starting systemd-networkd-wait-online.service... Aug 13 00:01:31.885538 systemd-networkd[1537]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:01:31.894399 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:01:31.894722 systemd-networkd[1537]: eth0: Link UP Aug 13 00:01:31.895315 systemd-networkd[1537]: eth0: Gained carrier Aug 13 00:01:31.906635 systemd-networkd[1537]: eth0: DHCPv4 address 172.31.17.40/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 00:01:32.112675 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:01:32.118165 systemd[1]: Finished systemd-udev-settle.service. Aug 13 00:01:32.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.123037 systemd[1]: Starting lvm2-activation-early.service... Aug 13 00:01:32.152372 lvm[1654]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:01:32.189044 systemd[1]: Finished lvm2-activation-early.service. Aug 13 00:01:32.191565 systemd[1]: Reached target cryptsetup.target. Aug 13 00:01:32.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.196286 systemd[1]: Starting lvm2-activation.service... Aug 13 00:01:32.205995 lvm[1655]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:01:32.242292 systemd[1]: Finished lvm2-activation.service. Aug 13 00:01:32.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.245179 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:01:32.247709 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Aug 13 00:01:32.247777 systemd[1]: Reached target local-fs.target. Aug 13 00:01:32.250024 systemd[1]: Reached target machines.target. Aug 13 00:01:32.254798 systemd[1]: Starting ldconfig.service... Aug 13 00:01:32.258287 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:32.258471 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:32.260889 systemd[1]: Starting systemd-boot-update.service... Aug 13 00:01:32.266220 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Aug 13 00:01:32.271870 systemd[1]: Starting systemd-machine-id-commit.service... Aug 13 00:01:32.277699 systemd[1]: Starting systemd-sysext.service... Aug 13 00:01:32.293567 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1657 (bootctl) Aug 13 00:01:32.301129 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Aug 13 00:01:32.319810 systemd[1]: Unmounting usr-share-oem.mount... Aug 13 00:01:32.331475 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Aug 13 00:01:32.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.345199 systemd[1]: usr-share-oem.mount: Deactivated successfully. Aug 13 00:01:32.345681 systemd[1]: Unmounted usr-share-oem.mount. Aug 13 00:01:32.375448 kernel: loop0: detected capacity change from 0 to 211168 Aug 13 00:01:32.634795 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Aug 13 00:01:32.636111 systemd[1]: Finished systemd-machine-id-commit.service. Aug 13 00:01:32.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.669742 systemd-fsck[1666]: fsck.fat 4.2 (2021-01-31) Aug 13 00:01:32.669742 systemd-fsck[1666]: /dev/nvme0n1p1: 236 files, 117307/258078 clusters Aug 13 00:01:32.673974 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Aug 13 00:01:32.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.679073 systemd[1]: Mounting boot.mount... Aug 13 00:01:32.740517 systemd[1]: Mounted boot.mount. Aug 13 00:01:32.823406 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Aug 13 00:01:32.829439 systemd[1]: Finished systemd-boot-update.service. Aug 13 00:01:32.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.859437 kernel: loop1: detected capacity change from 0 to 211168 Aug 13 00:01:32.898928 (sd-sysext)[1681]: Using extensions 'kubernetes'. Aug 13 00:01:32.900033 (sd-sysext)[1681]: Merged extensions into '/usr'. Aug 13 00:01:32.942394 systemd[1]: Mounting usr-share-oem.mount... Aug 13 00:01:32.945794 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:32.952713 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:32.958008 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:01:32.965676 systemd[1]: Starting modprobe@loop.service... Aug 13 00:01:32.967782 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:32.968112 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:32.976309 systemd[1]: Mounted usr-share-oem.mount. Aug 13 00:01:32.979914 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:32.980314 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:32.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.984213 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:01:32.984865 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:01:32.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.988788 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:01:32.989155 systemd[1]: Finished modprobe@loop.service. Aug 13 00:01:32.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.994256 systemd[1]: Finished systemd-sysext.service. Aug 13 00:01:32.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.001147 systemd[1]: Starting ensure-sysext.service... Aug 13 00:01:33.003023 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:01:33.003413 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.006217 systemd[1]: Starting systemd-tmpfiles-setup.service... Aug 13 00:01:33.026099 systemd[1]: Reloading. Aug 13 00:01:33.045206 systemd-tmpfiles[1688]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Aug 13 00:01:33.052584 systemd-tmpfiles[1688]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Aug 13 00:01:33.060621 systemd-tmpfiles[1688]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Aug 13 00:01:33.202156 /usr/lib/systemd/system-generators/torcx-generator[1710]: time="2025-08-13T00:01:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:01:33.202240 /usr/lib/systemd/system-generators/torcx-generator[1710]: time="2025-08-13T00:01:33Z" level=info msg="torcx already run" Aug 13 00:01:33.500902 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:01:33.501242 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:01:33.570283 ldconfig[1656]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Aug 13 00:01:33.572505 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:01:33.646562 systemd-networkd[1537]: eth0: Gained IPv6LL Aug 13 00:01:33.714000 audit: BPF prog-id=30 op=LOAD Aug 13 00:01:33.714000 audit: BPF prog-id=21 op=UNLOAD Aug 13 00:01:33.714000 audit: BPF prog-id=31 op=LOAD Aug 13 00:01:33.714000 audit: BPF prog-id=32 op=LOAD Aug 13 00:01:33.714000 audit: BPF prog-id=22 op=UNLOAD Aug 13 00:01:33.714000 audit: BPF prog-id=23 op=UNLOAD Aug 13 00:01:33.716000 audit: BPF prog-id=33 op=LOAD Aug 13 00:01:33.716000 audit: BPF prog-id=26 op=UNLOAD Aug 13 00:01:33.718000 audit: BPF prog-id=34 op=LOAD Aug 13 00:01:33.718000 audit: BPF prog-id=35 op=LOAD Aug 13 00:01:33.718000 audit: BPF prog-id=24 op=UNLOAD Aug 13 00:01:33.718000 audit: BPF prog-id=25 op=UNLOAD Aug 13 00:01:33.722000 audit: BPF prog-id=36 op=LOAD Aug 13 00:01:33.722000 audit: BPF prog-id=27 op=UNLOAD Aug 13 00:01:33.722000 audit: BPF prog-id=37 op=LOAD Aug 13 00:01:33.722000 audit: BPF prog-id=38 op=LOAD Aug 13 00:01:33.722000 audit: BPF prog-id=28 op=UNLOAD Aug 13 00:01:33.722000 audit: BPF prog-id=29 op=UNLOAD Aug 13 00:01:33.747039 systemd[1]: Finished systemd-networkd-wait-online.service. Aug 13 00:01:33.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.750039 systemd[1]: Finished ldconfig.service. Aug 13 00:01:33.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.754285 systemd[1]: Finished systemd-tmpfiles-setup.service. Aug 13 00:01:33.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.769767 systemd[1]: Starting audit-rules.service... Aug 13 00:01:33.778054 systemd[1]: Starting clean-ca-certificates.service... Aug 13 00:01:33.783146 systemd[1]: Starting systemd-journal-catalog-update.service... Aug 13 00:01:33.788000 audit: BPF prog-id=39 op=LOAD Aug 13 00:01:33.794559 systemd[1]: Starting systemd-resolved.service... Aug 13 00:01:33.796000 audit: BPF prog-id=40 op=LOAD Aug 13 00:01:33.801992 systemd[1]: Starting systemd-timesyncd.service... Aug 13 00:01:33.809968 systemd[1]: Starting systemd-update-utmp.service... Aug 13 00:01:33.818084 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.823622 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:33.829176 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:01:33.835281 systemd[1]: Starting modprobe@loop.service... Aug 13 00:01:33.837141 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.837491 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:33.840684 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:33.841056 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:33.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.846648 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.851100 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:33.853308 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.853671 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:33.863158 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.866060 systemd[1]: Starting modprobe@drm.service... Aug 13 00:01:33.868168 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.868543 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:33.868000 audit[1775]: SYSTEM_BOOT pid=1775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.877770 systemd[1]: Finished ensure-sysext.service. Aug 13 00:01:33.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.883908 systemd[1]: Finished systemd-update-utmp.service. Aug 13 00:01:33.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.891960 systemd[1]: Finished clean-ca-certificates.service. Aug 13 00:01:33.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.894702 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:01:33.895030 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:01:33.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.899696 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:01:33.899735 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 00:01:33.902047 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:33.902439 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:33.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.915674 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:01:33.915975 systemd[1]: Finished modprobe@loop.service. Aug 13 00:01:33.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.918567 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 00:01:33.918889 systemd[1]: Finished modprobe@drm.service. Aug 13 00:01:33.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.923590 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.929430 systemd[1]: Finished systemd-journal-catalog-update.service. Aug 13 00:01:33.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.934659 systemd[1]: Starting systemd-update-done.service... Aug 13 00:01:33.970581 systemd[1]: Finished systemd-update-done.service. Aug 13 00:01:33.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.989000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Aug 13 00:01:33.989000 audit[1790]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff4ea6670 a2=420 a3=0 items=0 ppid=1764 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:33.989000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Aug 13 00:01:33.991720 augenrules[1790]: No rules Aug 13 00:01:33.993641 systemd[1]: Finished audit-rules.service. Aug 13 00:01:34.032288 systemd-resolved[1771]: Positive Trust Anchors: Aug 13 00:01:34.032330 systemd-resolved[1771]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 00:01:34.032423 systemd-resolved[1771]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 00:01:34.061602 systemd[1]: Started systemd-timesyncd.service. Aug 13 00:01:34.064016 systemd[1]: Reached target time-set.target. Aug 13 00:01:34.076163 systemd-resolved[1771]: Defaulting to hostname 'linux'. Aug 13 00:01:34.080466 systemd[1]: Started systemd-resolved.service. Aug 13 00:01:34.084031 systemd[1]: Reached target network.target. Aug 13 00:01:34.089849 systemd[1]: Reached target network-online.target. Aug 13 00:01:34.093140 systemd[1]: Reached target nss-lookup.target. Aug 13 00:01:34.095621 systemd[1]: Reached target sysinit.target. Aug 13 00:01:34.097741 systemd[1]: Started motdgen.path. Aug 13 00:01:34.099685 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Aug 13 00:01:34.102922 systemd[1]: Started logrotate.timer. Aug 13 00:01:34.105099 systemd[1]: Started mdadm.timer. Aug 13 00:01:34.106890 systemd[1]: Started systemd-tmpfiles-clean.timer. Aug 13 00:01:34.109037 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Aug 13 00:01:34.109118 systemd[1]: Reached target paths.target. Aug 13 00:01:34.111164 systemd[1]: Reached target timers.target. Aug 13 00:01:34.113602 systemd[1]: Listening on dbus.socket. Aug 13 00:01:34.118524 systemd[1]: Starting docker.socket... Aug 13 00:01:34.127596 systemd[1]: Listening on sshd.socket. Aug 13 00:01:34.129785 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:34.130905 systemd[1]: Listening on docker.socket. Aug 13 00:01:34.133078 systemd[1]: Reached target sockets.target. Aug 13 00:01:34.135149 systemd[1]: Reached target basic.target. Aug 13 00:01:34.137075 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 00:01:34.137136 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 00:01:34.139768 systemd[1]: Started amazon-ssm-agent.service. Aug 13 00:01:34.147477 systemd[1]: Starting containerd.service... Aug 13 00:01:34.151817 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Aug 13 00:01:34.157340 systemd[1]: Starting dbus.service... Aug 13 00:01:34.162470 systemd[1]: Starting enable-oem-cloudinit.service... Aug 13 00:01:34.174546 systemd-timesyncd[1772]: Contacted time server 23.155.72.147:123 (0.flatcar.pool.ntp.org). Aug 13 00:01:34.174676 systemd-timesyncd[1772]: Initial clock synchronization to Wed 2025-08-13 00:01:33.898456 UTC. Aug 13 00:01:34.176730 systemd[1]: Starting extend-filesystems.service... Aug 13 00:01:34.312739 jq[1802]: false Aug 13 00:01:34.178765 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Aug 13 00:01:34.185350 systemd[1]: Starting kubelet.service... Aug 13 00:01:34.195974 systemd[1]: Starting motdgen.service... Aug 13 00:01:34.209806 systemd[1]: Started nvidia.service. Aug 13 00:01:34.216134 systemd[1]: Starting prepare-helm.service... Aug 13 00:01:34.222866 systemd[1]: Starting ssh-key-proc-cmdline.service... Aug 13 00:01:34.228049 systemd[1]: Starting sshd-keygen.service... Aug 13 00:01:34.252180 systemd[1]: Starting systemd-logind.service... Aug 13 00:01:34.255686 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:34.333233 jq[1816]: true Aug 13 00:01:34.255859 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Aug 13 00:01:34.257593 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Aug 13 00:01:34.277517 systemd[1]: Starting update-engine.service... Aug 13 00:01:34.286678 systemd[1]: Starting update-ssh-keys-after-ignition.service... Aug 13 00:01:34.301374 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Aug 13 00:01:34.311452 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Aug 13 00:01:34.340111 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Aug 13 00:01:34.345299 systemd[1]: Finished ssh-key-proc-cmdline.service. Aug 13 00:01:34.413339 tar[1819]: linux-arm64/LICENSE Aug 13 00:01:34.413339 tar[1819]: linux-arm64/helm Aug 13 00:01:34.420931 jq[1820]: true Aug 13 00:01:34.458410 extend-filesystems[1803]: Found loop1 Aug 13 00:01:34.463838 extend-filesystems[1803]: Found nvme0n1 Aug 13 00:01:34.468014 extend-filesystems[1803]: Found nvme0n1p1 Aug 13 00:01:34.471273 extend-filesystems[1803]: Found nvme0n1p2 Aug 13 00:01:34.480327 extend-filesystems[1803]: Found nvme0n1p3 Aug 13 00:01:34.483494 extend-filesystems[1803]: Found usr Aug 13 00:01:34.486836 extend-filesystems[1803]: Found nvme0n1p4 Aug 13 00:01:34.492595 extend-filesystems[1803]: Found nvme0n1p6 Aug 13 00:01:34.495815 extend-filesystems[1803]: Found nvme0n1p7 Aug 13 00:01:34.502498 extend-filesystems[1803]: Found nvme0n1p9 Aug 13 00:01:34.510613 extend-filesystems[1803]: Checking size of /dev/nvme0n1p9 Aug 13 00:01:34.579156 dbus-daemon[1801]: [system] SELinux support is enabled Aug 13 00:01:34.583877 systemd[1]: Started dbus.service. Aug 13 00:01:34.593039 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Aug 13 00:01:34.593119 systemd[1]: Reached target system-config.target. Aug 13 00:01:34.595659 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Aug 13 00:01:34.595724 systemd[1]: Reached target user-config.target. Aug 13 00:01:34.625958 amazon-ssm-agent[1798]: 2025/08/13 00:01:34 Failed to load instance info from vault. RegistrationKey does not exist. Aug 13 00:01:34.628264 systemd[1]: motdgen.service: Deactivated successfully. Aug 13 00:01:34.628707 systemd[1]: Finished motdgen.service. Aug 13 00:01:34.636405 amazon-ssm-agent[1798]: Initializing new seelog logger Aug 13 00:01:34.636405 amazon-ssm-agent[1798]: New Seelog Logger Creation Complete Aug 13 00:01:34.636405 amazon-ssm-agent[1798]: 2025/08/13 00:01:34 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 00:01:34.636405 amazon-ssm-agent[1798]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 00:01:34.636405 amazon-ssm-agent[1798]: 2025/08/13 00:01:34 processing appconfig overrides Aug 13 00:01:34.649693 dbus-daemon[1801]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1537 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Aug 13 00:01:34.665930 dbus-daemon[1801]: [system] Successfully activated service 'org.freedesktop.systemd1' Aug 13 00:01:34.680212 extend-filesystems[1803]: Resized partition /dev/nvme0n1p9 Aug 13 00:01:34.682113 systemd[1]: Starting systemd-hostnamed.service... Aug 13 00:01:34.703664 extend-filesystems[1872]: resize2fs 1.46.5 (30-Dec-2021) Aug 13 00:01:34.735450 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Aug 13 00:01:34.897433 update_engine[1813]: I0813 00:01:34.829895 1813 main.cc:92] Flatcar Update Engine starting Aug 13 00:01:34.897433 update_engine[1813]: I0813 00:01:34.843394 1813 update_check_scheduler.cc:74] Next update check in 6m2s Aug 13 00:01:34.843282 systemd[1]: Started update-engine.service. Aug 13 00:01:34.848854 systemd[1]: Started locksmithd.service. Aug 13 00:01:34.885549 systemd[1]: nvidia.service: Deactivated successfully. Aug 13 00:01:34.910403 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Aug 13 00:01:34.928079 env[1823]: time="2025-08-13T00:01:34.927294878Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Aug 13 00:01:34.929859 extend-filesystems[1872]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Aug 13 00:01:34.929859 extend-filesystems[1872]: old_desc_blocks = 1, new_desc_blocks = 1 Aug 13 00:01:34.929859 extend-filesystems[1872]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Aug 13 00:01:34.951336 extend-filesystems[1803]: Resized filesystem in /dev/nvme0n1p9 Aug 13 00:01:34.931963 systemd-logind[1812]: Watching system buttons on /dev/input/event0 (Power Button) Aug 13 00:01:34.932003 systemd-logind[1812]: Watching system buttons on /dev/input/event1 (Sleep Button) Aug 13 00:01:34.932813 systemd-logind[1812]: New seat seat0. Aug 13 00:01:34.936930 systemd[1]: Started systemd-logind.service. Aug 13 00:01:34.942069 systemd[1]: extend-filesystems.service: Deactivated successfully. Aug 13 00:01:34.942504 systemd[1]: Finished extend-filesystems.service. Aug 13 00:01:34.957004 bash[1873]: Updated "/home/core/.ssh/authorized_keys" Aug 13 00:01:34.957729 systemd[1]: Finished update-ssh-keys-after-ignition.service. Aug 13 00:01:35.087443 dbus-daemon[1801]: [system] Successfully activated service 'org.freedesktop.hostname1' Aug 13 00:01:35.087707 systemd[1]: Started systemd-hostnamed.service. Aug 13 00:01:35.091016 dbus-daemon[1801]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1868 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Aug 13 00:01:35.096163 systemd[1]: Starting polkit.service... Aug 13 00:01:35.151218 polkitd[1885]: Started polkitd version 121 Aug 13 00:01:35.184708 env[1823]: time="2025-08-13T00:01:35.184455214Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Aug 13 00:01:35.191235 polkitd[1885]: Loading rules from directory /etc/polkit-1/rules.d Aug 13 00:01:35.191404 polkitd[1885]: Loading rules from directory /usr/share/polkit-1/rules.d Aug 13 00:01:35.193708 env[1823]: time="2025-08-13T00:01:35.193652903Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:35.196092 polkitd[1885]: Finished loading, compiling and executing 2 rules Aug 13 00:01:35.196840 env[1823]: time="2025-08-13T00:01:35.196778202Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.189-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:01:35.197019 env[1823]: time="2025-08-13T00:01:35.196988608Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:35.197543 env[1823]: time="2025-08-13T00:01:35.197499551Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:01:35.198575 dbus-daemon[1801]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Aug 13 00:01:35.198843 systemd[1]: Started polkit.service. Aug 13 00:01:35.201748 polkitd[1885]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Aug 13 00:01:35.202014 env[1823]: time="2025-08-13T00:01:35.201961359Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:35.202157 env[1823]: time="2025-08-13T00:01:35.202125571Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Aug 13 00:01:35.205057 env[1823]: time="2025-08-13T00:01:35.204954261Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:35.206785 env[1823]: time="2025-08-13T00:01:35.206722312Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:35.213920 env[1823]: time="2025-08-13T00:01:35.213849097Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:35.228014 env[1823]: time="2025-08-13T00:01:35.227937042Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:01:35.229985 env[1823]: time="2025-08-13T00:01:35.229906925Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Aug 13 00:01:35.230485 env[1823]: time="2025-08-13T00:01:35.230409282Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Aug 13 00:01:35.230773 env[1823]: time="2025-08-13T00:01:35.230718530Z" level=info msg="metadata content store policy set" policy=shared Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.252839850Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.252921046Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.252955562Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253038693Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253177149Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253214804Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253245531Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253819386Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253895079Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253929351Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253960739Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.253990735Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Aug 13 00:01:35.254398 env[1823]: time="2025-08-13T00:01:35.254241114Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Aug 13 00:01:35.255352 env[1823]: time="2025-08-13T00:01:35.255293216Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Aug 13 00:01:35.256095 env[1823]: time="2025-08-13T00:01:35.256059901Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Aug 13 00:01:35.256247 env[1823]: time="2025-08-13T00:01:35.256217544Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.256392 env[1823]: time="2025-08-13T00:01:35.256339501Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Aug 13 00:01:35.256780 env[1823]: time="2025-08-13T00:01:35.256751218Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.256999 env[1823]: time="2025-08-13T00:01:35.256969630Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.257128 env[1823]: time="2025-08-13T00:01:35.257099929Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.257243 env[1823]: time="2025-08-13T00:01:35.257215305Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.257390 env[1823]: time="2025-08-13T00:01:35.257347064Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.257504 env[1823]: time="2025-08-13T00:01:35.257476286Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.257633 env[1823]: time="2025-08-13T00:01:35.257605716Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.257777 env[1823]: time="2025-08-13T00:01:35.257750115Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.257906 env[1823]: time="2025-08-13T00:01:35.257878294Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Aug 13 00:01:35.258257 env[1823]: time="2025-08-13T00:01:35.258227793Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.258421 env[1823]: time="2025-08-13T00:01:35.258391924Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.258548 env[1823]: time="2025-08-13T00:01:35.258521064Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.258660 env[1823]: time="2025-08-13T00:01:35.258632872Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Aug 13 00:01:35.258797 env[1823]: time="2025-08-13T00:01:35.258764271Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Aug 13 00:01:35.259009 env[1823]: time="2025-08-13T00:01:35.258978606Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Aug 13 00:01:35.259139 env[1823]: time="2025-08-13T00:01:35.259107688Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Aug 13 00:01:35.259310 env[1823]: time="2025-08-13T00:01:35.259279779Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Aug 13 00:01:35.259983 systemd-resolved[1771]: System hostname changed to 'ip-172-31-17-40'. Aug 13 00:01:35.259984 systemd-hostnamed[1868]: Hostname set to (transient) Aug 13 00:01:35.261236 env[1823]: time="2025-08-13T00:01:35.261113720Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Aug 13 00:01:35.263298 env[1823]: time="2025-08-13T00:01:35.261984601Z" level=info msg="Connect containerd service" Aug 13 00:01:35.263298 env[1823]: time="2025-08-13T00:01:35.262078056Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Aug 13 00:01:35.271806 env[1823]: time="2025-08-13T00:01:35.271736182Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 00:01:35.272680 env[1823]: time="2025-08-13T00:01:35.272629274Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Aug 13 00:01:35.272933 env[1823]: time="2025-08-13T00:01:35.272904088Z" level=info msg=serving... address=/run/containerd/containerd.sock Aug 13 00:01:35.273282 env[1823]: time="2025-08-13T00:01:35.273250077Z" level=info msg="containerd successfully booted in 0.391364s" Aug 13 00:01:35.273403 systemd[1]: Started containerd.service. Aug 13 00:01:35.320674 env[1823]: time="2025-08-13T00:01:35.320588168Z" level=info msg="Start subscribing containerd event" Aug 13 00:01:35.321030 env[1823]: time="2025-08-13T00:01:35.320983039Z" level=info msg="Start recovering state" Aug 13 00:01:35.321279 env[1823]: time="2025-08-13T00:01:35.321248700Z" level=info msg="Start event monitor" Aug 13 00:01:35.321458 env[1823]: time="2025-08-13T00:01:35.321426584Z" level=info msg="Start snapshots syncer" Aug 13 00:01:35.321651 env[1823]: time="2025-08-13T00:01:35.321621500Z" level=info msg="Start cni network conf syncer for default" Aug 13 00:01:35.321762 env[1823]: time="2025-08-13T00:01:35.321734303Z" level=info msg="Start streaming server" Aug 13 00:01:35.449688 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Create new startup processor Aug 13 00:01:35.452299 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [LongRunningPluginsManager] registered plugins: {} Aug 13 00:01:35.452472 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing bookkeeping folders Aug 13 00:01:35.452472 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO removing the completed state files Aug 13 00:01:35.452472 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing bookkeeping folders for long running plugins Aug 13 00:01:35.452661 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Aug 13 00:01:35.452661 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing healthcheck folders for long running plugins Aug 13 00:01:35.452661 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing locations for inventory plugin Aug 13 00:01:35.452661 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing default location for custom inventory Aug 13 00:01:35.452882 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing default location for file inventory Aug 13 00:01:35.452882 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Initializing default location for role inventory Aug 13 00:01:35.452882 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Init the cloudwatchlogs publisher Aug 13 00:01:35.452882 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:runDockerAction Aug 13 00:01:35.452882 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:configurePackage Aug 13 00:01:35.452882 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:downloadContent Aug 13 00:01:35.453178 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:runDocument Aug 13 00:01:35.453178 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:softwareInventory Aug 13 00:01:35.453178 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:runPowerShellScript Aug 13 00:01:35.453178 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:updateSsmAgent Aug 13 00:01:35.453178 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:configureDocker Aug 13 00:01:35.455430 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform independent plugin aws:refreshAssociation Aug 13 00:01:35.455430 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Successfully loaded platform dependent plugin aws:runShellScript Aug 13 00:01:35.455430 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Aug 13 00:01:35.458909 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO OS: linux, Arch: arm64 Aug 13 00:01:35.471106 amazon-ssm-agent[1798]: datastore file /var/lib/amazon/ssm/i-04b498679fae912ca/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Aug 13 00:01:35.550922 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] Starting session document processing engine... Aug 13 00:01:35.553559 coreos-metadata[1800]: Aug 13 00:01:35.552 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Aug 13 00:01:35.563888 coreos-metadata[1800]: Aug 13 00:01:35.563 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Aug 13 00:01:35.565151 coreos-metadata[1800]: Aug 13 00:01:35.564 INFO Fetch successful Aug 13 00:01:35.565553 coreos-metadata[1800]: Aug 13 00:01:35.565 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Aug 13 00:01:35.567778 coreos-metadata[1800]: Aug 13 00:01:35.567 INFO Fetch successful Aug 13 00:01:35.571436 unknown[1800]: wrote ssh authorized keys file for user: core Aug 13 00:01:35.598349 update-ssh-keys[1936]: Updated "/home/core/.ssh/authorized_keys" Aug 13 00:01:35.599475 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Aug 13 00:01:35.645702 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] [EngineProcessor] Starting Aug 13 00:01:35.740452 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Aug 13 00:01:35.834967 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-04b498679fae912ca, requestId: 1b4e384d-e291-49ba-a3d7-8914deabdd06 Aug 13 00:01:35.929683 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] Starting document processing engine... Aug 13 00:01:36.025277 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] [EngineProcessor] Starting Aug 13 00:01:36.120347 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Aug 13 00:01:36.215716 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] Starting message polling Aug 13 00:01:36.311320 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] Starting send replies to MDS Aug 13 00:01:36.349880 tar[1819]: linux-arm64/README.md Aug 13 00:01:36.359591 systemd[1]: Finished prepare-helm.service. Aug 13 00:01:36.407410 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [instanceID=i-04b498679fae912ca] Starting association polling Aug 13 00:01:36.439882 locksmithd[1875]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Aug 13 00:01:36.502913 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Aug 13 00:01:36.599081 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] [Association] Launching response handler Aug 13 00:01:36.695285 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Aug 13 00:01:36.791808 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Aug 13 00:01:36.888626 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Aug 13 00:01:36.985458 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] listening reply. Aug 13 00:01:37.082547 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [HealthCheck] HealthCheck reporting agent health. Aug 13 00:01:37.179958 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [OfflineService] Starting document processing engine... Aug 13 00:01:37.277481 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [OfflineService] [EngineProcessor] Starting Aug 13 00:01:37.375113 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [OfflineService] [EngineProcessor] Initial processing Aug 13 00:01:37.434592 sshd_keygen[1828]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Aug 13 00:01:37.471628 systemd[1]: Finished sshd-keygen.service. Aug 13 00:01:37.475257 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [OfflineService] Starting message polling Aug 13 00:01:37.476673 systemd[1]: Starting issuegen.service... Aug 13 00:01:37.488451 systemd[1]: issuegen.service: Deactivated successfully. Aug 13 00:01:37.488855 systemd[1]: Finished issuegen.service. Aug 13 00:01:37.493769 systemd[1]: Starting systemd-user-sessions.service... Aug 13 00:01:37.510541 systemd[1]: Finished systemd-user-sessions.service. Aug 13 00:01:37.516184 systemd[1]: Started getty@tty1.service. Aug 13 00:01:37.521326 systemd[1]: Started serial-getty@ttyS0.service. Aug 13 00:01:37.523975 systemd[1]: Reached target getty.target. Aug 13 00:01:37.571188 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [OfflineService] Starting send replies to MDS Aug 13 00:01:37.669566 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [LongRunningPluginsManager] starting long running plugin manager Aug 13 00:01:37.768225 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Aug 13 00:01:37.866825 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Aug 13 00:01:37.965817 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [StartupProcessor] Executing startup processor tasks Aug 13 00:01:38.064967 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Aug 13 00:01:38.164127 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Aug 13 00:01:38.263608 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Aug 13 00:01:38.363430 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-04b498679fae912ca?role=subscribe&stream=input Aug 13 00:01:38.463261 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-04b498679fae912ca?role=subscribe&stream=input Aug 13 00:01:38.563320 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] Starting receiving message from control channel Aug 13 00:01:38.663717 amazon-ssm-agent[1798]: 2025-08-13 00:01:35 INFO [MessageGatewayService] [EngineProcessor] Initial processing Aug 13 00:01:38.857210 systemd[1]: Started kubelet.service. Aug 13 00:01:38.859766 systemd[1]: Reached target multi-user.target. Aug 13 00:01:38.865189 systemd[1]: Starting systemd-update-utmp-runlevel.service... Aug 13 00:01:38.882962 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Aug 13 00:01:38.883650 systemd[1]: Finished systemd-update-utmp-runlevel.service. Aug 13 00:01:38.889259 systemd[1]: Startup finished in 1.203s (kernel) + 8.493s (initrd) + 12.792s (userspace) = 22.489s. Aug 13 00:01:40.923693 kubelet[2021]: E0813 00:01:40.923599 2021 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:01:40.928166 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:01:40.928538 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:01:40.928985 systemd[1]: kubelet.service: Consumed 1.631s CPU time. Aug 13 00:01:42.596474 systemd[1]: Created slice system-sshd.slice. Aug 13 00:01:42.599002 systemd[1]: Started sshd@0-172.31.17.40:22-139.178.89.65:45970.service. Aug 13 00:01:42.790527 sshd[2028]: Accepted publickey for core from 139.178.89.65 port 45970 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:42.796846 sshd[2028]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:42.819084 systemd[1]: Created slice user-500.slice. Aug 13 00:01:42.821739 systemd[1]: Starting user-runtime-dir@500.service... Aug 13 00:01:42.830536 systemd-logind[1812]: New session 1 of user core. Aug 13 00:01:42.845065 systemd[1]: Finished user-runtime-dir@500.service. Aug 13 00:01:42.850193 systemd[1]: Starting user@500.service... Aug 13 00:01:42.857706 (systemd)[2031]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:43.048619 systemd[2031]: Queued start job for default target default.target. Aug 13 00:01:43.049750 systemd[2031]: Reached target paths.target. Aug 13 00:01:43.049806 systemd[2031]: Reached target sockets.target. Aug 13 00:01:43.049838 systemd[2031]: Reached target timers.target. Aug 13 00:01:43.049868 systemd[2031]: Reached target basic.target. Aug 13 00:01:43.050034 systemd[1]: Started user@500.service. Aug 13 00:01:43.052011 systemd[1]: Started session-1.scope. Aug 13 00:01:43.053223 systemd[2031]: Reached target default.target. Aug 13 00:01:43.053624 systemd[2031]: Startup finished in 183ms. Aug 13 00:01:43.198673 systemd[1]: Started sshd@1-172.31.17.40:22-139.178.89.65:45972.service. Aug 13 00:01:43.374210 sshd[2040]: Accepted publickey for core from 139.178.89.65 port 45972 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:43.376985 sshd[2040]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:43.384956 systemd-logind[1812]: New session 2 of user core. Aug 13 00:01:43.387034 systemd[1]: Started session-2.scope. Aug 13 00:01:43.519165 sshd[2040]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:43.525318 systemd-logind[1812]: Session 2 logged out. Waiting for processes to exit. Aug 13 00:01:43.525953 systemd[1]: session-2.scope: Deactivated successfully. Aug 13 00:01:43.527534 systemd[1]: sshd@1-172.31.17.40:22-139.178.89.65:45972.service: Deactivated successfully. Aug 13 00:01:43.529116 systemd-logind[1812]: Removed session 2. Aug 13 00:01:43.548434 systemd[1]: Started sshd@2-172.31.17.40:22-139.178.89.65:45978.service. Aug 13 00:01:43.721532 sshd[2046]: Accepted publickey for core from 139.178.89.65 port 45978 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:43.724809 sshd[2046]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:43.733034 systemd-logind[1812]: New session 3 of user core. Aug 13 00:01:43.734151 systemd[1]: Started session-3.scope. Aug 13 00:01:43.859153 sshd[2046]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:43.865071 systemd-logind[1812]: Session 3 logged out. Waiting for processes to exit. Aug 13 00:01:43.865679 systemd[1]: sshd@2-172.31.17.40:22-139.178.89.65:45978.service: Deactivated successfully. Aug 13 00:01:43.867063 systemd[1]: session-3.scope: Deactivated successfully. Aug 13 00:01:43.868912 systemd-logind[1812]: Removed session 3. Aug 13 00:01:43.890174 systemd[1]: Started sshd@3-172.31.17.40:22-139.178.89.65:45984.service. Aug 13 00:01:44.061841 sshd[2052]: Accepted publickey for core from 139.178.89.65 port 45984 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:44.064656 sshd[2052]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:44.075091 systemd[1]: Started session-4.scope. Aug 13 00:01:44.075931 systemd-logind[1812]: New session 4 of user core. Aug 13 00:01:44.210039 sshd[2052]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:44.216703 systemd-logind[1812]: Session 4 logged out. Waiting for processes to exit. Aug 13 00:01:44.217343 systemd[1]: sshd@3-172.31.17.40:22-139.178.89.65:45984.service: Deactivated successfully. Aug 13 00:01:44.218996 systemd[1]: session-4.scope: Deactivated successfully. Aug 13 00:01:44.220895 systemd-logind[1812]: Removed session 4. Aug 13 00:01:44.238715 systemd[1]: Started sshd@4-172.31.17.40:22-139.178.89.65:45996.service. Aug 13 00:01:44.410632 sshd[2058]: Accepted publickey for core from 139.178.89.65 port 45996 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:44.414504 sshd[2058]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:44.424649 systemd[1]: Started session-5.scope. Aug 13 00:01:44.426527 systemd-logind[1812]: New session 5 of user core. Aug 13 00:01:44.564820 sudo[2061]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Aug 13 00:01:44.566251 sudo[2061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:44.584684 dbus-daemon[1801]: avc: received setenforce notice (enforcing=1) Aug 13 00:01:44.587630 sudo[2061]: pam_unix(sudo:session): session closed for user root Aug 13 00:01:44.612695 sshd[2058]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:44.621529 systemd[1]: sshd@4-172.31.17.40:22-139.178.89.65:45996.service: Deactivated successfully. Aug 13 00:01:44.623049 systemd[1]: session-5.scope: Deactivated successfully. Aug 13 00:01:44.625765 systemd-logind[1812]: Session 5 logged out. Waiting for processes to exit. Aug 13 00:01:44.629029 systemd-logind[1812]: Removed session 5. Aug 13 00:01:44.642121 systemd[1]: Started sshd@5-172.31.17.40:22-139.178.89.65:46004.service. Aug 13 00:01:44.817820 sshd[2065]: Accepted publickey for core from 139.178.89.65 port 46004 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:44.821061 sshd[2065]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:44.829150 systemd-logind[1812]: New session 6 of user core. Aug 13 00:01:44.830248 systemd[1]: Started session-6.scope. Aug 13 00:01:44.939792 sudo[2069]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Aug 13 00:01:44.940388 sudo[2069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:44.945943 sudo[2069]: pam_unix(sudo:session): session closed for user root Aug 13 00:01:44.955936 sudo[2068]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Aug 13 00:01:44.957032 sudo[2068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:44.977537 systemd[1]: Stopping audit-rules.service... Aug 13 00:01:44.977000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 00:01:44.981202 kernel: kauditd_printk_skb: 119 callbacks suppressed Aug 13 00:01:44.981314 kernel: audit: type=1305 audit(1755043304.977:209): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 00:01:44.982832 auditctl[2072]: No rules Aug 13 00:01:44.987267 systemd[1]: audit-rules.service: Deactivated successfully. Aug 13 00:01:44.977000 audit[2072]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffffe24870 a2=420 a3=0 items=0 ppid=1 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:44.987704 systemd[1]: Stopped audit-rules.service. Aug 13 00:01:45.001824 kernel: audit: type=1300 audit(1755043304.977:209): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffffe24870 a2=420 a3=0 items=0 ppid=1 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.000073 systemd[1]: Starting audit-rules.service... Aug 13 00:01:44.977000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Aug 13 00:01:44.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.012390 kernel: audit: type=1327 audit(1755043304.977:209): proctitle=2F7362696E2F617564697463746C002D44 Aug 13 00:01:45.024433 kernel: audit: type=1131 audit(1755043304.986:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.042952 augenrules[2089]: No rules Aug 13 00:01:45.044592 systemd[1]: Finished audit-rules.service. Aug 13 00:01:45.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.047183 sudo[2068]: pam_unix(sudo:session): session closed for user root Aug 13 00:01:45.044000 audit[2068]: USER_END pid=2068 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.063390 kernel: audit: type=1130 audit(1755043305.044:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.063535 kernel: audit: type=1106 audit(1755043305.044:212): pid=2068 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.063611 kernel: audit: type=1104 audit(1755043305.044:213): pid=2068 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.044000 audit[2068]: CRED_DISP pid=2068 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.072551 sshd[2065]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:45.076000 audit[2065]: USER_END pid=2065 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.077000 audit[2065]: CRED_DISP pid=2065 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.089473 systemd[1]: sshd@5-172.31.17.40:22-139.178.89.65:46004.service: Deactivated successfully. Aug 13 00:01:45.090752 systemd[1]: session-6.scope: Deactivated successfully. Aug 13 00:01:45.098114 kernel: audit: type=1106 audit(1755043305.076:214): pid=2065 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.098233 kernel: audit: type=1104 audit(1755043305.077:215): pid=2065 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.099107 systemd-logind[1812]: Session 6 logged out. Waiting for processes to exit. Aug 13 00:01:45.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.17.40:22-139.178.89.65:46004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.109515 kernel: audit: type=1131 audit(1755043305.088:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.17.40:22-139.178.89.65:46004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.40:22-139.178.89.65:46010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.113843 systemd[1]: Started sshd@6-172.31.17.40:22-139.178.89.65:46010.service. Aug 13 00:01:45.116417 systemd-logind[1812]: Removed session 6. Aug 13 00:01:45.281000 audit[2095]: USER_ACCT pid=2095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.282226 sshd[2095]: Accepted publickey for core from 139.178.89.65 port 46010 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:45.283000 audit[2095]: CRED_ACQ pid=2095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.284000 audit[2095]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde42b840 a2=3 a3=1 items=0 ppid=1 pid=2095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.284000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:01:45.285690 sshd[2095]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:45.296395 systemd[1]: Started session-7.scope. Aug 13 00:01:45.297547 systemd-logind[1812]: New session 7 of user core. Aug 13 00:01:45.306000 audit[2095]: USER_START pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.308000 audit[2097]: CRED_ACQ pid=2097 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:45.405000 audit[2098]: USER_ACCT pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.406468 sudo[2098]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Aug 13 00:01:45.407000 audit[2098]: CRED_REFR pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.408113 sudo[2098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:45.411000 audit[2098]: USER_START pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:45.498213 systemd[1]: Starting docker.service... Aug 13 00:01:45.633140 env[2108]: time="2025-08-13T00:01:45.633000396Z" level=info msg="Starting up" Aug 13 00:01:45.639507 env[2108]: time="2025-08-13T00:01:45.639428159Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 00:01:45.639507 env[2108]: time="2025-08-13T00:01:45.639489648Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 00:01:45.639766 env[2108]: time="2025-08-13T00:01:45.639540304Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 00:01:45.639766 env[2108]: time="2025-08-13T00:01:45.639565216Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 00:01:45.644291 env[2108]: time="2025-08-13T00:01:45.644180910Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 00:01:45.644291 env[2108]: time="2025-08-13T00:01:45.644244682Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 00:01:45.644291 env[2108]: time="2025-08-13T00:01:45.644283055Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 00:01:45.644673 env[2108]: time="2025-08-13T00:01:45.644305945Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 00:01:45.657938 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3989404908-merged.mount: Deactivated successfully. Aug 13 00:01:45.713075 env[2108]: time="2025-08-13T00:01:45.712999937Z" level=info msg="Loading containers: start." Aug 13 00:01:45.829000 audit[2139]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.829000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff8657380 a2=0 a3=1 items=0 ppid=2108 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.829000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Aug 13 00:01:45.834000 audit[2141]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.834000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff9aa8670 a2=0 a3=1 items=0 ppid=2108 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.834000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Aug 13 00:01:45.840000 audit[2143]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.840000 audit[2143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd0d147e0 a2=0 a3=1 items=0 ppid=2108 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.840000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 00:01:45.846000 audit[2145]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.846000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc23d8fb0 a2=0 a3=1 items=0 ppid=2108 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.846000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 00:01:45.851000 audit[2147]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.851000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff42b9a90 a2=0 a3=1 items=0 ppid=2108 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.851000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Aug 13 00:01:45.882000 audit[2152]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.882000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd62b4b30 a2=0 a3=1 items=0 ppid=2108 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.882000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Aug 13 00:01:45.899000 audit[2154]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.899000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe434aaf0 a2=0 a3=1 items=0 ppid=2108 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.899000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Aug 13 00:01:45.904000 audit[2156]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.904000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff1140760 a2=0 a3=1 items=0 ppid=2108 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.904000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Aug 13 00:01:45.909000 audit[2158]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.909000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffff855fe0 a2=0 a3=1 items=0 ppid=2108 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.909000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:45.933000 audit[2162]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.933000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd2d8f900 a2=0 a3=1 items=0 ppid=2108 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:45.939000 audit[2163]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:45.939000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffec426860 a2=0 a3=1 items=0 ppid=2108 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:45.939000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:45.958413 kernel: Initializing XFRM netlink socket Aug 13 00:01:46.008876 env[2108]: time="2025-08-13T00:01:46.008791461Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Aug 13 00:01:46.011060 (udev-worker)[2119]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:01:46.052000 audit[2171]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.052000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffaaabaf0 a2=0 a3=1 items=0 ppid=2108 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.052000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Aug 13 00:01:46.066000 audit[2174]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.066000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffdaa79780 a2=0 a3=1 items=0 ppid=2108 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.066000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Aug 13 00:01:46.074000 audit[2177]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.074000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd68de5d0 a2=0 a3=1 items=0 ppid=2108 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.074000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Aug 13 00:01:46.077000 audit[2179]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.077000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff426ef50 a2=0 a3=1 items=0 ppid=2108 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.077000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Aug 13 00:01:46.082000 audit[2181]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.082000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd36c18f0 a2=0 a3=1 items=0 ppid=2108 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.082000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Aug 13 00:01:46.087000 audit[2183]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.087000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd54fd150 a2=0 a3=1 items=0 ppid=2108 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.087000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Aug 13 00:01:46.092000 audit[2185]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.092000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffe066b6c0 a2=0 a3=1 items=0 ppid=2108 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.092000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Aug 13 00:01:46.107000 audit[2188]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.107000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc8a36910 a2=0 a3=1 items=0 ppid=2108 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.107000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Aug 13 00:01:46.112000 audit[2190]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.112000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffdc38b9b0 a2=0 a3=1 items=0 ppid=2108 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.112000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 00:01:46.117000 audit[2192]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.117000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd0132900 a2=0 a3=1 items=0 ppid=2108 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.117000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 00:01:46.121000 audit[2194]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.121000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc1ea5f80 a2=0 a3=1 items=0 ppid=2108 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Aug 13 00:01:46.124085 systemd-networkd[1537]: docker0: Link UP Aug 13 00:01:46.145000 audit[2198]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.145000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffa8444a0 a2=0 a3=1 items=0 ppid=2108 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:46.154000 audit[2199]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:46.154000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffff7e4290 a2=0 a3=1 items=0 ppid=2108 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:46.154000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:46.156573 env[2108]: time="2025-08-13T00:01:46.156507806Z" level=info msg="Loading containers: done." Aug 13 00:01:46.193328 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck20551807-merged.mount: Deactivated successfully. Aug 13 00:01:46.210143 env[2108]: time="2025-08-13T00:01:46.210037460Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Aug 13 00:01:46.210591 env[2108]: time="2025-08-13T00:01:46.210535948Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Aug 13 00:01:46.210862 env[2108]: time="2025-08-13T00:01:46.210814353Z" level=info msg="Daemon has completed initialization" Aug 13 00:01:46.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:46.247080 systemd[1]: Started docker.service. Aug 13 00:01:46.265501 env[2108]: time="2025-08-13T00:01:46.265219400Z" level=info msg="API listen on /run/docker.sock" Aug 13 00:01:48.080965 env[1823]: time="2025-08-13T00:01:48.080857959Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\"" Aug 13 00:01:48.829051 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4143165126.mount: Deactivated successfully. Aug 13 00:01:50.863574 env[1823]: time="2025-08-13T00:01:50.863507167Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:50.875010 env[1823]: time="2025-08-13T00:01:50.874946112Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c0425f3fe3fbf33c17a14d49c43d4fd0b60b2254511902d5b2c29e53ca684fc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:50.879717 env[1823]: time="2025-08-13T00:01:50.879610897Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:50.882724 env[1823]: time="2025-08-13T00:01:50.882658428Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:125a8b488def5ea24e2de5682ab1abf063163aae4d89ce21811a45f3ecf23816,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:50.884833 env[1823]: time="2025-08-13T00:01:50.884762346Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\" returns image reference \"sha256:c0425f3fe3fbf33c17a14d49c43d4fd0b60b2254511902d5b2c29e53ca684fc9\"" Aug 13 00:01:50.887431 env[1823]: time="2025-08-13T00:01:50.887347495Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\"" Aug 13 00:01:51.183674 kernel: kauditd_printk_skb: 84 callbacks suppressed Aug 13 00:01:51.183832 kernel: audit: type=1130 audit(1755043311.178:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:51.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:51.179962 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Aug 13 00:01:51.180294 systemd[1]: Stopped kubelet.service. Aug 13 00:01:51.180432 systemd[1]: kubelet.service: Consumed 1.631s CPU time. Aug 13 00:01:51.183204 systemd[1]: Starting kubelet.service... Aug 13 00:01:51.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:51.200132 kernel: audit: type=1131 audit(1755043311.179:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:51.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:51.533515 systemd[1]: Started kubelet.service. Aug 13 00:01:51.542423 kernel: audit: type=1130 audit(1755043311.533:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:51.613607 kubelet[2235]: E0813 00:01:51.613546 2235 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:01:51.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:01:51.623058 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:01:51.623387 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:01:51.632423 kernel: audit: type=1131 audit(1755043311.622:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:01:53.137968 env[1823]: time="2025-08-13T00:01:53.137909989Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:53.140953 env[1823]: time="2025-08-13T00:01:53.140902469Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef439b94d49d41d1b377c316fb053adb88bf6b26ec7e63aaf3deba953b7c766f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:53.144283 env[1823]: time="2025-08-13T00:01:53.144215320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:53.147876 env[1823]: time="2025-08-13T00:01:53.147808729Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:96091626e37c5d5920ee6c3203b783cc01a08f287ec0713aeb7809bb62ccea90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:53.149786 env[1823]: time="2025-08-13T00:01:53.149731836Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\" returns image reference \"sha256:ef439b94d49d41d1b377c316fb053adb88bf6b26ec7e63aaf3deba953b7c766f\"" Aug 13 00:01:53.150723 env[1823]: time="2025-08-13T00:01:53.150675889Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\"" Aug 13 00:01:54.927660 env[1823]: time="2025-08-13T00:01:54.927563882Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:54.930343 env[1823]: time="2025-08-13T00:01:54.930275295Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c03972dff86ba78247043f2b6171ce436ab9323da7833b18924c3d8e29ea37a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:54.933824 env[1823]: time="2025-08-13T00:01:54.933759172Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:54.937266 env[1823]: time="2025-08-13T00:01:54.937203019Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:f3a2ffdd7483168205236f7762e9a1933f17dd733bc0188b52bddab9c0762868,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:54.939061 env[1823]: time="2025-08-13T00:01:54.939009036Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\" returns image reference \"sha256:c03972dff86ba78247043f2b6171ce436ab9323da7833b18924c3d8e29ea37a5\"" Aug 13 00:01:54.940113 env[1823]: time="2025-08-13T00:01:54.940069468Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\"" Aug 13 00:01:56.507069 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1247870172.mount: Deactivated successfully. Aug 13 00:01:57.455653 env[1823]: time="2025-08-13T00:01:57.455590397Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:57.457696 env[1823]: time="2025-08-13T00:01:57.457646625Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:738e99dbd7325e2cdd650d83d59a79c7ecb005ab0d5bf029fc15c54ee9359306,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:57.459627 env[1823]: time="2025-08-13T00:01:57.459580090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:57.461780 env[1823]: time="2025-08-13T00:01:57.461703899Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:c69929cfba9e38305eb1e20ca859aeb90e0d2a7326eab9bb1e8298882fe626cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:57.462959 env[1823]: time="2025-08-13T00:01:57.462912511Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\" returns image reference \"sha256:738e99dbd7325e2cdd650d83d59a79c7ecb005ab0d5bf029fc15c54ee9359306\"" Aug 13 00:01:57.463880 env[1823]: time="2025-08-13T00:01:57.463833865Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Aug 13 00:01:57.985135 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1465911230.mount: Deactivated successfully. Aug 13 00:01:59.755970 env[1823]: time="2025-08-13T00:01:59.755907118Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.758489 env[1823]: time="2025-08-13T00:01:59.758436080Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.762082 env[1823]: time="2025-08-13T00:01:59.762011871Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.765830 env[1823]: time="2025-08-13T00:01:59.765775679Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.767563 env[1823]: time="2025-08-13T00:01:59.767515678Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Aug 13 00:01:59.768671 env[1823]: time="2025-08-13T00:01:59.768625120Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Aug 13 00:02:00.248933 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount257507650.mount: Deactivated successfully. Aug 13 00:02:00.257010 env[1823]: time="2025-08-13T00:02:00.256951330Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:00.259578 env[1823]: time="2025-08-13T00:02:00.259533014Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:00.261874 env[1823]: time="2025-08-13T00:02:00.261829293Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:00.264301 env[1823]: time="2025-08-13T00:02:00.264228069Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:00.265869 env[1823]: time="2025-08-13T00:02:00.265813534Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Aug 13 00:02:00.266841 env[1823]: time="2025-08-13T00:02:00.266785387Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Aug 13 00:02:00.827457 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1070849552.mount: Deactivated successfully. Aug 13 00:02:01.874796 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Aug 13 00:02:01.875141 systemd[1]: Stopped kubelet.service. Aug 13 00:02:01.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:01.883946 systemd[1]: Starting kubelet.service... Aug 13 00:02:01.894013 kernel: audit: type=1130 audit(1755043321.873:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:01.894153 kernel: audit: type=1131 audit(1755043321.873:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:01.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:02.504727 systemd[1]: Started kubelet.service. Aug 13 00:02:02.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:02.514413 kernel: audit: type=1130 audit(1755043322.503:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:02.602743 kubelet[2244]: E0813 00:02:02.602675 2244 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:02:02.607118 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:02:02.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:02.607506 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:02:02.616502 kernel: audit: type=1131 audit(1755043322.606:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:03.460278 amazon-ssm-agent[1798]: 2025-08-13 00:02:03 INFO [HealthCheck] HealthCheck reporting agent health. Aug 13 00:02:03.876542 amazon-ssm-agent[1798]: 2025-08-13 00:02:03 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Aug 13 00:02:04.649694 env[1823]: time="2025-08-13T00:02:04.649631057Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:04.652690 env[1823]: time="2025-08-13T00:02:04.652628772Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:04.657900 env[1823]: time="2025-08-13T00:02:04.657805216Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:04.664324 env[1823]: time="2025-08-13T00:02:04.664252387Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Aug 13 00:02:04.671434 env[1823]: time="2025-08-13T00:02:04.667588356Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:05.294694 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Aug 13 00:02:05.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:05.304411 kernel: audit: type=1131 audit(1755043325.293:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:05.326000 audit: BPF prog-id=46 op=UNLOAD Aug 13 00:02:05.326000 audit: BPF prog-id=45 op=UNLOAD Aug 13 00:02:05.332997 kernel: audit: type=1334 audit(1755043325.326:260): prog-id=46 op=UNLOAD Aug 13 00:02:05.333115 kernel: audit: type=1334 audit(1755043325.326:261): prog-id=45 op=UNLOAD Aug 13 00:02:05.333170 kernel: audit: type=1334 audit(1755043325.326:262): prog-id=44 op=UNLOAD Aug 13 00:02:05.326000 audit: BPF prog-id=44 op=UNLOAD Aug 13 00:02:12.826450 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Aug 13 00:02:12.826812 systemd[1]: Stopped kubelet.service. Aug 13 00:02:12.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:12.833038 systemd[1]: Starting kubelet.service... Aug 13 00:02:12.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:12.847593 kernel: audit: type=1130 audit(1755043332.826:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:12.847758 kernel: audit: type=1131 audit(1755043332.826:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:13.146534 systemd[1]: Started kubelet.service. Aug 13 00:02:13.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:13.163474 kernel: audit: type=1130 audit(1755043333.146:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:13.241177 kubelet[2276]: E0813 00:02:13.241086 2276 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:02:13.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:13.245764 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:02:13.246083 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:02:13.255408 kernel: audit: type=1131 audit(1755043333.246:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:14.671960 systemd[1]: Stopped kubelet.service. Aug 13 00:02:14.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:14.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:14.682194 systemd[1]: Starting kubelet.service... Aug 13 00:02:14.690813 kernel: audit: type=1130 audit(1755043334.672:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:14.690960 kernel: audit: type=1131 audit(1755043334.673:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:14.749745 systemd[1]: Reloading. Aug 13 00:02:14.947414 /usr/lib/systemd/system-generators/torcx-generator[2311]: time="2025-08-13T00:02:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:02:14.947481 /usr/lib/systemd/system-generators/torcx-generator[2311]: time="2025-08-13T00:02:14Z" level=info msg="torcx already run" Aug 13 00:02:15.152725 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:02:15.152772 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:02:15.194542 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:02:15.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376970 kernel: audit: type=1400 audit(1755043335.361:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.377112 kernel: audit: type=1400 audit(1755043335.367:270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.377161 kernel: audit: type=1400 audit(1755043335.367:271): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.392397 kernel: audit: type=1400 audit(1755043335.367:272): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit: BPF prog-id=49 op=LOAD Aug 13 00:02:15.369000 audit: BPF prog-id=39 op=UNLOAD Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit: BPF prog-id=50 op=LOAD Aug 13 00:02:15.376000 audit: BPF prog-id=47 op=UNLOAD Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit: BPF prog-id=51 op=LOAD Aug 13 00:02:15.384000 audit: BPF prog-id=41 op=UNLOAD Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.394000 audit: BPF prog-id=52 op=LOAD Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.395000 audit: BPF prog-id=53 op=LOAD Aug 13 00:02:15.396000 audit: BPF prog-id=42 op=UNLOAD Aug 13 00:02:15.396000 audit: BPF prog-id=43 op=UNLOAD Aug 13 00:02:15.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit: BPF prog-id=54 op=LOAD Aug 13 00:02:15.399000 audit: BPF prog-id=30 op=UNLOAD Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit: BPF prog-id=55 op=LOAD Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.400000 audit: BPF prog-id=56 op=LOAD Aug 13 00:02:15.400000 audit: BPF prog-id=31 op=UNLOAD Aug 13 00:02:15.400000 audit: BPF prog-id=32 op=UNLOAD Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.403000 audit: BPF prog-id=57 op=LOAD Aug 13 00:02:15.403000 audit: BPF prog-id=33 op=UNLOAD Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.404000 audit: BPF prog-id=58 op=LOAD Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.405000 audit: BPF prog-id=59 op=LOAD Aug 13 00:02:15.405000 audit: BPF prog-id=34 op=UNLOAD Aug 13 00:02:15.405000 audit: BPF prog-id=35 op=UNLOAD Aug 13 00:02:15.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit: BPF prog-id=60 op=LOAD Aug 13 00:02:15.410000 audit: BPF prog-id=40 op=UNLOAD Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit: BPF prog-id=61 op=LOAD Aug 13 00:02:15.411000 audit: BPF prog-id=36 op=UNLOAD Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit: BPF prog-id=62 op=LOAD Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:15.411000 audit: BPF prog-id=63 op=LOAD Aug 13 00:02:15.411000 audit: BPF prog-id=37 op=UNLOAD Aug 13 00:02:15.411000 audit: BPF prog-id=38 op=UNLOAD Aug 13 00:02:15.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:15.457004 systemd[1]: Started kubelet.service. Aug 13 00:02:15.467718 systemd[1]: Stopping kubelet.service... Aug 13 00:02:15.468472 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 00:02:15.468850 systemd[1]: Stopped kubelet.service. Aug 13 00:02:15.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:15.472176 systemd[1]: Starting kubelet.service... Aug 13 00:02:15.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:15.816688 systemd[1]: Started kubelet.service. Aug 13 00:02:15.904660 kubelet[2376]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:15.904660 kubelet[2376]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Aug 13 00:02:15.904660 kubelet[2376]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:15.905260 kubelet[2376]: I0813 00:02:15.904792 2376 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 00:02:16.748199 kubelet[2376]: I0813 00:02:16.748126 2376 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Aug 13 00:02:16.748474 kubelet[2376]: I0813 00:02:16.748448 2376 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 00:02:16.749435 kubelet[2376]: I0813 00:02:16.749354 2376 server.go:956] "Client rotation is on, will bootstrap in background" Aug 13 00:02:16.826410 kubelet[2376]: E0813 00:02:16.826314 2376 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.17.40:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Aug 13 00:02:16.830981 kubelet[2376]: I0813 00:02:16.830923 2376 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 00:02:16.846736 kubelet[2376]: E0813 00:02:16.846636 2376 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 00:02:16.846736 kubelet[2376]: I0813 00:02:16.846731 2376 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 00:02:16.852457 kubelet[2376]: I0813 00:02:16.852408 2376 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 00:02:16.853109 kubelet[2376]: I0813 00:02:16.853062 2376 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 00:02:16.853413 kubelet[2376]: I0813 00:02:16.853112 2376 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-17-40","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 00:02:16.853580 kubelet[2376]: I0813 00:02:16.853557 2376 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 00:02:16.853665 kubelet[2376]: I0813 00:02:16.853581 2376 container_manager_linux.go:303] "Creating device plugin manager" Aug 13 00:02:16.853952 kubelet[2376]: I0813 00:02:16.853907 2376 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:16.860802 kubelet[2376]: I0813 00:02:16.860738 2376 kubelet.go:480] "Attempting to sync node with API server" Aug 13 00:02:16.860802 kubelet[2376]: I0813 00:02:16.860792 2376 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 00:02:16.866618 kubelet[2376]: I0813 00:02:16.866556 2376 kubelet.go:386] "Adding apiserver pod source" Aug 13 00:02:16.866766 kubelet[2376]: I0813 00:02:16.866671 2376 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 00:02:16.870974 kubelet[2376]: E0813 00:02:16.870916 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.17.40:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-40&limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Aug 13 00:02:16.871306 kubelet[2376]: I0813 00:02:16.871276 2376 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 00:02:16.872752 kubelet[2376]: I0813 00:02:16.872715 2376 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Aug 13 00:02:16.873126 kubelet[2376]: W0813 00:02:16.873105 2376 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Aug 13 00:02:16.886752 kubelet[2376]: I0813 00:02:16.886720 2376 watchdog_linux.go:99] "Systemd watchdog is not enabled" Aug 13 00:02:16.886977 kubelet[2376]: I0813 00:02:16.886956 2376 server.go:1289] "Started kubelet" Aug 13 00:02:16.893476 kubelet[2376]: E0813 00:02:16.893417 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.17.40:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Aug 13 00:02:16.893655 kubelet[2376]: I0813 00:02:16.893500 2376 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 00:02:16.897836 kubelet[2376]: I0813 00:02:16.897720 2376 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 00:02:16.898721 kubelet[2376]: I0813 00:02:16.898683 2376 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 00:02:16.905238 kubelet[2376]: I0813 00:02:16.905166 2376 server.go:317] "Adding debug handlers to kubelet server" Aug 13 00:02:16.908999 kubelet[2376]: E0813 00:02:16.906446 2376 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.17.40:6443/api/v1/namespaces/default/events\": dial tcp 172.31.17.40:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-17-40.185b2a9dc48f52e2 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-17-40,UID:ip-172-31-17-40,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-17-40,},FirstTimestamp:2025-08-13 00:02:16.886899426 +0000 UTC m=+1.059642246,LastTimestamp:2025-08-13 00:02:16.886899426 +0000 UTC m=+1.059642246,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-17-40,}" Aug 13 00:02:16.914526 kubelet[2376]: E0813 00:02:16.914478 2376 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 00:02:16.914000 audit[2376]: AVC avc: denied { mac_admin } for pid=2376 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:16.914000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:16.914000 audit[2376]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c693e0 a1=4000b4c588 a2=4000c693b0 a3=25 items=0 ppid=1 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.914000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:16.915000 audit[2376]: AVC avc: denied { mac_admin } for pid=2376 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:16.915000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:16.915000 audit[2376]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bd8200 a1=4000b4c5a0 a2=4000c69470 a3=25 items=0 ppid=1 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.915000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:16.916156 kubelet[2376]: I0813 00:02:16.915476 2376 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 00:02:16.916156 kubelet[2376]: I0813 00:02:16.915594 2376 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Aug 13 00:02:16.916156 kubelet[2376]: I0813 00:02:16.915751 2376 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 00:02:16.916614 kubelet[2376]: I0813 00:02:16.916586 2376 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 00:02:16.920707 kubelet[2376]: E0813 00:02:16.920662 2376 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-17-40\" not found" Aug 13 00:02:16.920956 kubelet[2376]: I0813 00:02:16.920932 2376 volume_manager.go:297] "Starting Kubelet Volume Manager" Aug 13 00:02:16.921567 kubelet[2376]: I0813 00:02:16.921533 2376 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Aug 13 00:02:16.921806 kubelet[2376]: I0813 00:02:16.921782 2376 reconciler.go:26] "Reconciler: start to sync state" Aug 13 00:02:16.922958 kubelet[2376]: E0813 00:02:16.922896 2376 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.40:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-40?timeout=10s\": dial tcp 172.31.17.40:6443: connect: connection refused" interval="200ms" Aug 13 00:02:16.923441 kubelet[2376]: I0813 00:02:16.923407 2376 factory.go:223] Registration of the systemd container factory successfully Aug 13 00:02:16.923727 kubelet[2376]: I0813 00:02:16.923696 2376 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 00:02:16.924297 kubelet[2376]: E0813 00:02:16.924254 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.17.40:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Aug 13 00:02:16.926167 kubelet[2376]: I0813 00:02:16.926129 2376 factory.go:223] Registration of the containerd container factory successfully Aug 13 00:02:16.930000 audit[2393]: NETFILTER_CFG table=mangle:26 family=10 entries=2 op=nft_register_chain pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:16.930000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcfaf0a80 a2=0 a3=1 items=0 ppid=2376 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.930000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 00:02:16.931629 kubelet[2376]: I0813 00:02:16.931546 2376 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Aug 13 00:02:16.933000 audit[2394]: NETFILTER_CFG table=mangle:27 family=2 entries=2 op=nft_register_chain pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:16.933000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff118f7b0 a2=0 a3=1 items=0 ppid=2376 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.933000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 00:02:16.935000 audit[2395]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:16.935000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8f5e090 a2=0 a3=1 items=0 ppid=2376 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.935000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 00:02:16.939000 audit[2397]: NETFILTER_CFG table=mangle:29 family=10 entries=1 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:16.939000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc40106d0 a2=0 a3=1 items=0 ppid=2376 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.939000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 00:02:16.942000 audit[2398]: NETFILTER_CFG table=filter:30 family=2 entries=2 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:16.942000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe1ad0b40 a2=0 a3=1 items=0 ppid=2376 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.942000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:16.947000 audit[2399]: NETFILTER_CFG table=nat:31 family=10 entries=2 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:16.947000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffffe6495c0 a2=0 a3=1 items=0 ppid=2376 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 00:02:16.955000 audit[2403]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:16.955000 audit[2403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff00ad5b0 a2=0 a3=1 items=0 ppid=2376 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:16.956000 audit[2402]: NETFILTER_CFG table=filter:33 family=10 entries=2 op=nft_register_chain pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:16.956000 audit[2402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffffb22340 a2=0 a3=1 items=0 ppid=2376 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 00:02:16.961211 kubelet[2376]: I0813 00:02:16.961162 2376 cpu_manager.go:221] "Starting CPU manager" policy="none" Aug 13 00:02:16.961211 kubelet[2376]: I0813 00:02:16.961201 2376 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Aug 13 00:02:16.961535 kubelet[2376]: I0813 00:02:16.961267 2376 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:16.964294 kubelet[2376]: I0813 00:02:16.964234 2376 policy_none.go:49] "None policy: Start" Aug 13 00:02:16.964472 kubelet[2376]: I0813 00:02:16.964306 2376 memory_manager.go:186] "Starting memorymanager" policy="None" Aug 13 00:02:16.964472 kubelet[2376]: I0813 00:02:16.964336 2376 state_mem.go:35] "Initializing new in-memory state store" Aug 13 00:02:16.982087 systemd[1]: Created slice kubepods.slice. Aug 13 00:02:16.983000 audit[2407]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:16.983000 audit[2407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe3990600 a2=0 a3=1 items=0 ppid=2376 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.983000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Aug 13 00:02:16.985157 kubelet[2376]: I0813 00:02:16.985089 2376 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Aug 13 00:02:16.985716 kubelet[2376]: I0813 00:02:16.985689 2376 status_manager.go:230] "Starting to sync pod status with apiserver" Aug 13 00:02:16.986032 kubelet[2376]: I0813 00:02:16.986001 2376 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Aug 13 00:02:16.986221 kubelet[2376]: I0813 00:02:16.986193 2376 kubelet.go:2436] "Starting kubelet main sync loop" Aug 13 00:02:16.986529 kubelet[2376]: E0813 00:02:16.986495 2376 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 00:02:16.990000 audit[2409]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:16.990000 audit[2409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef745ae0 a2=0 a3=1 items=0 ppid=2376 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:16.990000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 00:02:16.991817 kubelet[2376]: E0813 00:02:16.991673 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.17.40:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Aug 13 00:02:16.995974 systemd[1]: Created slice kubepods-burstable.slice. Aug 13 00:02:17.005000 audit[2410]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:17.005000 audit[2410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9813ba0 a2=0 a3=1 items=0 ppid=2376 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:17.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 00:02:17.002515 systemd[1]: Created slice kubepods-besteffort.slice. Aug 13 00:02:17.008434 kubelet[2376]: W0813 00:02:17.008352 2376 helpers.go:245] readString: Failed to read "/sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/cpuset.cpus.effective": read /sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/cpuset.cpus.effective: no such device Aug 13 00:02:17.009000 audit[2411]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:17.009000 audit[2411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd15e76b0 a2=0 a3=1 items=0 ppid=2376 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:17.009000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 00:02:17.014464 kubelet[2376]: E0813 00:02:17.014408 2376 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Aug 13 00:02:17.014000 audit[2376]: AVC avc: denied { mac_admin } for pid=2376 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:17.014000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:17.014000 audit[2376]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000da6570 a1=4000d99b60 a2=4000da6540 a3=25 items=0 ppid=1 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:17.014000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:17.014947 kubelet[2376]: E0813 00:02:17.014586 2376 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Aug 13 00:02:17.014947 kubelet[2376]: I0813 00:02:17.014793 2376 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 00:02:17.014947 kubelet[2376]: I0813 00:02:17.014814 2376 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 00:02:17.015958 kubelet[2376]: I0813 00:02:17.015864 2376 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 00:02:17.022592 kubelet[2376]: E0813 00:02:17.022548 2376 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Aug 13 00:02:17.022857 kubelet[2376]: E0813 00:02:17.022816 2376 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-17-40\" not found" Aug 13 00:02:17.108940 systemd[1]: Created slice kubepods-burstable-pod6bef46b88ad0ed23cd9ebaee605f1320.slice. Aug 13 00:02:17.117717 kubelet[2376]: E0813 00:02:17.117675 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:17.119281 kubelet[2376]: I0813 00:02:17.119224 2376 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-17-40" Aug 13 00:02:17.123985 systemd[1]: Created slice kubepods-burstable-podb3e4e48eddb2858e4d1fa2b16878e597.slice. Aug 13 00:02:17.126582 kubelet[2376]: I0813 00:02:17.126524 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6bef46b88ad0ed23cd9ebaee605f1320-k8s-certs\") pod \"kube-apiserver-ip-172-31-17-40\" (UID: \"6bef46b88ad0ed23cd9ebaee605f1320\") " pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:17.126725 kubelet[2376]: I0813 00:02:17.126600 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:17.126725 kubelet[2376]: I0813 00:02:17.126645 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:17.126725 kubelet[2376]: I0813 00:02:17.126685 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6bef46b88ad0ed23cd9ebaee605f1320-ca-certs\") pod \"kube-apiserver-ip-172-31-17-40\" (UID: \"6bef46b88ad0ed23cd9ebaee605f1320\") " pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:17.126925 kubelet[2376]: I0813 00:02:17.126726 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6bef46b88ad0ed23cd9ebaee605f1320-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-17-40\" (UID: \"6bef46b88ad0ed23cd9ebaee605f1320\") " pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:17.126925 kubelet[2376]: I0813 00:02:17.126767 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-ca-certs\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:17.126925 kubelet[2376]: I0813 00:02:17.126814 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-k8s-certs\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:17.126925 kubelet[2376]: I0813 00:02:17.126853 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-kubeconfig\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:17.126925 kubelet[2376]: I0813 00:02:17.126900 2376 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e147a6e9a5cceefec40e026453e85cb9-kubeconfig\") pod \"kube-scheduler-ip-172-31-17-40\" (UID: \"e147a6e9a5cceefec40e026453e85cb9\") " pod="kube-system/kube-scheduler-ip-172-31-17-40" Aug 13 00:02:17.127924 kubelet[2376]: E0813 00:02:17.127850 2376 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.40:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-40?timeout=10s\": dial tcp 172.31.17.40:6443: connect: connection refused" interval="400ms" Aug 13 00:02:17.128080 kubelet[2376]: E0813 00:02:17.127953 2376 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.17.40:6443/api/v1/nodes\": dial tcp 172.31.17.40:6443: connect: connection refused" node="ip-172-31-17-40" Aug 13 00:02:17.131350 kubelet[2376]: E0813 00:02:17.131298 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:17.135591 systemd[1]: Created slice kubepods-burstable-pode147a6e9a5cceefec40e026453e85cb9.slice. Aug 13 00:02:17.138826 kubelet[2376]: E0813 00:02:17.138768 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:17.330208 kubelet[2376]: I0813 00:02:17.330172 2376 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-17-40" Aug 13 00:02:17.330965 kubelet[2376]: E0813 00:02:17.330916 2376 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.17.40:6443/api/v1/nodes\": dial tcp 172.31.17.40:6443: connect: connection refused" node="ip-172-31-17-40" Aug 13 00:02:17.420294 env[1823]: time="2025-08-13T00:02:17.420205630Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-17-40,Uid:6bef46b88ad0ed23cd9ebaee605f1320,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:17.433719 env[1823]: time="2025-08-13T00:02:17.433596484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-17-40,Uid:b3e4e48eddb2858e4d1fa2b16878e597,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:17.440428 env[1823]: time="2025-08-13T00:02:17.440336253Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-17-40,Uid:e147a6e9a5cceefec40e026453e85cb9,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:17.529126 kubelet[2376]: E0813 00:02:17.529048 2376 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.40:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-40?timeout=10s\": dial tcp 172.31.17.40:6443: connect: connection refused" interval="800ms" Aug 13 00:02:17.734125 kubelet[2376]: I0813 00:02:17.733431 2376 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-17-40" Aug 13 00:02:17.734901 kubelet[2376]: E0813 00:02:17.734849 2376 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.17.40:6443/api/v1/nodes\": dial tcp 172.31.17.40:6443: connect: connection refused" node="ip-172-31-17-40" Aug 13 00:02:17.758721 kubelet[2376]: E0813 00:02:17.758651 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.17.40:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Aug 13 00:02:17.895854 kubelet[2376]: E0813 00:02:17.895782 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.17.40:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-40&limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Aug 13 00:02:17.913532 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3629941733.mount: Deactivated successfully. Aug 13 00:02:17.923321 env[1823]: time="2025-08-13T00:02:17.923236246Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.926471 env[1823]: time="2025-08-13T00:02:17.926406931Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.928524 env[1823]: time="2025-08-13T00:02:17.928447633Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.929974 env[1823]: time="2025-08-13T00:02:17.929899967Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.932674 env[1823]: time="2025-08-13T00:02:17.932617447Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.935032 env[1823]: time="2025-08-13T00:02:17.934981987Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.936712 env[1823]: time="2025-08-13T00:02:17.936654833Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.942446 env[1823]: time="2025-08-13T00:02:17.942339335Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.945670 env[1823]: time="2025-08-13T00:02:17.943786784Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.948719 env[1823]: time="2025-08-13T00:02:17.948638716Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.950424 env[1823]: time="2025-08-13T00:02:17.950343339Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.959451 env[1823]: time="2025-08-13T00:02:17.959354428Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:17.990415 kubelet[2376]: E0813 00:02:17.983227 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.17.40:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Aug 13 00:02:18.012550 env[1823]: time="2025-08-13T00:02:18.012407720Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:18.012755 env[1823]: time="2025-08-13T00:02:18.012523946Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:18.012755 env[1823]: time="2025-08-13T00:02:18.012551968Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:18.013056 env[1823]: time="2025-08-13T00:02:18.012985719Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/23a0b553789f68f2158fb4e8d807784b5ed91a30c35a60191178b13da8777e31 pid=2432 runtime=io.containerd.runc.v2 Aug 13 00:02:18.016488 env[1823]: time="2025-08-13T00:02:18.016057390Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:18.016488 env[1823]: time="2025-08-13T00:02:18.016138142Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:18.016488 env[1823]: time="2025-08-13T00:02:18.016165852Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:18.016794 env[1823]: time="2025-08-13T00:02:18.016467596Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3584656bdf0f63012ec4c308590ae4615d0a838a7c124cf69fa71b3508f566aa pid=2423 runtime=io.containerd.runc.v2 Aug 13 00:02:18.033958 env[1823]: time="2025-08-13T00:02:18.033815082Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:18.033958 env[1823]: time="2025-08-13T00:02:18.033899567Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:18.034257 env[1823]: time="2025-08-13T00:02:18.033957170Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:18.034399 env[1823]: time="2025-08-13T00:02:18.034317777Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c5f8f7a6dc467f01746dfd167818c0cf7221486b108e74a0b209ff5b2e124fe1 pid=2454 runtime=io.containerd.runc.v2 Aug 13 00:02:18.057106 systemd[1]: Started cri-containerd-23a0b553789f68f2158fb4e8d807784b5ed91a30c35a60191178b13da8777e31.scope. Aug 13 00:02:18.061396 systemd[1]: Started cri-containerd-3584656bdf0f63012ec4c308590ae4615d0a838a7c124cf69fa71b3508f566aa.scope. Aug 13 00:02:18.125353 systemd[1]: Started cri-containerd-c5f8f7a6dc467f01746dfd167818c0cf7221486b108e74a0b209ff5b2e124fe1.scope. Aug 13 00:02:18.134539 kernel: kauditd_printk_skb: 219 callbacks suppressed Aug 13 00:02:18.134641 kernel: audit: type=1400 audit(1755043338.131:459): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.155440 kernel: audit: type=1400 audit(1755043338.131:460): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.168373 kernel: audit: type=1400 audit(1755043338.131:461): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.182565 kernel: audit: type=1400 audit(1755043338.131:462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.182699 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 00:02:18.182745 kernel: audit: type=1400 audit(1755043338.131:463): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.193049 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Aug 13 00:02:18.193183 kernel: audit: type=1400 audit(1755043338.131:464): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.202448 kernel: audit: backlog limit exceeded Aug 13 00:02:18.206665 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.133000 audit: BPF prog-id=64 op=LOAD Aug 13 00:02:18.142000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.142000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2423 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383436353662646630663633303132656334633330383539306165 Aug 13 00:02:18.142000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.142000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2423 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383436353662646630663633303132656334633330383539306165 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit: BPF prog-id=65 op=LOAD Aug 13 00:02:18.146000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2423 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383436353662646630663633303132656334633330383539306165 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit: BPF prog-id=66 op=LOAD Aug 13 00:02:18.146000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2423 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383436353662646630663633303132656334633330383539306165 Aug 13 00:02:18.146000 audit: BPF prog-id=66 op=UNLOAD Aug 13 00:02:18.146000 audit: BPF prog-id=65 op=UNLOAD Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.146000 audit: BPF prog-id=67 op=LOAD Aug 13 00:02:18.146000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2423 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335383436353662646630663633303132656334633330383539306165 Aug 13 00:02:18.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.213134 kubelet[2376]: E0813 00:02:18.209141 2376 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.17.40:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.17.40:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Aug 13 00:02:18.213000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.213000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2432 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233613062353533373839663638663231353866623465386438303737 Aug 13 00:02:18.214000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.214000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2432 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233613062353533373839663638663231353866623465386438303737 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit: BPF prog-id=69 op=LOAD Aug 13 00:02:18.216000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2432 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233613062353533373839663638663231353866623465386438303737 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.216000 audit: BPF prog-id=70 op=LOAD Aug 13 00:02:18.216000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2432 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233613062353533373839663638663231353866623465386438303737 Aug 13 00:02:18.216000 audit: BPF prog-id=70 op=UNLOAD Aug 13 00:02:18.217000 audit: BPF prog-id=69 op=UNLOAD Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.217000 audit: BPF prog-id=71 op=LOAD Aug 13 00:02:18.217000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2432 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.217000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233613062353533373839663638663231353866623465386438303737 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.237000 audit: BPF prog-id=72 op=LOAD Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2454 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663866376136646334363766303137343664666431363738313863 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2454 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663866376136646334363766303137343664666431363738313863 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit: BPF prog-id=73 op=LOAD Aug 13 00:02:18.239000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2454 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663866376136646334363766303137343664666431363738313863 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit: BPF prog-id=74 op=LOAD Aug 13 00:02:18.239000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2454 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663866376136646334363766303137343664666431363738313863 Aug 13 00:02:18.239000 audit: BPF prog-id=74 op=UNLOAD Aug 13 00:02:18.239000 audit: BPF prog-id=73 op=UNLOAD Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.239000 audit: BPF prog-id=75 op=LOAD Aug 13 00:02:18.239000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2454 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663866376136646334363766303137343664666431363738313863 Aug 13 00:02:18.315647 env[1823]: time="2025-08-13T00:02:18.315584338Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-17-40,Uid:6bef46b88ad0ed23cd9ebaee605f1320,Namespace:kube-system,Attempt:0,} returns sandbox id \"3584656bdf0f63012ec4c308590ae4615d0a838a7c124cf69fa71b3508f566aa\"" Aug 13 00:02:18.329958 kubelet[2376]: E0813 00:02:18.329896 2376 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.40:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-40?timeout=10s\": dial tcp 172.31.17.40:6443: connect: connection refused" interval="1.6s" Aug 13 00:02:18.331962 env[1823]: time="2025-08-13T00:02:18.331890120Z" level=info msg="CreateContainer within sandbox \"3584656bdf0f63012ec4c308590ae4615d0a838a7c124cf69fa71b3508f566aa\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Aug 13 00:02:18.334435 env[1823]: time="2025-08-13T00:02:18.334332538Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-17-40,Uid:e147a6e9a5cceefec40e026453e85cb9,Namespace:kube-system,Attempt:0,} returns sandbox id \"23a0b553789f68f2158fb4e8d807784b5ed91a30c35a60191178b13da8777e31\"" Aug 13 00:02:18.343447 env[1823]: time="2025-08-13T00:02:18.342352181Z" level=info msg="CreateContainer within sandbox \"23a0b553789f68f2158fb4e8d807784b5ed91a30c35a60191178b13da8777e31\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Aug 13 00:02:18.344481 env[1823]: time="2025-08-13T00:02:18.344381476Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-17-40,Uid:b3e4e48eddb2858e4d1fa2b16878e597,Namespace:kube-system,Attempt:0,} returns sandbox id \"c5f8f7a6dc467f01746dfd167818c0cf7221486b108e74a0b209ff5b2e124fe1\"" Aug 13 00:02:18.351491 env[1823]: time="2025-08-13T00:02:18.351389849Z" level=info msg="CreateContainer within sandbox \"c5f8f7a6dc467f01746dfd167818c0cf7221486b108e74a0b209ff5b2e124fe1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Aug 13 00:02:18.370889 env[1823]: time="2025-08-13T00:02:18.370808897Z" level=info msg="CreateContainer within sandbox \"3584656bdf0f63012ec4c308590ae4615d0a838a7c124cf69fa71b3508f566aa\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"be8a10261c552d5ee51f7f2cb82b302afcd9293d012249a46186ccee55f38cc6\"" Aug 13 00:02:18.372182 env[1823]: time="2025-08-13T00:02:18.372119007Z" level=info msg="StartContainer for \"be8a10261c552d5ee51f7f2cb82b302afcd9293d012249a46186ccee55f38cc6\"" Aug 13 00:02:18.377237 env[1823]: time="2025-08-13T00:02:18.377113961Z" level=info msg="CreateContainer within sandbox \"23a0b553789f68f2158fb4e8d807784b5ed91a30c35a60191178b13da8777e31\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"68ff145a721b402a4fe7bda74ec4ad8dd57ae83a6706058a8f4c662234671997\"" Aug 13 00:02:18.378462 env[1823]: time="2025-08-13T00:02:18.378392197Z" level=info msg="StartContainer for \"68ff145a721b402a4fe7bda74ec4ad8dd57ae83a6706058a8f4c662234671997\"" Aug 13 00:02:18.380084 env[1823]: time="2025-08-13T00:02:18.380025183Z" level=info msg="CreateContainer within sandbox \"c5f8f7a6dc467f01746dfd167818c0cf7221486b108e74a0b209ff5b2e124fe1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285\"" Aug 13 00:02:18.381082 env[1823]: time="2025-08-13T00:02:18.381028545Z" level=info msg="StartContainer for \"504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285\"" Aug 13 00:02:18.421627 systemd[1]: Started cri-containerd-68ff145a721b402a4fe7bda74ec4ad8dd57ae83a6706058a8f4c662234671997.scope. Aug 13 00:02:18.438639 systemd[1]: Started cri-containerd-be8a10261c552d5ee51f7f2cb82b302afcd9293d012249a46186ccee55f38cc6.scope. Aug 13 00:02:18.451310 systemd[1]: Started cri-containerd-504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285.scope. Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.498000 audit: BPF prog-id=76 op=LOAD Aug 13 00:02:18.499000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.499000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386131303236316335353264356565353166376632636238326233 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386131303236316335353264356565353166376632636238326233 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit: BPF prog-id=77 op=LOAD Aug 13 00:02:18.500000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386131303236316335353264356565353166376632636238326233 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.500000 audit: BPF prog-id=78 op=LOAD Aug 13 00:02:18.500000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386131303236316335353264356565353166376632636238326233 Aug 13 00:02:18.501000 audit: BPF prog-id=78 op=UNLOAD Aug 13 00:02:18.501000 audit: BPF prog-id=77 op=UNLOAD Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.501000 audit: BPF prog-id=79 op=LOAD Aug 13 00:02:18.501000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386131303236316335353264356565353166376632636238326233 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.537000 audit: BPF prog-id=80 op=LOAD Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2432 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666631343561373231623430326134666537626461373465633461 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2432 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666631343561373231623430326134666537626461373465633461 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.539000 audit: BPF prog-id=81 op=LOAD Aug 13 00:02:18.539000 audit[2562]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2432 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666631343561373231623430326134666537626461373465633461 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit: BPF prog-id=82 op=LOAD Aug 13 00:02:18.540000 audit[2562]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2432 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666631343561373231623430326134666537626461373465633461 Aug 13 00:02:18.540000 audit: BPF prog-id=82 op=UNLOAD Aug 13 00:02:18.540000 audit: BPF prog-id=81 op=UNLOAD Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.540000 audit: BPF prog-id=83 op=LOAD Aug 13 00:02:18.540000 audit[2562]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2432 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666631343561373231623430326134666537626461373465633461 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.546000 audit: BPF prog-id=84 op=LOAD Aug 13 00:02:18.548000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.548000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2454 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346166663036353630386237623134313861663535303537303135 Aug 13 00:02:18.548000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.548000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2454 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346166663036353630386237623134313861663535303537303135 Aug 13 00:02:18.552426 kubelet[2376]: I0813 00:02:18.539953 2376 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-17-40" Aug 13 00:02:18.552426 kubelet[2376]: E0813 00:02:18.540548 2376 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.17.40:6443/api/v1/nodes\": dial tcp 172.31.17.40:6443: connect: connection refused" node="ip-172-31-17-40" Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit: BPF prog-id=85 op=LOAD Aug 13 00:02:18.551000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2454 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346166663036353630386237623134313861663535303537303135 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit: BPF prog-id=86 op=LOAD Aug 13 00:02:18.551000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2454 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346166663036353630386237623134313861663535303537303135 Aug 13 00:02:18.551000 audit: BPF prog-id=86 op=UNLOAD Aug 13 00:02:18.551000 audit: BPF prog-id=85 op=UNLOAD Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:18.551000 audit: BPF prog-id=87 op=LOAD Aug 13 00:02:18.551000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2454 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:18.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346166663036353630386237623134313861663535303537303135 Aug 13 00:02:18.596388 env[1823]: time="2025-08-13T00:02:18.594535147Z" level=info msg="StartContainer for \"be8a10261c552d5ee51f7f2cb82b302afcd9293d012249a46186ccee55f38cc6\" returns successfully" Aug 13 00:02:18.621534 env[1823]: time="2025-08-13T00:02:18.621458471Z" level=info msg="StartContainer for \"68ff145a721b402a4fe7bda74ec4ad8dd57ae83a6706058a8f4c662234671997\" returns successfully" Aug 13 00:02:18.647958 env[1823]: time="2025-08-13T00:02:18.647893608Z" level=info msg="StartContainer for \"504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285\" returns successfully" Aug 13 00:02:19.003930 kubelet[2376]: E0813 00:02:19.003878 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:19.008649 kubelet[2376]: E0813 00:02:19.008578 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:19.012012 kubelet[2376]: E0813 00:02:19.011974 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:20.014416 kubelet[2376]: E0813 00:02:20.014351 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:20.016167 kubelet[2376]: E0813 00:02:20.016130 2376 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:20.142926 kubelet[2376]: I0813 00:02:20.142886 2376 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-17-40" Aug 13 00:02:20.401998 update_engine[1813]: I0813 00:02:20.401428 1813 update_attempter.cc:509] Updating boot flags... Aug 13 00:02:22.357000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:22.358000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6755 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:22.358000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40037e7e30 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:02:22.358000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:02:22.357000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4000855c80 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:02:22.357000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:02:22.363000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:22.363000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4000855ce0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:02:22.363000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:02:22.364000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:22.364000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006638980 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:02:22.364000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:02:22.368000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:22.368000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=4006638be0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:02:22.368000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:02:22.370000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:22.370000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=4002672ab0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:02:22.370000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:02:22.852136 kubelet[2376]: E0813 00:02:22.852091 2376 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-17-40\" not found" node="ip-172-31-17-40" Aug 13 00:02:22.889011 kubelet[2376]: I0813 00:02:22.888965 2376 apiserver.go:52] "Watching apiserver" Aug 13 00:02:22.922604 kubelet[2376]: I0813 00:02:22.922554 2376 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Aug 13 00:02:23.144991 kubelet[2376]: I0813 00:02:23.144854 2376 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-17-40" Aug 13 00:02:23.223169 kubelet[2376]: I0813 00:02:23.223068 2376 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:23.268093 kubelet[2376]: E0813 00:02:23.268011 2376 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-17-40\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:23.268093 kubelet[2376]: I0813 00:02:23.268072 2376 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:23.276087 kubelet[2376]: E0813 00:02:23.276013 2376 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-17-40\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:23.276087 kubelet[2376]: I0813 00:02:23.276068 2376 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-17-40" Aug 13 00:02:23.298154 kubelet[2376]: E0813 00:02:23.298089 2376 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-17-40\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-17-40" Aug 13 00:02:24.636000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:24.640129 kernel: kauditd_printk_skb: 354 callbacks suppressed Aug 13 00:02:24.640310 kernel: audit: type=1400 audit(1755043344.636:571): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:24.636000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000273f50 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:24.636000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:24.685422 kernel: audit: type=1300 audit(1755043344.636:571): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000273f50 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:24.685585 kernel: audit: type=1327 audit(1755043344.636:571): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:24.639000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:24.698488 kernel: audit: type=1400 audit(1755043344.639:572): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:24.639000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d10120 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:24.711994 kernel: audit: type=1300 audit(1755043344.639:572): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d10120 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:24.639000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:24.725346 kernel: audit: type=1327 audit(1755043344.639:572): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:25.480842 kubelet[2376]: I0813 00:02:25.480751 2376 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-17-40" Aug 13 00:02:25.876387 systemd[1]: Reloading. Aug 13 00:02:26.077729 /usr/lib/systemd/system-generators/torcx-generator[2781]: time="2025-08-13T00:02:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:02:26.087561 /usr/lib/systemd/system-generators/torcx-generator[2781]: time="2025-08-13T00:02:26Z" level=info msg="torcx already run" Aug 13 00:02:26.283456 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:02:26.284073 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:02:26.333546 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:02:26.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.578586 kernel: audit: type=1400 audit(1755043346.553:573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.578757 kernel: audit: type=1400 audit(1755043346.561:574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.578820 kernel: audit: type=1400 audit(1755043346.561:575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.578866 kernel: audit: type=1400 audit(1755043346.561:576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit: BPF prog-id=88 op=LOAD Aug 13 00:02:26.561000 audit: BPF prog-id=68 op=UNLOAD Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit: BPF prog-id=89 op=LOAD Aug 13 00:02:26.570000 audit: BPF prog-id=49 op=UNLOAD Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit: BPF prog-id=90 op=LOAD Aug 13 00:02:26.577000 audit: BPF prog-id=80 op=UNLOAD Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.585000 audit: BPF prog-id=91 op=LOAD Aug 13 00:02:26.585000 audit: BPF prog-id=50 op=UNLOAD Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit: BPF prog-id=92 op=LOAD Aug 13 00:02:26.590000 audit: BPF prog-id=51 op=UNLOAD Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit: BPF prog-id=93 op=LOAD Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.590000 audit: BPF prog-id=94 op=LOAD Aug 13 00:02:26.590000 audit: BPF prog-id=52 op=UNLOAD Aug 13 00:02:26.590000 audit: BPF prog-id=53 op=UNLOAD Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.592000 audit: BPF prog-id=95 op=LOAD Aug 13 00:02:26.592000 audit: BPF prog-id=76 op=UNLOAD Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.593000 audit: BPF prog-id=96 op=LOAD Aug 13 00:02:26.593000 audit: BPF prog-id=64 op=UNLOAD Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit: BPF prog-id=97 op=LOAD Aug 13 00:02:26.596000 audit: BPF prog-id=54 op=UNLOAD Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.596000 audit: BPF prog-id=98 op=LOAD Aug 13 00:02:26.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.597000 audit: BPF prog-id=99 op=LOAD Aug 13 00:02:26.597000 audit: BPF prog-id=55 op=UNLOAD Aug 13 00:02:26.597000 audit: BPF prog-id=56 op=UNLOAD Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.601000 audit: BPF prog-id=100 op=LOAD Aug 13 00:02:26.601000 audit: BPF prog-id=84 op=UNLOAD Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.606000 audit: BPF prog-id=101 op=LOAD Aug 13 00:02:26.606000 audit: BPF prog-id=57 op=UNLOAD Aug 13 00:02:26.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit: BPF prog-id=102 op=LOAD Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.609000 audit: BPF prog-id=103 op=LOAD Aug 13 00:02:26.609000 audit: BPF prog-id=58 op=UNLOAD Aug 13 00:02:26.609000 audit: BPF prog-id=59 op=UNLOAD Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.616000 audit: BPF prog-id=104 op=LOAD Aug 13 00:02:26.616000 audit: BPF prog-id=60 op=UNLOAD Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit: BPF prog-id=105 op=LOAD Aug 13 00:02:26.617000 audit: BPF prog-id=61 op=UNLOAD Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.617000 audit: BPF prog-id=106 op=LOAD Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.618000 audit: BPF prog-id=107 op=LOAD Aug 13 00:02:26.618000 audit: BPF prog-id=62 op=UNLOAD Aug 13 00:02:26.618000 audit: BPF prog-id=63 op=UNLOAD Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:26.625000 audit: BPF prog-id=108 op=LOAD Aug 13 00:02:26.625000 audit: BPF prog-id=72 op=UNLOAD Aug 13 00:02:26.674962 systemd[1]: Stopping kubelet.service... Aug 13 00:02:26.700104 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 00:02:26.700587 systemd[1]: Stopped kubelet.service. Aug 13 00:02:26.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:26.700700 systemd[1]: kubelet.service: Consumed 1.865s CPU time. Aug 13 00:02:26.707317 systemd[1]: Starting kubelet.service... Aug 13 00:02:27.011000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:27.013000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:27.013000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c732a0 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:27.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:27.013000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:27.013000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c732e0 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:27.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:27.014000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:27.014000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c73320 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:27.014000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:27.011000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000bfc100 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:27.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:27.066711 systemd[1]: Started kubelet.service. Aug 13 00:02:27.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:27.183506 kubelet[2838]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:27.183506 kubelet[2838]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Aug 13 00:02:27.183506 kubelet[2838]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:27.184135 kubelet[2838]: I0813 00:02:27.183608 2838 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 00:02:27.201752 kubelet[2838]: I0813 00:02:27.201702 2838 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Aug 13 00:02:27.201956 kubelet[2838]: I0813 00:02:27.201933 2838 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 00:02:27.205433 kubelet[2838]: I0813 00:02:27.205337 2838 server.go:956] "Client rotation is on, will bootstrap in background" Aug 13 00:02:27.210684 kubelet[2838]: I0813 00:02:27.210580 2838 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Aug 13 00:02:27.216028 kubelet[2838]: I0813 00:02:27.215961 2838 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 00:02:27.244928 kubelet[2838]: E0813 00:02:27.244872 2838 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 00:02:27.245142 kubelet[2838]: I0813 00:02:27.245115 2838 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 00:02:27.258106 kubelet[2838]: I0813 00:02:27.258049 2838 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 00:02:27.259800 kubelet[2838]: I0813 00:02:27.259669 2838 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 00:02:27.261323 kubelet[2838]: I0813 00:02:27.260030 2838 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-17-40","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 00:02:27.261787 kubelet[2838]: I0813 00:02:27.261750 2838 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 00:02:27.261925 kubelet[2838]: I0813 00:02:27.261904 2838 container_manager_linux.go:303] "Creating device plugin manager" Aug 13 00:02:27.262214 kubelet[2838]: I0813 00:02:27.262188 2838 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:27.262808 kubelet[2838]: I0813 00:02:27.262763 2838 kubelet.go:480] "Attempting to sync node with API server" Aug 13 00:02:27.263534 kubelet[2838]: I0813 00:02:27.263466 2838 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 00:02:27.263683 kubelet[2838]: I0813 00:02:27.263552 2838 kubelet.go:386] "Adding apiserver pod source" Aug 13 00:02:27.263683 kubelet[2838]: I0813 00:02:27.263586 2838 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 00:02:27.266714 kubelet[2838]: I0813 00:02:27.266639 2838 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 00:02:27.267883 kubelet[2838]: I0813 00:02:27.267733 2838 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Aug 13 00:02:27.275809 kubelet[2838]: I0813 00:02:27.275751 2838 watchdog_linux.go:99] "Systemd watchdog is not enabled" Aug 13 00:02:27.275970 kubelet[2838]: I0813 00:02:27.275835 2838 server.go:1289] "Started kubelet" Aug 13 00:02:27.287000 audit[2838]: AVC avc: denied { mac_admin } for pid=2838 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:27.287000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:27.287000 audit[2838]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400074b110 a1=40006a1b48 a2=400074b0e0 a3=25 items=0 ppid=1 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:27.287000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:27.297503 kubelet[2838]: I0813 00:02:27.297445 2838 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 00:02:27.296000 audit[2838]: AVC avc: denied { mac_admin } for pid=2838 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:27.296000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:27.296000 audit[2838]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40005c8ec0 a1=40006a1b60 a2=400074b1a0 a3=25 items=0 ppid=1 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:27.296000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:27.298442 kubelet[2838]: I0813 00:02:27.298404 2838 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Aug 13 00:02:27.298670 kubelet[2838]: I0813 00:02:27.298645 2838 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 00:02:27.305057 kubelet[2838]: I0813 00:02:27.304995 2838 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 00:02:27.307445 kubelet[2838]: I0813 00:02:27.307403 2838 server.go:317] "Adding debug handlers to kubelet server" Aug 13 00:02:27.316239 kubelet[2838]: I0813 00:02:27.316146 2838 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 00:02:27.316844 kubelet[2838]: I0813 00:02:27.316809 2838 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 00:02:27.317488 kubelet[2838]: I0813 00:02:27.317319 2838 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 00:02:27.325776 kubelet[2838]: I0813 00:02:27.325711 2838 volume_manager.go:297] "Starting Kubelet Volume Manager" Aug 13 00:02:27.326575 kubelet[2838]: E0813 00:02:27.326432 2838 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-17-40\" not found" Aug 13 00:02:27.328006 kubelet[2838]: I0813 00:02:27.327956 2838 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Aug 13 00:02:27.328704 kubelet[2838]: I0813 00:02:27.328672 2838 reconciler.go:26] "Reconciler: start to sync state" Aug 13 00:02:27.339959 kubelet[2838]: I0813 00:02:27.339910 2838 factory.go:223] Registration of the systemd container factory successfully Aug 13 00:02:27.340315 kubelet[2838]: I0813 00:02:27.340277 2838 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 00:02:27.353182 kubelet[2838]: I0813 00:02:27.353116 2838 factory.go:223] Registration of the containerd container factory successfully Aug 13 00:02:27.388700 kubelet[2838]: E0813 00:02:27.388641 2838 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 00:02:27.429911 kubelet[2838]: I0813 00:02:27.429726 2838 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Aug 13 00:02:27.441956 kubelet[2838]: I0813 00:02:27.441905 2838 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Aug 13 00:02:27.442208 kubelet[2838]: I0813 00:02:27.442182 2838 status_manager.go:230] "Starting to sync pod status with apiserver" Aug 13 00:02:27.442480 kubelet[2838]: I0813 00:02:27.442447 2838 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Aug 13 00:02:27.442628 kubelet[2838]: I0813 00:02:27.442602 2838 kubelet.go:2436] "Starting kubelet main sync loop" Aug 13 00:02:27.442871 kubelet[2838]: E0813 00:02:27.442826 2838 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 00:02:27.543730 kubelet[2838]: E0813 00:02:27.543583 2838 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Aug 13 00:02:27.559387 kubelet[2838]: I0813 00:02:27.559296 2838 cpu_manager.go:221] "Starting CPU manager" policy="none" Aug 13 00:02:27.559387 kubelet[2838]: I0813 00:02:27.559337 2838 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Aug 13 00:02:27.559387 kubelet[2838]: I0813 00:02:27.559397 2838 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:27.561855 kubelet[2838]: I0813 00:02:27.561786 2838 state_mem.go:88] "Updated default CPUSet" cpuSet="" Aug 13 00:02:27.561855 kubelet[2838]: I0813 00:02:27.561837 2838 state_mem.go:96] "Updated CPUSet assignments" assignments={} Aug 13 00:02:27.562070 kubelet[2838]: I0813 00:02:27.561876 2838 policy_none.go:49] "None policy: Start" Aug 13 00:02:27.562070 kubelet[2838]: I0813 00:02:27.561903 2838 memory_manager.go:186] "Starting memorymanager" policy="None" Aug 13 00:02:27.562070 kubelet[2838]: I0813 00:02:27.561936 2838 state_mem.go:35] "Initializing new in-memory state store" Aug 13 00:02:27.562309 kubelet[2838]: I0813 00:02:27.562151 2838 state_mem.go:75] "Updated machine memory state" Aug 13 00:02:27.575166 kubelet[2838]: E0813 00:02:27.575105 2838 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Aug 13 00:02:27.574000 audit[2838]: AVC avc: denied { mac_admin } for pid=2838 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:27.574000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:27.574000 audit[2838]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c71e90 a1=400102e588 a2=4000c71e60 a3=25 items=0 ppid=1 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:27.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:27.576343 kubelet[2838]: E0813 00:02:27.576303 2838 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Aug 13 00:02:27.576901 kubelet[2838]: I0813 00:02:27.576817 2838 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 00:02:27.577117 kubelet[2838]: I0813 00:02:27.577049 2838 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 00:02:27.577989 kubelet[2838]: I0813 00:02:27.577908 2838 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 00:02:27.582536 kubelet[2838]: E0813 00:02:27.582439 2838 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Aug 13 00:02:27.699667 kubelet[2838]: I0813 00:02:27.699587 2838 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-17-40" Aug 13 00:02:27.716240 kubelet[2838]: I0813 00:02:27.716188 2838 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-17-40" Aug 13 00:02:27.716487 kubelet[2838]: I0813 00:02:27.716413 2838 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-17-40" Aug 13 00:02:27.745608 kubelet[2838]: I0813 00:02:27.745568 2838 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-17-40" Aug 13 00:02:27.746304 kubelet[2838]: I0813 00:02:27.745636 2838 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:27.747871 kubelet[2838]: I0813 00:02:27.747807 2838 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:27.761978 kubelet[2838]: E0813 00:02:27.761928 2838 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-17-40\" already exists" pod="kube-system/kube-scheduler-ip-172-31-17-40" Aug 13 00:02:27.832064 kubelet[2838]: I0813 00:02:27.832012 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-ca-certs\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:27.832424 kubelet[2838]: I0813 00:02:27.832329 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:27.832677 kubelet[2838]: I0813 00:02:27.832638 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-k8s-certs\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:27.832889 kubelet[2838]: I0813 00:02:27.832858 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6bef46b88ad0ed23cd9ebaee605f1320-ca-certs\") pod \"kube-apiserver-ip-172-31-17-40\" (UID: \"6bef46b88ad0ed23cd9ebaee605f1320\") " pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:27.833045 kubelet[2838]: I0813 00:02:27.833016 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6bef46b88ad0ed23cd9ebaee605f1320-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-17-40\" (UID: \"6bef46b88ad0ed23cd9ebaee605f1320\") " pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:27.833298 kubelet[2838]: I0813 00:02:27.833249 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-kubeconfig\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:27.833676 kubelet[2838]: I0813 00:02:27.833635 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3e4e48eddb2858e4d1fa2b16878e597-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-17-40\" (UID: \"b3e4e48eddb2858e4d1fa2b16878e597\") " pod="kube-system/kube-controller-manager-ip-172-31-17-40" Aug 13 00:02:27.834001 kubelet[2838]: I0813 00:02:27.833962 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e147a6e9a5cceefec40e026453e85cb9-kubeconfig\") pod \"kube-scheduler-ip-172-31-17-40\" (UID: \"e147a6e9a5cceefec40e026453e85cb9\") " pod="kube-system/kube-scheduler-ip-172-31-17-40" Aug 13 00:02:27.834265 kubelet[2838]: I0813 00:02:27.834236 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6bef46b88ad0ed23cd9ebaee605f1320-k8s-certs\") pod \"kube-apiserver-ip-172-31-17-40\" (UID: \"6bef46b88ad0ed23cd9ebaee605f1320\") " pod="kube-system/kube-apiserver-ip-172-31-17-40" Aug 13 00:02:28.264415 kubelet[2838]: I0813 00:02:28.264236 2838 apiserver.go:52] "Watching apiserver" Aug 13 00:02:28.328407 kubelet[2838]: I0813 00:02:28.328341 2838 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Aug 13 00:02:28.455877 kubelet[2838]: I0813 00:02:28.455763 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-17-40" podStartSLOduration=3.455737506 podStartE2EDuration="3.455737506s" podCreationTimestamp="2025-08-13 00:02:25 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:28.427889123 +0000 UTC m=+1.342808495" watchObservedRunningTime="2025-08-13 00:02:28.455737506 +0000 UTC m=+1.370656902" Aug 13 00:02:28.456409 kubelet[2838]: I0813 00:02:28.456312 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-17-40" podStartSLOduration=1.456294504 podStartE2EDuration="1.456294504s" podCreationTimestamp="2025-08-13 00:02:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:28.452238874 +0000 UTC m=+1.367158258" watchObservedRunningTime="2025-08-13 00:02:28.456294504 +0000 UTC m=+1.371213900" Aug 13 00:02:28.502576 kubelet[2838]: I0813 00:02:28.502433 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-17-40" podStartSLOduration=1.50234318 podStartE2EDuration="1.50234318s" podCreationTimestamp="2025-08-13 00:02:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:28.474754618 +0000 UTC m=+1.389673990" watchObservedRunningTime="2025-08-13 00:02:28.50234318 +0000 UTC m=+1.417262636" Aug 13 00:02:28.962000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Aug 13 00:02:28.962000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40004fdcc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:02:28.962000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:30.569753 kubelet[2838]: I0813 00:02:30.569704 2838 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Aug 13 00:02:30.571350 env[1823]: time="2025-08-13T00:02:30.571236484Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Aug 13 00:02:30.573923 kubelet[2838]: I0813 00:02:30.572410 2838 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Aug 13 00:02:31.112514 systemd[1]: Created slice kubepods-besteffort-pod7b6916ad_b5d1_43f6_9713_178543de99a2.slice. Aug 13 00:02:31.162084 kubelet[2838]: I0813 00:02:31.162034 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/7b6916ad-b5d1-43f6-9713-178543de99a2-kube-proxy\") pod \"kube-proxy-jl9z2\" (UID: \"7b6916ad-b5d1-43f6-9713-178543de99a2\") " pod="kube-system/kube-proxy-jl9z2" Aug 13 00:02:31.162500 kubelet[2838]: I0813 00:02:31.162455 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wnn4r\" (UniqueName: \"kubernetes.io/projected/7b6916ad-b5d1-43f6-9713-178543de99a2-kube-api-access-wnn4r\") pod \"kube-proxy-jl9z2\" (UID: \"7b6916ad-b5d1-43f6-9713-178543de99a2\") " pod="kube-system/kube-proxy-jl9z2" Aug 13 00:02:31.162947 kubelet[2838]: I0813 00:02:31.162904 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7b6916ad-b5d1-43f6-9713-178543de99a2-xtables-lock\") pod \"kube-proxy-jl9z2\" (UID: \"7b6916ad-b5d1-43f6-9713-178543de99a2\") " pod="kube-system/kube-proxy-jl9z2" Aug 13 00:02:31.163195 kubelet[2838]: I0813 00:02:31.163164 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7b6916ad-b5d1-43f6-9713-178543de99a2-lib-modules\") pod \"kube-proxy-jl9z2\" (UID: \"7b6916ad-b5d1-43f6-9713-178543de99a2\") " pod="kube-system/kube-proxy-jl9z2" Aug 13 00:02:31.280755 kubelet[2838]: I0813 00:02:31.280708 2838 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Aug 13 00:02:31.426061 env[1823]: time="2025-08-13T00:02:31.424981642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jl9z2,Uid:7b6916ad-b5d1-43f6-9713-178543de99a2,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:31.470834 env[1823]: time="2025-08-13T00:02:31.470655235Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:31.470834 env[1823]: time="2025-08-13T00:02:31.470762110Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:31.471206 env[1823]: time="2025-08-13T00:02:31.470791583Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:31.471464 env[1823]: time="2025-08-13T00:02:31.471212711Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf9fe916be46c88d1cfad7f3521bd18ed0f31303e3115f1094f6211d053cf73f pid=2891 runtime=io.containerd.runc.v2 Aug 13 00:02:31.541767 systemd[1]: run-containerd-runc-k8s.io-bf9fe916be46c88d1cfad7f3521bd18ed0f31303e3115f1094f6211d053cf73f-runc.h3gFQx.mount: Deactivated successfully. Aug 13 00:02:31.558216 systemd[1]: Started cri-containerd-bf9fe916be46c88d1cfad7f3521bd18ed0f31303e3115f1094f6211d053cf73f.scope. Aug 13 00:02:31.607454 kernel: kauditd_printk_skb: 269 callbacks suppressed Aug 13 00:02:31.607647 kernel: audit: type=1400 audit(1755043351.596:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.620589 kernel: audit: type=1400 audit(1755043351.596:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.634622 kernel: audit: type=1400 audit(1755043351.596:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.644465 kernel: audit: type=1400 audit(1755043351.596:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.665291 kernel: audit: type=1400 audit(1755043351.596:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.665520 kernel: audit: type=1400 audit(1755043351.596:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.677663 kernel: audit: type=1400 audit(1755043351.596:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.679209 env[1823]: time="2025-08-13T00:02:31.673311311Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jl9z2,Uid:7b6916ad-b5d1-43f6-9713-178543de99a2,Namespace:kube-system,Attempt:0,} returns sandbox id \"bf9fe916be46c88d1cfad7f3521bd18ed0f31303e3115f1094f6211d053cf73f\"" Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.699400 kernel: audit: type=1400 audit(1755043351.596:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.699532 kernel: audit: type=1400 audit(1755043351.596:835): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.711550 kernel: audit: type=1400 audit(1755043351.598:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.598000 audit: BPF prog-id=109 op=LOAD Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2891 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396665393136626534366338386431636661643766333532316264 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.714560 env[1823]: time="2025-08-13T00:02:31.714386502Z" level=info msg="CreateContainer within sandbox \"bf9fe916be46c88d1cfad7f3521bd18ed0f31303e3115f1094f6211d053cf73f\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Aug 13 00:02:31.609000 audit[2901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2891 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396665393136626534366338386431636661643766333532316264 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit: BPF prog-id=110 op=LOAD Aug 13 00:02:31.609000 audit[2901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2891 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396665393136626534366338386431636661643766333532316264 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit: BPF prog-id=111 op=LOAD Aug 13 00:02:31.609000 audit[2901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2891 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396665393136626534366338386431636661643766333532316264 Aug 13 00:02:31.609000 audit: BPF prog-id=111 op=UNLOAD Aug 13 00:02:31.609000 audit: BPF prog-id=110 op=UNLOAD Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { perfmon } for pid=2901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit[2901]: AVC avc: denied { bpf } for pid=2901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.609000 audit: BPF prog-id=112 op=LOAD Aug 13 00:02:31.609000 audit[2901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2891 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396665393136626534366338386431636661643766333532316264 Aug 13 00:02:31.755850 env[1823]: time="2025-08-13T00:02:31.755733357Z" level=info msg="CreateContainer within sandbox \"bf9fe916be46c88d1cfad7f3521bd18ed0f31303e3115f1094f6211d053cf73f\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"35e9496a9bdb9773e370ef654c5deb87d6f6cce4f0b530c9d4631babb0ef5aee\"" Aug 13 00:02:31.757140 env[1823]: time="2025-08-13T00:02:31.757052423Z" level=info msg="StartContainer for \"35e9496a9bdb9773e370ef654c5deb87d6f6cce4f0b530c9d4631babb0ef5aee\"" Aug 13 00:02:31.817013 systemd[1]: Started cri-containerd-35e9496a9bdb9773e370ef654c5deb87d6f6cce4f0b530c9d4631babb0ef5aee.scope. Aug 13 00:02:31.841896 systemd[1]: Created slice kubepods-besteffort-podf78e1698_7080_485d_a6d3_b3f6c345991b.slice. Aug 13 00:02:31.872088 kubelet[2838]: I0813 00:02:31.872038 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f78e1698-7080-485d-a6d3-b3f6c345991b-var-lib-calico\") pod \"tigera-operator-747864d56d-wx8hj\" (UID: \"f78e1698-7080-485d-a6d3-b3f6c345991b\") " pod="tigera-operator/tigera-operator-747864d56d-wx8hj" Aug 13 00:02:31.872877 kubelet[2838]: I0813 00:02:31.872835 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qnktz\" (UniqueName: \"kubernetes.io/projected/f78e1698-7080-485d-a6d3-b3f6c345991b-kube-api-access-qnktz\") pod \"tigera-operator-747864d56d-wx8hj\" (UID: \"f78e1698-7080-485d-a6d3-b3f6c345991b\") " pod="tigera-operator/tigera-operator-747864d56d-wx8hj" Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2891 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653934393661396264623937373365333730656636353463356465 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit: BPF prog-id=113 op=LOAD Aug 13 00:02:31.909000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2891 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653934393661396264623937373365333730656636353463356465 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit: BPF prog-id=114 op=LOAD Aug 13 00:02:31.909000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2891 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653934393661396264623937373365333730656636353463356465 Aug 13 00:02:31.909000 audit: BPF prog-id=114 op=UNLOAD Aug 13 00:02:31.909000 audit: BPF prog-id=113 op=UNLOAD Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:31.909000 audit: BPF prog-id=115 op=LOAD Aug 13 00:02:31.909000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2891 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:31.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653934393661396264623937373365333730656636353463356465 Aug 13 00:02:31.949542 env[1823]: time="2025-08-13T00:02:31.943442135Z" level=info msg="StartContainer for \"35e9496a9bdb9773e370ef654c5deb87d6f6cce4f0b530c9d4631babb0ef5aee\" returns successfully" Aug 13 00:02:32.152098 env[1823]: time="2025-08-13T00:02:32.152012723Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-wx8hj,Uid:f78e1698-7080-485d-a6d3-b3f6c345991b,Namespace:tigera-operator,Attempt:0,}" Aug 13 00:02:32.211272 env[1823]: time="2025-08-13T00:02:32.208255115Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:32.211272 env[1823]: time="2025-08-13T00:02:32.208523202Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:32.211272 env[1823]: time="2025-08-13T00:02:32.208620573Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:32.211272 env[1823]: time="2025-08-13T00:02:32.209063829Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/15b8463dd89882b75f6de5e95b2a5407d087a0dccbc6b8f27ff89bdf4a3009de pid=2977 runtime=io.containerd.runc.v2 Aug 13 00:02:32.241649 systemd[1]: Started cri-containerd-15b8463dd89882b75f6de5e95b2a5407d087a0dccbc6b8f27ff89bdf4a3009de.scope. Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.318000 audit: BPF prog-id=116 op=LOAD Aug 13 00:02:32.319000 audit[3034]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.319000 audit[3034]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcaaed8f0 a2=0 a3=1 items=0 ppid=2944 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2977 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623834363364643839383832623735663664653565393562326135 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2977 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623834363364643839383832623735663664653565393562326135 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.319000 audit: BPF prog-id=117 op=LOAD Aug 13 00:02:32.319000 audit[2995]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2977 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623834363364643839383832623735663664653565393562326135 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.320000 audit: BPF prog-id=118 op=LOAD Aug 13 00:02:32.320000 audit[2995]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2977 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623834363364643839383832623735663664653565393562326135 Aug 13 00:02:32.320000 audit: BPF prog-id=118 op=UNLOAD Aug 13 00:02:32.321000 audit: BPF prog-id=117 op=UNLOAD Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:32.321000 audit: BPF prog-id=119 op=LOAD Aug 13 00:02:32.321000 audit[2995]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2977 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623834363364643839383832623735663664653565393562326135 Aug 13 00:02:32.340000 audit[3035]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.340000 audit[3035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff47b9ac0 a2=0 a3=1 items=0 ppid=2944 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.340000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 00:02:32.358000 audit[3038]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.358000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdf854be0 a2=0 a3=1 items=0 ppid=2944 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.358000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 00:02:32.361000 audit[3039]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.361000 audit[3039]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffae380c0 a2=0 a3=1 items=0 ppid=2944 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.361000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 00:02:32.363000 audit[3040]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.363000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcdef0ec0 a2=0 a3=1 items=0 ppid=2944 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.363000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 00:02:32.387000 audit[3041]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3041 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.387000 audit[3041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb920740 a2=0 a3=1 items=0 ppid=2944 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 00:02:32.400074 env[1823]: time="2025-08-13T00:02:32.399994014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-wx8hj,Uid:f78e1698-7080-485d-a6d3-b3f6c345991b,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"15b8463dd89882b75f6de5e95b2a5407d087a0dccbc6b8f27ff89bdf4a3009de\"" Aug 13 00:02:32.405061 env[1823]: time="2025-08-13T00:02:32.404042711Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Aug 13 00:02:32.444000 audit[3047]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.444000 audit[3047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe300c7a0 a2=0 a3=1 items=0 ppid=2944 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.444000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 00:02:32.450000 audit[3049]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.450000 audit[3049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd402c0b0 a2=0 a3=1 items=0 ppid=2944 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Aug 13 00:02:32.461000 audit[3052]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.461000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff7a799c0 a2=0 a3=1 items=0 ppid=2944 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.461000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Aug 13 00:02:32.468000 audit[3053]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.468000 audit[3053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc0a0360 a2=0 a3=1 items=0 ppid=2944 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.468000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 00:02:32.476000 audit[3055]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.476000 audit[3055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc1cc0000 a2=0 a3=1 items=0 ppid=2944 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 00:02:32.479000 audit[3056]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.479000 audit[3056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc7a0640 a2=0 a3=1 items=0 ppid=2944 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.479000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 00:02:32.487000 audit[3058]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.487000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff689a660 a2=0 a3=1 items=0 ppid=2944 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.487000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 00:02:32.499000 audit[3061]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.499000 audit[3061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd6214940 a2=0 a3=1 items=0 ppid=2944 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.499000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Aug 13 00:02:32.507000 audit[3062]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.507000 audit[3062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd30a74e0 a2=0 a3=1 items=0 ppid=2944 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.507000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 00:02:32.523000 audit[3064]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.523000 audit[3064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc32ea500 a2=0 a3=1 items=0 ppid=2944 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.523000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 00:02:32.539000 audit[3065]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.539000 audit[3065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1e10420 a2=0 a3=1 items=0 ppid=2944 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 00:02:32.546000 audit[3067]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.546000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd4f668f0 a2=0 a3=1 items=0 ppid=2944 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:02:32.558000 audit[3070]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.558000 audit[3070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd519ff50 a2=0 a3=1 items=0 ppid=2944 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.558000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:02:32.568000 audit[3073]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.568000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc886f6f0 a2=0 a3=1 items=0 ppid=2944 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 00:02:32.572000 audit[3074]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.572000 audit[3074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff58be800 a2=0 a3=1 items=0 ppid=2944 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 00:02:32.580000 audit[3076]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.580000 audit[3076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffda045e50 a2=0 a3=1 items=0 ppid=2944 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.580000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:32.590000 audit[3079]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.590000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffefbbaf70 a2=0 a3=1 items=0 ppid=2944 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.590000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:32.593000 audit[3080]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.593000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffebf15fa0 a2=0 a3=1 items=0 ppid=2944 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.593000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 00:02:32.600000 audit[3082]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:32.600000 audit[3082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe0163700 a2=0 a3=1 items=0 ppid=2944 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.600000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 00:02:32.656000 audit[3088]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:32.656000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe81a2b00 a2=0 a3=1 items=0 ppid=2944 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.656000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:32.670000 audit[3088]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:32.670000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe81a2b00 a2=0 a3=1 items=0 ppid=2944 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.670000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:32.674000 audit[3093]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3093 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.674000 audit[3093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffad7e780 a2=0 a3=1 items=0 ppid=2944 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.674000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 00:02:32.682000 audit[3095]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3095 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.682000 audit[3095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcee58e10 a2=0 a3=1 items=0 ppid=2944 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.682000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Aug 13 00:02:32.694000 audit[3098]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.694000 audit[3098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffebbb1da0 a2=0 a3=1 items=0 ppid=2944 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.694000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Aug 13 00:02:32.697000 audit[3099]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3099 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.697000 audit[3099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffb049750 a2=0 a3=1 items=0 ppid=2944 pid=3099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.697000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 00:02:32.703000 audit[3101]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.703000 audit[3101]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc400a000 a2=0 a3=1 items=0 ppid=2944 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.703000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 00:02:32.706000 audit[3102]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.706000 audit[3102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6ac70c0 a2=0 a3=1 items=0 ppid=2944 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.706000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 00:02:32.713000 audit[3104]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.713000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe56bd9a0 a2=0 a3=1 items=0 ppid=2944 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.713000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Aug 13 00:02:32.727000 audit[3107]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.727000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd4e08300 a2=0 a3=1 items=0 ppid=2944 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 00:02:32.730000 audit[3108]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.730000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1e44880 a2=0 a3=1 items=0 ppid=2944 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.730000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 00:02:32.737000 audit[3110]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.737000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcb42f380 a2=0 a3=1 items=0 ppid=2944 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.737000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 00:02:32.740000 audit[3111]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3111 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.740000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5347950 a2=0 a3=1 items=0 ppid=2944 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.740000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 00:02:32.747000 audit[3113]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.747000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6a22360 a2=0 a3=1 items=0 ppid=2944 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.747000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:02:32.761000 audit[3116]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.761000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe6caa870 a2=0 a3=1 items=0 ppid=2944 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.761000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 00:02:32.771000 audit[3119]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.771000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffee2efb20 a2=0 a3=1 items=0 ppid=2944 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.771000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Aug 13 00:02:32.774000 audit[3120]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3120 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.774000 audit[3120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc4e36c00 a2=0 a3=1 items=0 ppid=2944 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.774000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 00:02:32.780000 audit[3122]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.780000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffcec35bc0 a2=0 a3=1 items=0 ppid=2944 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.780000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:32.791000 audit[3125]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.791000 audit[3125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd2ea6950 a2=0 a3=1 items=0 ppid=2944 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.791000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:32.794000 audit[3126]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.794000 audit[3126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc53f05d0 a2=0 a3=1 items=0 ppid=2944 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.794000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 00:02:32.799000 audit[3128]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.799000 audit[3128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd1b1b0c0 a2=0 a3=1 items=0 ppid=2944 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.799000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 00:02:32.802000 audit[3129]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3129 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.802000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc932ba90 a2=0 a3=1 items=0 ppid=2944 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.802000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 00:02:32.813000 audit[3131]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3131 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.813000 audit[3131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc8c9da10 a2=0 a3=1 items=0 ppid=2944 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.813000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:32.821000 audit[3134]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:32.821000 audit[3134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff75d9030 a2=0 a3=1 items=0 ppid=2944 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:32.831000 audit[3136]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 00:02:32.831000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffff4a639f0 a2=0 a3=1 items=0 ppid=2944 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.831000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:32.833000 audit[3136]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 00:02:32.833000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffff4a639f0 a2=0 a3=1 items=0 ppid=2944 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:32.833000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:33.905897 amazon-ssm-agent[1798]: 2025-08-13 00:02:33 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Aug 13 00:02:33.968344 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3876202579.mount: Deactivated successfully. Aug 13 00:02:35.170782 env[1823]: time="2025-08-13T00:02:35.170668797Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:35.176099 env[1823]: time="2025-08-13T00:02:35.176008174Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:35.180057 env[1823]: time="2025-08-13T00:02:35.179972797Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:35.184099 env[1823]: time="2025-08-13T00:02:35.184034839Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:35.185600 env[1823]: time="2025-08-13T00:02:35.185533208Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Aug 13 00:02:35.196586 env[1823]: time="2025-08-13T00:02:35.196505969Z" level=info msg="CreateContainer within sandbox \"15b8463dd89882b75f6de5e95b2a5407d087a0dccbc6b8f27ff89bdf4a3009de\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Aug 13 00:02:35.218688 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1457319920.mount: Deactivated successfully. Aug 13 00:02:35.235435 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1336063689.mount: Deactivated successfully. Aug 13 00:02:35.276261 env[1823]: time="2025-08-13T00:02:35.276184392Z" level=info msg="CreateContainer within sandbox \"15b8463dd89882b75f6de5e95b2a5407d087a0dccbc6b8f27ff89bdf4a3009de\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"ab31c32084586134e1677bb735d88e8b2c6bd913fb9acf169ed9dae21eaa8e78\"" Aug 13 00:02:35.284302 env[1823]: time="2025-08-13T00:02:35.279271793Z" level=info msg="StartContainer for \"ab31c32084586134e1677bb735d88e8b2c6bd913fb9acf169ed9dae21eaa8e78\"" Aug 13 00:02:35.284552 kubelet[2838]: I0813 00:02:35.281612 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-jl9z2" podStartSLOduration=4.281584202 podStartE2EDuration="4.281584202s" podCreationTimestamp="2025-08-13 00:02:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:32.530643046 +0000 UTC m=+5.445562406" watchObservedRunningTime="2025-08-13 00:02:35.281584202 +0000 UTC m=+8.196503598" Aug 13 00:02:35.332999 systemd[1]: Started cri-containerd-ab31c32084586134e1677bb735d88e8b2c6bd913fb9acf169ed9dae21eaa8e78.scope. Aug 13 00:02:35.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.389000 audit: BPF prog-id=120 op=LOAD Aug 13 00:02:35.391000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.391000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2977 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:35.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162333163333230383435383631333465313637376262373335643838 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2977 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:35.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162333163333230383435383631333465313637376262373335643838 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.392000 audit: BPF prog-id=121 op=LOAD Aug 13 00:02:35.392000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2977 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:35.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162333163333230383435383631333465313637376262373335643838 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.394000 audit: BPF prog-id=122 op=LOAD Aug 13 00:02:35.394000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2977 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:35.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162333163333230383435383631333465313637376262373335643838 Aug 13 00:02:35.394000 audit: BPF prog-id=122 op=UNLOAD Aug 13 00:02:35.395000 audit: BPF prog-id=121 op=UNLOAD Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:35.395000 audit: BPF prog-id=123 op=LOAD Aug 13 00:02:35.395000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2977 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:35.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162333163333230383435383631333465313637376262373335643838 Aug 13 00:02:35.441027 env[1823]: time="2025-08-13T00:02:35.438308337Z" level=info msg="StartContainer for \"ab31c32084586134e1677bb735d88e8b2c6bd913fb9acf169ed9dae21eaa8e78\" returns successfully" Aug 13 00:02:37.514709 kubelet[2838]: I0813 00:02:37.514620 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-wx8hj" podStartSLOduration=3.728961395 podStartE2EDuration="6.514577188s" podCreationTimestamp="2025-08-13 00:02:31 +0000 UTC" firstStartedPulling="2025-08-13 00:02:32.403266566 +0000 UTC m=+5.318185938" lastFinishedPulling="2025-08-13 00:02:35.188882371 +0000 UTC m=+8.103801731" observedRunningTime="2025-08-13 00:02:35.573227821 +0000 UTC m=+8.488147205" watchObservedRunningTime="2025-08-13 00:02:37.514577188 +0000 UTC m=+10.429496572" Aug 13 00:02:42.940458 sudo[2098]: pam_unix(sudo:session): session closed for user root Aug 13 00:02:42.940000 audit[2098]: USER_END pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:42.943468 kernel: kauditd_printk_skb: 357 callbacks suppressed Aug 13 00:02:42.943586 kernel: audit: type=1106 audit(1755043362.940:938): pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:42.941000 audit[2098]: CRED_DISP pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:42.967263 kernel: audit: type=1104 audit(1755043362.941:939): pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:42.967770 sshd[2095]: pam_unix(sshd:session): session closed for user core Aug 13 00:02:42.969000 audit[2095]: USER_END pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:42.973070 systemd[1]: session-7.scope: Deactivated successfully. Aug 13 00:02:42.973452 systemd[1]: session-7.scope: Consumed 13.787s CPU time. Aug 13 00:02:42.975003 systemd[1]: sshd@6-172.31.17.40:22-139.178.89.65:46010.service: Deactivated successfully. Aug 13 00:02:42.983534 systemd-logind[1812]: Session 7 logged out. Waiting for processes to exit. Aug 13 00:02:42.986296 systemd-logind[1812]: Removed session 7. Aug 13 00:02:42.970000 audit[2095]: CRED_DISP pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:43.001955 kernel: audit: type=1106 audit(1755043362.969:940): pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:43.002112 kernel: audit: type=1104 audit(1755043362.970:941): pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:42.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.40:22-139.178.89.65:46010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:43.012640 kernel: audit: type=1131 audit(1755043362.975:942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.40:22-139.178.89.65:46010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:44.792000 audit[3221]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:44.800450 kernel: audit: type=1325 audit(1755043364.792:943): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:44.792000 audit[3221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:44.792000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:44.823198 kernel: audit: type=1300 audit(1755043364.792:943): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:44.823435 kernel: audit: type=1327 audit(1755043364.792:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:44.816000 audit[3221]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:44.830819 kernel: audit: type=1325 audit(1755043364.816:944): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:44.816000 audit[3221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:44.844376 kernel: audit: type=1300 audit(1755043364.816:944): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:44.816000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:44.867000 audit[3223]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:44.867000 audit[3223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdd93fb00 a2=0 a3=1 items=0 ppid=2944 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:44.867000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:44.873000 audit[3223]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:44.873000 audit[3223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdd93fb00 a2=0 a3=1 items=0 ppid=2944 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:44.873000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:52.772000 audit[3225]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.775125 kernel: kauditd_printk_skb: 7 callbacks suppressed Aug 13 00:02:52.775273 kernel: audit: type=1325 audit(1755043372.772:947): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.772000 audit[3225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:52.795820 kernel: audit: type=1300 audit(1755043372.772:947): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:52.772000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:52.804257 kernel: audit: type=1327 audit(1755043372.772:947): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:52.813000 audit[3225]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.813000 audit[3225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:52.833551 kernel: audit: type=1325 audit(1755043372.813:948): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.833720 kernel: audit: type=1300 audit(1755043372.813:948): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:52.813000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:52.841289 kernel: audit: type=1327 audit(1755043372.813:948): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:52.876000 audit[3227]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.876000 audit[3227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc66f9b80 a2=0 a3=1 items=0 ppid=2944 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:52.896044 kernel: audit: type=1325 audit(1755043372.876:949): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.896181 kernel: audit: type=1300 audit(1755043372.876:949): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc66f9b80 a2=0 a3=1 items=0 ppid=2944 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:52.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:52.902463 kernel: audit: type=1327 audit(1755043372.876:949): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:52.908000 audit[3227]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.915453 kernel: audit: type=1325 audit(1755043372.908:950): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:52.908000 audit[3227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc66f9b80 a2=0 a3=1 items=0 ppid=2944 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:52.908000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:53.089813 systemd[1]: Created slice kubepods-besteffort-pod81e18404_a8f3_40e2_983a_741256022a61.slice. Aug 13 00:02:53.130062 kubelet[2838]: I0813 00:02:53.129984 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tgwrg\" (UniqueName: \"kubernetes.io/projected/81e18404-a8f3-40e2-983a-741256022a61-kube-api-access-tgwrg\") pod \"calico-typha-589c69b997-ch4wt\" (UID: \"81e18404-a8f3-40e2-983a-741256022a61\") " pod="calico-system/calico-typha-589c69b997-ch4wt" Aug 13 00:02:53.130985 kubelet[2838]: I0813 00:02:53.130938 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/81e18404-a8f3-40e2-983a-741256022a61-typha-certs\") pod \"calico-typha-589c69b997-ch4wt\" (UID: \"81e18404-a8f3-40e2-983a-741256022a61\") " pod="calico-system/calico-typha-589c69b997-ch4wt" Aug 13 00:02:53.131225 kubelet[2838]: I0813 00:02:53.131175 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/81e18404-a8f3-40e2-983a-741256022a61-tigera-ca-bundle\") pod \"calico-typha-589c69b997-ch4wt\" (UID: \"81e18404-a8f3-40e2-983a-741256022a61\") " pod="calico-system/calico-typha-589c69b997-ch4wt" Aug 13 00:02:53.382738 systemd[1]: Created slice kubepods-besteffort-pod527c2ae2_89e8_454c_ad1e_83c923aa0c85.slice. Aug 13 00:02:53.400592 env[1823]: time="2025-08-13T00:02:53.399811040Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-589c69b997-ch4wt,Uid:81e18404-a8f3-40e2-983a-741256022a61,Namespace:calico-system,Attempt:0,}" Aug 13 00:02:53.433609 kubelet[2838]: I0813 00:02:53.433350 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-cni-bin-dir\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.433609 kubelet[2838]: I0813 00:02:53.433571 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-var-lib-calico\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.433898 kubelet[2838]: I0813 00:02:53.433639 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-cni-net-dir\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.433898 kubelet[2838]: I0813 00:02:53.433702 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-policysync\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.433898 kubelet[2838]: I0813 00:02:53.433765 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/527c2ae2-89e8-454c-ad1e-83c923aa0c85-tigera-ca-bundle\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.433898 kubelet[2838]: I0813 00:02:53.433808 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-var-run-calico\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.433898 kubelet[2838]: I0813 00:02:53.433851 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-xtables-lock\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.434179 kubelet[2838]: I0813 00:02:53.433893 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-lib-modules\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.434179 kubelet[2838]: I0813 00:02:53.433937 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-cni-log-dir\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.434179 kubelet[2838]: I0813 00:02:53.433977 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/527c2ae2-89e8-454c-ad1e-83c923aa0c85-flexvol-driver-host\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.434179 kubelet[2838]: I0813 00:02:53.434024 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/527c2ae2-89e8-454c-ad1e-83c923aa0c85-node-certs\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.434179 kubelet[2838]: I0813 00:02:53.434059 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jmv5v\" (UniqueName: \"kubernetes.io/projected/527c2ae2-89e8-454c-ad1e-83c923aa0c85-kube-api-access-jmv5v\") pod \"calico-node-dclmd\" (UID: \"527c2ae2-89e8-454c-ad1e-83c923aa0c85\") " pod="calico-system/calico-node-dclmd" Aug 13 00:02:53.459066 env[1823]: time="2025-08-13T00:02:53.458913139Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:53.459066 env[1823]: time="2025-08-13T00:02:53.458994440Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:53.459523 env[1823]: time="2025-08-13T00:02:53.459425751Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:53.460008 env[1823]: time="2025-08-13T00:02:53.459901966Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ade9abeb56e04c426b00092e636d3587b00cfa31b8a4e34a9ff31cab4c65bf72 pid=3240 runtime=io.containerd.runc.v2 Aug 13 00:02:53.510974 systemd[1]: Started cri-containerd-ade9abeb56e04c426b00092e636d3587b00cfa31b8a4e34a9ff31cab4c65bf72.scope. Aug 13 00:02:53.575941 kubelet[2838]: E0813 00:02:53.575871 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.575941 kubelet[2838]: W0813 00:02:53.575923 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.576165 kubelet[2838]: E0813 00:02:53.575977 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.581064 kubelet[2838]: E0813 00:02:53.580942 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.581064 kubelet[2838]: W0813 00:02:53.580997 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.581064 kubelet[2838]: E0813 00:02:53.581042 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.581999 kubelet[2838]: E0813 00:02:53.581941 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.581999 kubelet[2838]: W0813 00:02:53.581986 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.582311 kubelet[2838]: E0813 00:02:53.582024 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.582931 kubelet[2838]: E0813 00:02:53.582591 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.582931 kubelet[2838]: W0813 00:02:53.582634 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.582931 kubelet[2838]: E0813 00:02:53.582668 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.584554 kubelet[2838]: E0813 00:02:53.583604 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.584554 kubelet[2838]: W0813 00:02:53.583649 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.584554 kubelet[2838]: E0813 00:02:53.583691 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.584554 kubelet[2838]: E0813 00:02:53.584203 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.584554 kubelet[2838]: W0813 00:02:53.584231 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.584554 kubelet[2838]: E0813 00:02:53.584262 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.587442 kubelet[2838]: E0813 00:02:53.585523 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.587442 kubelet[2838]: W0813 00:02:53.585566 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.587442 kubelet[2838]: E0813 00:02:53.585603 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.587442 kubelet[2838]: E0813 00:02:53.586135 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.587442 kubelet[2838]: W0813 00:02:53.586165 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.587442 kubelet[2838]: E0813 00:02:53.586199 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.587442 kubelet[2838]: E0813 00:02:53.586910 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.587442 kubelet[2838]: W0813 00:02:53.586938 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.587442 kubelet[2838]: E0813 00:02:53.586971 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.588115 kubelet[2838]: E0813 00:02:53.587477 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.588115 kubelet[2838]: W0813 00:02:53.587504 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.588115 kubelet[2838]: E0813 00:02:53.587532 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.588115 kubelet[2838]: E0813 00:02:53.587958 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.588115 kubelet[2838]: W0813 00:02:53.587986 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.588115 kubelet[2838]: E0813 00:02:53.588016 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.588537 kubelet[2838]: E0813 00:02:53.588508 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.588537 kubelet[2838]: W0813 00:02:53.588531 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.588663 kubelet[2838]: E0813 00:02:53.588558 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.589301 kubelet[2838]: E0813 00:02:53.589249 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.589301 kubelet[2838]: W0813 00:02:53.589291 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.589651 kubelet[2838]: E0813 00:02:53.589326 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.590590 kubelet[2838]: E0813 00:02:53.590524 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.590590 kubelet[2838]: W0813 00:02:53.590581 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.590842 kubelet[2838]: E0813 00:02:53.590621 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.591216 kubelet[2838]: E0813 00:02:53.591160 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.591216 kubelet[2838]: W0813 00:02:53.591204 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.591486 kubelet[2838]: E0813 00:02:53.591261 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.594002 kubelet[2838]: E0813 00:02:53.593919 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.594002 kubelet[2838]: W0813 00:02:53.593972 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.594002 kubelet[2838]: E0813 00:02:53.594011 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.595598 kubelet[2838]: E0813 00:02:53.595541 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.595598 kubelet[2838]: W0813 00:02:53.595585 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.595866 kubelet[2838]: E0813 00:02:53.595624 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.596248 kubelet[2838]: E0813 00:02:53.596192 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.596248 kubelet[2838]: W0813 00:02:53.596231 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.596508 kubelet[2838]: E0813 00:02:53.596263 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.609677 kubelet[2838]: E0813 00:02:53.609621 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.610042 kubelet[2838]: W0813 00:02:53.609987 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.610543 kubelet[2838]: E0813 00:02:53.610493 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.636956 kubelet[2838]: E0813 00:02:53.636788 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.687000 audit: BPF prog-id=124 op=LOAD Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3240 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653961626562353665303463343236623030303932653633366433 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3240 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653961626562353665303463343236623030303932653633366433 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit: BPF prog-id=125 op=LOAD Aug 13 00:02:53.688000 audit[3249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3240 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653961626562353665303463343236623030303932653633366433 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.688000 audit: BPF prog-id=126 op=LOAD Aug 13 00:02:53.688000 audit[3249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3240 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653961626562353665303463343236623030303932653633366433 Aug 13 00:02:53.689000 audit: BPF prog-id=126 op=UNLOAD Aug 13 00:02:53.689000 audit: BPF prog-id=125 op=UNLOAD Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { perfmon } for pid=3249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit[3249]: AVC avc: denied { bpf } for pid=3249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:53.689000 audit: BPF prog-id=127 op=LOAD Aug 13 00:02:53.689000 audit[3249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3240 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653961626562353665303463343236623030303932653633366433 Aug 13 00:02:53.694332 env[1823]: time="2025-08-13T00:02:53.692749415Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dclmd,Uid:527c2ae2-89e8-454c-ad1e-83c923aa0c85,Namespace:calico-system,Attempt:0,}" Aug 13 00:02:53.727408 kubelet[2838]: E0813 00:02:53.727019 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.727408 kubelet[2838]: W0813 00:02:53.727063 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.727408 kubelet[2838]: E0813 00:02:53.727129 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.728164 kubelet[2838]: E0813 00:02:53.728111 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.728302 kubelet[2838]: W0813 00:02:53.728155 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.728302 kubelet[2838]: E0813 00:02:53.728290 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.734059 kubelet[2838]: E0813 00:02:53.730022 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.734059 kubelet[2838]: W0813 00:02:53.730089 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.734059 kubelet[2838]: E0813 00:02:53.730130 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.734837 env[1823]: time="2025-08-13T00:02:53.733927322Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:53.734837 env[1823]: time="2025-08-13T00:02:53.734070580Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:53.734837 env[1823]: time="2025-08-13T00:02:53.734101348Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:53.734837 env[1823]: time="2025-08-13T00:02:53.734472670Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044 pid=3292 runtime=io.containerd.runc.v2 Aug 13 00:02:53.735160 kubelet[2838]: E0813 00:02:53.734864 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.735160 kubelet[2838]: W0813 00:02:53.734894 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.735160 kubelet[2838]: E0813 00:02:53.734933 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.737156 kubelet[2838]: E0813 00:02:53.736836 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.737156 kubelet[2838]: W0813 00:02:53.736887 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.737156 kubelet[2838]: E0813 00:02:53.736924 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.738780 kubelet[2838]: E0813 00:02:53.737851 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.738780 kubelet[2838]: W0813 00:02:53.737892 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.738780 kubelet[2838]: E0813 00:02:53.737929 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.738780 kubelet[2838]: E0813 00:02:53.738444 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.738780 kubelet[2838]: W0813 00:02:53.738476 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.738780 kubelet[2838]: E0813 00:02:53.738510 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.739265 kubelet[2838]: E0813 00:02:53.739124 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.739265 kubelet[2838]: W0813 00:02:53.739156 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.739265 kubelet[2838]: E0813 00:02:53.739194 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.742285 kubelet[2838]: E0813 00:02:53.740345 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.742285 kubelet[2838]: W0813 00:02:53.740461 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.742285 kubelet[2838]: E0813 00:02:53.740500 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.742285 kubelet[2838]: E0813 00:02:53.741089 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.742285 kubelet[2838]: W0813 00:02:53.741121 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.742285 kubelet[2838]: E0813 00:02:53.741151 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.742285 kubelet[2838]: E0813 00:02:53.741929 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.742285 kubelet[2838]: W0813 00:02:53.741966 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.742285 kubelet[2838]: E0813 00:02:53.742001 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.744698 kubelet[2838]: E0813 00:02:53.744630 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.744698 kubelet[2838]: W0813 00:02:53.744677 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.744956 kubelet[2838]: E0813 00:02:53.744717 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.745602 kubelet[2838]: E0813 00:02:53.745343 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.745602 kubelet[2838]: W0813 00:02:53.745580 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.745973 kubelet[2838]: E0813 00:02:53.745625 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.749094 kubelet[2838]: E0813 00:02:53.749038 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.749094 kubelet[2838]: W0813 00:02:53.749083 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.749094 kubelet[2838]: E0813 00:02:53.749126 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.749854 kubelet[2838]: E0813 00:02:53.749784 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.749854 kubelet[2838]: W0813 00:02:53.749836 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.750088 kubelet[2838]: E0813 00:02:53.749869 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.752164 kubelet[2838]: E0813 00:02:53.752106 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.752164 kubelet[2838]: W0813 00:02:53.752148 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.752428 kubelet[2838]: E0813 00:02:53.752185 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.754593 kubelet[2838]: E0813 00:02:53.754506 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.754593 kubelet[2838]: W0813 00:02:53.754551 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.754884 kubelet[2838]: E0813 00:02:53.754609 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.756345 kubelet[2838]: E0813 00:02:53.756273 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.756345 kubelet[2838]: W0813 00:02:53.756318 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.756831 kubelet[2838]: E0813 00:02:53.756378 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.758908 kubelet[2838]: E0813 00:02:53.758821 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.758908 kubelet[2838]: W0813 00:02:53.758875 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.758908 kubelet[2838]: E0813 00:02:53.758919 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.759584 kubelet[2838]: E0813 00:02:53.759521 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.759584 kubelet[2838]: W0813 00:02:53.759562 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.759887 kubelet[2838]: E0813 00:02:53.759615 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.762920 kubelet[2838]: E0813 00:02:53.762842 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.762920 kubelet[2838]: W0813 00:02:53.762892 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.762920 kubelet[2838]: E0813 00:02:53.762930 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.763264 kubelet[2838]: I0813 00:02:53.762992 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/2ad37774-8f99-4834-9a29-4a2eececd14c-kubelet-dir\") pod \"csi-node-driver-czrjx\" (UID: \"2ad37774-8f99-4834-9a29-4a2eececd14c\") " pod="calico-system/csi-node-driver-czrjx" Aug 13 00:02:53.763727 kubelet[2838]: E0813 00:02:53.763655 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.763727 kubelet[2838]: W0813 00:02:53.763702 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.763961 kubelet[2838]: E0813 00:02:53.763739 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.763961 kubelet[2838]: I0813 00:02:53.763803 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/2ad37774-8f99-4834-9a29-4a2eececd14c-registration-dir\") pod \"csi-node-driver-czrjx\" (UID: \"2ad37774-8f99-4834-9a29-4a2eececd14c\") " pod="calico-system/csi-node-driver-czrjx" Aug 13 00:02:53.765784 kubelet[2838]: E0813 00:02:53.765691 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.765784 kubelet[2838]: W0813 00:02:53.765742 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.765784 kubelet[2838]: E0813 00:02:53.765784 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.766142 kubelet[2838]: I0813 00:02:53.765848 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/2ad37774-8f99-4834-9a29-4a2eececd14c-varrun\") pod \"csi-node-driver-czrjx\" (UID: \"2ad37774-8f99-4834-9a29-4a2eececd14c\") " pod="calico-system/csi-node-driver-czrjx" Aug 13 00:02:53.766545 kubelet[2838]: E0813 00:02:53.766466 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.766545 kubelet[2838]: W0813 00:02:53.766515 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.766816 kubelet[2838]: E0813 00:02:53.766550 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.769849 kubelet[2838]: I0813 00:02:53.769776 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-brdtq\" (UniqueName: \"kubernetes.io/projected/2ad37774-8f99-4834-9a29-4a2eececd14c-kube-api-access-brdtq\") pod \"csi-node-driver-czrjx\" (UID: \"2ad37774-8f99-4834-9a29-4a2eececd14c\") " pod="calico-system/csi-node-driver-czrjx" Aug 13 00:02:53.770052 kubelet[2838]: E0813 00:02:53.770019 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.770052 kubelet[2838]: W0813 00:02:53.770043 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.770242 kubelet[2838]: E0813 00:02:53.770075 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.775692 kubelet[2838]: E0813 00:02:53.775616 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.775692 kubelet[2838]: W0813 00:02:53.775666 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.775981 kubelet[2838]: E0813 00:02:53.775706 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.776563 kubelet[2838]: E0813 00:02:53.776504 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.776563 kubelet[2838]: W0813 00:02:53.776545 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.776823 kubelet[2838]: E0813 00:02:53.776580 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.777611 kubelet[2838]: E0813 00:02:53.777555 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.777611 kubelet[2838]: W0813 00:02:53.777594 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.777826 kubelet[2838]: E0813 00:02:53.777627 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.778114 kubelet[2838]: I0813 00:02:53.777909 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/2ad37774-8f99-4834-9a29-4a2eececd14c-socket-dir\") pod \"csi-node-driver-czrjx\" (UID: \"2ad37774-8f99-4834-9a29-4a2eececd14c\") " pod="calico-system/csi-node-driver-czrjx" Aug 13 00:02:53.781300 kubelet[2838]: E0813 00:02:53.781222 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.781300 kubelet[2838]: W0813 00:02:53.781272 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.781575 kubelet[2838]: E0813 00:02:53.781310 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.782057 kubelet[2838]: E0813 00:02:53.781994 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.782057 kubelet[2838]: W0813 00:02:53.782034 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.782279 kubelet[2838]: E0813 00:02:53.782069 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.782931 kubelet[2838]: E0813 00:02:53.782764 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.782931 kubelet[2838]: W0813 00:02:53.782811 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.782931 kubelet[2838]: E0813 00:02:53.782849 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.784972 kubelet[2838]: E0813 00:02:53.784279 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.784972 kubelet[2838]: W0813 00:02:53.784333 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.784972 kubelet[2838]: E0813 00:02:53.784703 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.786305 kubelet[2838]: E0813 00:02:53.786231 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.786305 kubelet[2838]: W0813 00:02:53.786283 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.786587 kubelet[2838]: E0813 00:02:53.786318 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.789420 kubelet[2838]: E0813 00:02:53.789304 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.789420 kubelet[2838]: W0813 00:02:53.789401 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.789657 kubelet[2838]: E0813 00:02:53.789441 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.791472 kubelet[2838]: E0813 00:02:53.791388 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.791472 kubelet[2838]: W0813 00:02:53.791445 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.791736 kubelet[2838]: E0813 00:02:53.791487 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.803628 systemd[1]: Started cri-containerd-2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044.scope. Aug 13 00:02:53.884055 kubelet[2838]: E0813 00:02:53.883558 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.884055 kubelet[2838]: W0813 00:02:53.883598 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.884055 kubelet[2838]: E0813 00:02:53.883633 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.884784 kubelet[2838]: E0813 00:02:53.884616 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.884784 kubelet[2838]: W0813 00:02:53.884651 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.884784 kubelet[2838]: E0813 00:02:53.884684 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.885390 kubelet[2838]: E0813 00:02:53.885318 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.885390 kubelet[2838]: W0813 00:02:53.885387 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.885643 kubelet[2838]: E0813 00:02:53.885424 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.886251 kubelet[2838]: E0813 00:02:53.885961 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.886251 kubelet[2838]: W0813 00:02:53.886001 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.886251 kubelet[2838]: E0813 00:02:53.886036 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.894421 kubelet[2838]: E0813 00:02:53.886944 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.894421 kubelet[2838]: W0813 00:02:53.886992 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.894421 kubelet[2838]: E0813 00:02:53.887029 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.895281 kubelet[2838]: E0813 00:02:53.895223 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.895281 kubelet[2838]: W0813 00:02:53.895275 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.895540 kubelet[2838]: E0813 00:02:53.895320 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.896411 kubelet[2838]: E0813 00:02:53.895979 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.896411 kubelet[2838]: W0813 00:02:53.896027 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.896411 kubelet[2838]: E0813 00:02:53.896067 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.897696 kubelet[2838]: E0813 00:02:53.897634 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.897696 kubelet[2838]: W0813 00:02:53.897685 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.897921 kubelet[2838]: E0813 00:02:53.897729 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.898851 kubelet[2838]: E0813 00:02:53.898449 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.898851 kubelet[2838]: W0813 00:02:53.898491 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.898851 kubelet[2838]: E0813 00:02:53.898526 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.899738 kubelet[2838]: E0813 00:02:53.899661 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.899738 kubelet[2838]: W0813 00:02:53.899709 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.899990 kubelet[2838]: E0813 00:02:53.899753 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.900604 kubelet[2838]: E0813 00:02:53.900271 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.900604 kubelet[2838]: W0813 00:02:53.900311 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.900604 kubelet[2838]: E0813 00:02:53.900346 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.901616 kubelet[2838]: E0813 00:02:53.901558 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.901616 kubelet[2838]: W0813 00:02:53.901602 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.901840 kubelet[2838]: E0813 00:02:53.901644 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.902492 kubelet[2838]: E0813 00:02:53.902321 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.902492 kubelet[2838]: W0813 00:02:53.902431 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.902802 kubelet[2838]: E0813 00:02:53.902508 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.903690 kubelet[2838]: E0813 00:02:53.903620 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.903690 kubelet[2838]: W0813 00:02:53.903670 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.903929 kubelet[2838]: E0813 00:02:53.903712 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.904673 kubelet[2838]: E0813 00:02:53.904182 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.904673 kubelet[2838]: W0813 00:02:53.904220 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.904673 kubelet[2838]: E0813 00:02:53.904251 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.905652 kubelet[2838]: E0813 00:02:53.905584 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.905652 kubelet[2838]: W0813 00:02:53.905635 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.905894 kubelet[2838]: E0813 00:02:53.905676 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.906176 kubelet[2838]: E0813 00:02:53.906126 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.906176 kubelet[2838]: W0813 00:02:53.906163 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.906430 kubelet[2838]: E0813 00:02:53.906191 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.907925 kubelet[2838]: E0813 00:02:53.907869 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.908091 kubelet[2838]: W0813 00:02:53.907913 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.908091 kubelet[2838]: E0813 00:02:53.907977 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.909800 kubelet[2838]: E0813 00:02:53.909655 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.909800 kubelet[2838]: W0813 00:02:53.909726 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.909800 kubelet[2838]: E0813 00:02:53.909764 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.911772 kubelet[2838]: E0813 00:02:53.911658 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.911772 kubelet[2838]: W0813 00:02:53.911735 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.912091 kubelet[2838]: E0813 00:02:53.911776 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.915675 kubelet[2838]: E0813 00:02:53.913625 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.915675 kubelet[2838]: W0813 00:02:53.913674 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.915675 kubelet[2838]: E0813 00:02:53.913714 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.916588 kubelet[2838]: E0813 00:02:53.916535 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.916588 kubelet[2838]: W0813 00:02:53.916579 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.916804 kubelet[2838]: E0813 00:02:53.916615 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.917216 kubelet[2838]: E0813 00:02:53.917172 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.917216 kubelet[2838]: W0813 00:02:53.917210 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.917593 kubelet[2838]: E0813 00:02:53.917241 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.918698 kubelet[2838]: E0813 00:02:53.918644 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.918698 kubelet[2838]: W0813 00:02:53.918687 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.918927 kubelet[2838]: E0813 00:02:53.918725 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.919288 kubelet[2838]: E0813 00:02:53.919248 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.919288 kubelet[2838]: W0813 00:02:53.919281 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.919517 kubelet[2838]: E0813 00:02:53.919310 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:53.960688 kubelet[2838]: E0813 00:02:53.960602 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:53.960688 kubelet[2838]: W0813 00:02:53.960663 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:53.960994 kubelet[2838]: E0813 00:02:53.960705 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:54.192000 audit[3377]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=3377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:54.192000 audit[3377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff65dfbe0 a2=0 a3=1 items=0 ppid=2944 pid=3377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:54.192000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:54.201000 audit[3377]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:54.201000 audit[3377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff65dfbe0 a2=0 a3=1 items=0 ppid=2944 pid=3377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:54.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:54.254930 systemd[1]: run-containerd-runc-k8s.io-ade9abeb56e04c426b00092e636d3587b00cfa31b8a4e34a9ff31cab4c65bf72-runc.ZziVbh.mount: Deactivated successfully. Aug 13 00:02:54.305804 env[1823]: time="2025-08-13T00:02:54.305727953Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-589c69b997-ch4wt,Uid:81e18404-a8f3-40e2-983a-741256022a61,Namespace:calico-system,Attempt:0,} returns sandbox id \"ade9abeb56e04c426b00092e636d3587b00cfa31b8a4e34a9ff31cab4c65bf72\"" Aug 13 00:02:54.309245 env[1823]: time="2025-08-13T00:02:54.309107456Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.388000 audit: BPF prog-id=128 op=LOAD Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3292 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:54.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376261326432303062636566366661303635373031613333316338 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:54.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376261326432303062636566366661303635373031613333316338 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit: BPF prog-id=129 op=LOAD Aug 13 00:02:54.389000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3292 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:54.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376261326432303062636566366661303635373031613333316338 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit: BPF prog-id=130 op=LOAD Aug 13 00:02:54.389000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3292 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:54.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376261326432303062636566366661303635373031613333316338 Aug 13 00:02:54.389000 audit: BPF prog-id=130 op=UNLOAD Aug 13 00:02:54.389000 audit: BPF prog-id=129 op=UNLOAD Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:54.389000 audit: BPF prog-id=131 op=LOAD Aug 13 00:02:54.389000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3292 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:54.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376261326432303062636566366661303635373031613333316338 Aug 13 00:02:54.432970 env[1823]: time="2025-08-13T00:02:54.432897188Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dclmd,Uid:527c2ae2-89e8-454c-ad1e-83c923aa0c85,Namespace:calico-system,Attempt:0,} returns sandbox id \"2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044\"" Aug 13 00:02:55.226000 audit[3399]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:55.226000 audit[3399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe4e031e0 a2=0 a3=1 items=0 ppid=2944 pid=3399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:55.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:55.233000 audit[3399]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:55.233000 audit[3399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe4e031e0 a2=0 a3=1 items=0 ppid=2944 pid=3399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:55.233000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:55.446428 kubelet[2838]: E0813 00:02:55.444598 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:02:55.726171 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2321140712.mount: Deactivated successfully. Aug 13 00:02:57.367123 env[1823]: time="2025-08-13T00:02:57.367034589Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:57.370266 env[1823]: time="2025-08-13T00:02:57.370189002Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:57.374382 env[1823]: time="2025-08-13T00:02:57.374293996Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:57.378219 env[1823]: time="2025-08-13T00:02:57.378151355Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:57.381892 env[1823]: time="2025-08-13T00:02:57.381827499Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Aug 13 00:02:57.385119 env[1823]: time="2025-08-13T00:02:57.385039416Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Aug 13 00:02:57.437195 env[1823]: time="2025-08-13T00:02:57.437109284Z" level=info msg="CreateContainer within sandbox \"ade9abeb56e04c426b00092e636d3587b00cfa31b8a4e34a9ff31cab4c65bf72\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Aug 13 00:02:57.444692 kubelet[2838]: E0813 00:02:57.444605 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:02:57.472238 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount533372168.mount: Deactivated successfully. Aug 13 00:02:57.484663 env[1823]: time="2025-08-13T00:02:57.484585834Z" level=info msg="CreateContainer within sandbox \"ade9abeb56e04c426b00092e636d3587b00cfa31b8a4e34a9ff31cab4c65bf72\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"fc1a1ae869e24b5d8f2a955e97ef6991b7b5744e5fb773b245741617adf85f0f\"" Aug 13 00:02:57.485902 env[1823]: time="2025-08-13T00:02:57.485837260Z" level=info msg="StartContainer for \"fc1a1ae869e24b5d8f2a955e97ef6991b7b5744e5fb773b245741617adf85f0f\"" Aug 13 00:02:57.561678 systemd[1]: Started cri-containerd-fc1a1ae869e24b5d8f2a955e97ef6991b7b5744e5fb773b245741617adf85f0f.scope. Aug 13 00:02:57.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.640000 audit: BPF prog-id=132 op=LOAD Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3240 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:57.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663316131616538363965323462356438663261393535653937656636 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3240 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:57.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663316131616538363965323462356438663261393535653937656636 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit: BPF prog-id=133 op=LOAD Aug 13 00:02:57.643000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3240 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:57.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663316131616538363965323462356438663261393535653937656636 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.643000 audit: BPF prog-id=134 op=LOAD Aug 13 00:02:57.643000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3240 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:57.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663316131616538363965323462356438663261393535653937656636 Aug 13 00:02:57.644000 audit: BPF prog-id=134 op=UNLOAD Aug 13 00:02:57.644000 audit: BPF prog-id=133 op=UNLOAD Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:57.644000 audit: BPF prog-id=135 op=LOAD Aug 13 00:02:57.644000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3240 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:57.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663316131616538363965323462356438663261393535653937656636 Aug 13 00:02:57.714823 env[1823]: time="2025-08-13T00:02:57.714674929Z" level=info msg="StartContainer for \"fc1a1ae869e24b5d8f2a955e97ef6991b7b5744e5fb773b245741617adf85f0f\" returns successfully" Aug 13 00:02:58.694694 kubelet[2838]: E0813 00:02:58.694637 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.694694 kubelet[2838]: W0813 00:02:58.694684 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.695408 kubelet[2838]: E0813 00:02:58.694720 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.695867 kubelet[2838]: E0813 00:02:58.695825 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.695990 kubelet[2838]: W0813 00:02:58.695860 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.695990 kubelet[2838]: E0813 00:02:58.695938 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.696342 kubelet[2838]: E0813 00:02:58.696303 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.696342 kubelet[2838]: W0813 00:02:58.696337 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.696541 kubelet[2838]: E0813 00:02:58.696406 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.696883 kubelet[2838]: E0813 00:02:58.696835 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.696883 kubelet[2838]: W0813 00:02:58.696866 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.697027 kubelet[2838]: E0813 00:02:58.696894 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.697274 kubelet[2838]: E0813 00:02:58.697235 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.697274 kubelet[2838]: W0813 00:02:58.697268 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.697492 kubelet[2838]: E0813 00:02:58.697293 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.697877 kubelet[2838]: E0813 00:02:58.697839 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.697981 kubelet[2838]: W0813 00:02:58.697907 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.697981 kubelet[2838]: E0813 00:02:58.697935 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.698302 kubelet[2838]: E0813 00:02:58.698258 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.698302 kubelet[2838]: W0813 00:02:58.698289 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.698505 kubelet[2838]: E0813 00:02:58.698314 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.698881 kubelet[2838]: E0813 00:02:58.698828 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.698996 kubelet[2838]: W0813 00:02:58.698979 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.699066 kubelet[2838]: E0813 00:02:58.699010 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.699588 kubelet[2838]: E0813 00:02:58.699548 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.699588 kubelet[2838]: W0813 00:02:58.699581 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.699793 kubelet[2838]: E0813 00:02:58.699610 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.699985 kubelet[2838]: E0813 00:02:58.699949 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.699985 kubelet[2838]: W0813 00:02:58.699980 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.700147 kubelet[2838]: E0813 00:02:58.700005 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.701254 kubelet[2838]: E0813 00:02:58.701196 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.701254 kubelet[2838]: W0813 00:02:58.701243 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.701596 kubelet[2838]: E0813 00:02:58.701277 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.701775 kubelet[2838]: E0813 00:02:58.701732 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.701850 kubelet[2838]: W0813 00:02:58.701771 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.701850 kubelet[2838]: E0813 00:02:58.701799 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.702338 kubelet[2838]: E0813 00:02:58.702285 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.702338 kubelet[2838]: W0813 00:02:58.702327 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.702599 kubelet[2838]: E0813 00:02:58.702408 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.702837 kubelet[2838]: E0813 00:02:58.702798 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.702837 kubelet[2838]: W0813 00:02:58.702831 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.702984 kubelet[2838]: E0813 00:02:58.702857 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.703593 kubelet[2838]: E0813 00:02:58.703534 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.703593 kubelet[2838]: W0813 00:02:58.703571 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.703812 kubelet[2838]: E0813 00:02:58.703600 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.736036 env[1823]: time="2025-08-13T00:02:58.735976203Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:58.738033 env[1823]: time="2025-08-13T00:02:58.737982979Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:58.740797 env[1823]: time="2025-08-13T00:02:58.740602436Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:58.747885 env[1823]: time="2025-08-13T00:02:58.747822553Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:58.749120 env[1823]: time="2025-08-13T00:02:58.749041266Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Aug 13 00:02:58.750141 kubelet[2838]: E0813 00:02:58.750096 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.750141 kubelet[2838]: W0813 00:02:58.750136 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.750338 kubelet[2838]: E0813 00:02:58.750168 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.750773 kubelet[2838]: E0813 00:02:58.750730 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.750773 kubelet[2838]: W0813 00:02:58.750769 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.750962 kubelet[2838]: E0813 00:02:58.750800 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.751327 kubelet[2838]: E0813 00:02:58.751293 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.751327 kubelet[2838]: W0813 00:02:58.751323 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.751561 kubelet[2838]: E0813 00:02:58.751350 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.751999 kubelet[2838]: E0813 00:02:58.751965 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.752118 kubelet[2838]: W0813 00:02:58.751998 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.752118 kubelet[2838]: E0813 00:02:58.752029 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.753992 kubelet[2838]: E0813 00:02:58.753525 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.753992 kubelet[2838]: W0813 00:02:58.753562 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.753992 kubelet[2838]: E0813 00:02:58.753596 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.754737 kubelet[2838]: E0813 00:02:58.754550 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.754737 kubelet[2838]: W0813 00:02:58.754599 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.754737 kubelet[2838]: E0813 00:02:58.754632 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.756631 kubelet[2838]: E0813 00:02:58.756595 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.756839 kubelet[2838]: W0813 00:02:58.756809 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.757004 kubelet[2838]: E0813 00:02:58.756978 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.758697 kubelet[2838]: E0813 00:02:58.758636 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.759015 kubelet[2838]: W0813 00:02:58.758981 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.759354 kubelet[2838]: E0813 00:02:58.759323 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.760037 kubelet[2838]: E0813 00:02:58.760006 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.760200 kubelet[2838]: W0813 00:02:58.760174 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.760530 kubelet[2838]: E0813 00:02:58.760501 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.761067 kubelet[2838]: E0813 00:02:58.761041 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.761201 kubelet[2838]: W0813 00:02:58.761176 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.762068 kubelet[2838]: E0813 00:02:58.762033 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.762218 env[1823]: time="2025-08-13T00:02:58.762160750Z" level=info msg="CreateContainer within sandbox \"2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Aug 13 00:02:58.764670 kubelet[2838]: E0813 00:02:58.764621 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.764670 kubelet[2838]: W0813 00:02:58.764656 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.764900 kubelet[2838]: E0813 00:02:58.764691 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.766647 kubelet[2838]: E0813 00:02:58.766600 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.766647 kubelet[2838]: W0813 00:02:58.766641 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.766820 kubelet[2838]: E0813 00:02:58.766672 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.768466 kubelet[2838]: E0813 00:02:58.768377 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.768466 kubelet[2838]: W0813 00:02:58.768415 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.768669 kubelet[2838]: E0813 00:02:58.768447 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.769053 kubelet[2838]: E0813 00:02:58.769014 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.769053 kubelet[2838]: W0813 00:02:58.769046 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.769197 kubelet[2838]: E0813 00:02:58.769073 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.770015 kubelet[2838]: E0813 00:02:58.769897 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.770015 kubelet[2838]: W0813 00:02:58.770006 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.770194 kubelet[2838]: E0813 00:02:58.770037 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.770651 kubelet[2838]: E0813 00:02:58.770611 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.770651 kubelet[2838]: W0813 00:02:58.770644 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.770804 kubelet[2838]: E0813 00:02:58.770673 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.771871 kubelet[2838]: E0813 00:02:58.771828 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.771871 kubelet[2838]: W0813 00:02:58.771866 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.772259 kubelet[2838]: E0813 00:02:58.771909 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.772688 kubelet[2838]: E0813 00:02:58.772649 2838 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:02:58.772783 kubelet[2838]: W0813 00:02:58.772686 2838 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:02:58.772783 kubelet[2838]: E0813 00:02:58.772716 2838 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:02:58.788097 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount592286837.mount: Deactivated successfully. Aug 13 00:02:58.794121 env[1823]: time="2025-08-13T00:02:58.794056260Z" level=info msg="CreateContainer within sandbox \"2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b\"" Aug 13 00:02:58.797222 env[1823]: time="2025-08-13T00:02:58.797027165Z" level=info msg="StartContainer for \"d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b\"" Aug 13 00:02:58.842187 systemd[1]: Started cri-containerd-d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b.scope. Aug 13 00:02:58.905650 kernel: kauditd_printk_skb: 185 callbacks suppressed Aug 13 00:02:58.905782 kernel: audit: type=1400 audit(1755043378.902:1009): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.902000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.902000 audit[3486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:58.924923 kernel: audit: type=1300 audit(1755043378.902:1009): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:58.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436663264346638643737646639333931323466373661353139643033 Aug 13 00:02:58.935844 kernel: audit: type=1327 audit(1755043378.902:1009): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436663264346638643737646639333931323466373661353139643033 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.943922 kernel: audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.953182 kernel: audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.969612 kernel: audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.978570 kernel: audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.978739 kernel: audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.994671 kernel: audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:59.003515 kernel: audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.905000 audit: BPF prog-id=136 op=LOAD Aug 13 00:02:58.905000 audit[3486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3292 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:58.905000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436663264346638643737646639333931323466373661353139643033 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.913000 audit: BPF prog-id=137 op=LOAD Aug 13 00:02:58.913000 audit[3486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3292 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:58.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436663264346638643737646639333931323466373661353139643033 Aug 13 00:02:58.925000 audit: BPF prog-id=137 op=UNLOAD Aug 13 00:02:58.925000 audit: BPF prog-id=136 op=UNLOAD Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit[3486]: AVC avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:58.925000 audit: BPF prog-id=138 op=LOAD Aug 13 00:02:58.925000 audit[3486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3292 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:58.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436663264346638643737646639333931323466373661353139643033 Aug 13 00:02:59.010963 env[1823]: time="2025-08-13T00:02:59.010896759Z" level=info msg="StartContainer for \"d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b\" returns successfully" Aug 13 00:02:59.031989 systemd[1]: cri-containerd-d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b.scope: Deactivated successfully. Aug 13 00:02:59.035000 audit: BPF prog-id=138 op=UNLOAD Aug 13 00:02:59.393546 systemd[1]: run-containerd-runc-k8s.io-d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b-runc.HlNVLR.mount: Deactivated successfully. Aug 13 00:02:59.393728 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b-rootfs.mount: Deactivated successfully. Aug 13 00:02:59.443573 env[1823]: time="2025-08-13T00:02:59.443505627Z" level=info msg="shim disconnected" id=d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b Aug 13 00:02:59.443943 env[1823]: time="2025-08-13T00:02:59.443890856Z" level=warning msg="cleaning up after shim disconnected" id=d6f2d4f8d77df939124f76a519d03ebd9739eb0a2dfd90965623a4eebc52c50b namespace=k8s.io Aug 13 00:02:59.444108 env[1823]: time="2025-08-13T00:02:59.444077903Z" level=info msg="cleaning up dead shim" Aug 13 00:02:59.447150 kubelet[2838]: E0813 00:02:59.447092 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:02:59.464286 env[1823]: time="2025-08-13T00:02:59.464228652Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:02:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3526 runtime=io.containerd.runc.v2\n" Aug 13 00:02:59.622131 env[1823]: time="2025-08-13T00:02:59.622038268Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Aug 13 00:02:59.650311 kubelet[2838]: I0813 00:02:59.650087 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-589c69b997-ch4wt" podStartSLOduration=3.575228165 podStartE2EDuration="6.650062494s" podCreationTimestamp="2025-08-13 00:02:53 +0000 UTC" firstStartedPulling="2025-08-13 00:02:54.308437198 +0000 UTC m=+27.223356570" lastFinishedPulling="2025-08-13 00:02:57.383271539 +0000 UTC m=+30.298190899" observedRunningTime="2025-08-13 00:02:58.638183908 +0000 UTC m=+31.553103292" watchObservedRunningTime="2025-08-13 00:02:59.650062494 +0000 UTC m=+32.564981866" Aug 13 00:02:59.711000 audit[3542]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:59.711000 audit[3542]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdc8629b0 a2=0 a3=1 items=0 ppid=2944 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:59.711000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:59.718000 audit[3542]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:59.718000 audit[3542]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdc8629b0 a2=0 a3=1 items=0 ppid=2944 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:59.718000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:01.448055 kubelet[2838]: E0813 00:03:01.447863 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:03:03.452701 kubelet[2838]: E0813 00:03:03.446785 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:03:04.177734 env[1823]: time="2025-08-13T00:03:04.177627458Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:04.183039 env[1823]: time="2025-08-13T00:03:04.181221312Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:04.185435 env[1823]: time="2025-08-13T00:03:04.184459182Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:04.187677 env[1823]: time="2025-08-13T00:03:04.187610555Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:04.190705 env[1823]: time="2025-08-13T00:03:04.189000437Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Aug 13 00:03:04.201321 env[1823]: time="2025-08-13T00:03:04.201239732Z" level=info msg="CreateContainer within sandbox \"2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Aug 13 00:03:04.235553 env[1823]: time="2025-08-13T00:03:04.235444687Z" level=info msg="CreateContainer within sandbox \"2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5\"" Aug 13 00:03:04.237729 env[1823]: time="2025-08-13T00:03:04.237569219Z" level=info msg="StartContainer for \"801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5\"" Aug 13 00:03:04.293881 systemd[1]: Started cri-containerd-801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5.scope. Aug 13 00:03:04.362000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365321 kernel: kauditd_printk_skb: 40 callbacks suppressed Aug 13 00:03:04.365521 kernel: audit: type=1400 audit(1755043384.362:1018): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.362000 audit[3558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:04.385632 kernel: audit: type=1300 audit(1755043384.362:1018): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:04.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316265633165323763353762363732323832366663653934376532 Aug 13 00:03:04.401086 kernel: audit: type=1327 audit(1755043384.362:1018): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316265633165323763353762363732323832366663653934376532 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.423321 kernel: audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.423556 kernel: audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.431698 kernel: audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.440828 kernel: audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.452311 kernel: audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.452502 kernel: audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.457658 env[1823]: time="2025-08-13T00:03:04.457587377Z" level=info msg="StartContainer for \"801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5\" returns successfully" Aug 13 00:03:04.462753 kernel: audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.364000 audit: BPF prog-id=139 op=LOAD Aug 13 00:03:04.364000 audit[3558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3292 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:04.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316265633165323763353762363732323832366663653934376532 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.365000 audit: BPF prog-id=140 op=LOAD Aug 13 00:03:04.365000 audit[3558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3292 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:04.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316265633165323763353762363732323832366663653934376532 Aug 13 00:03:04.373000 audit: BPF prog-id=140 op=UNLOAD Aug 13 00:03:04.373000 audit: BPF prog-id=139 op=UNLOAD Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:04.373000 audit: BPF prog-id=141 op=LOAD Aug 13 00:03:04.373000 audit[3558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3292 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:04.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316265633165323763353762363732323832366663653934376532 Aug 13 00:03:05.443675 kubelet[2838]: E0813 00:03:05.443599 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:03:05.791249 env[1823]: time="2025-08-13T00:03:05.791002175Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 00:03:05.797824 systemd[1]: cri-containerd-801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5.scope: Deactivated successfully. Aug 13 00:03:05.798293 systemd[1]: cri-containerd-801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5.scope: Consumed 1.194s CPU time. Aug 13 00:03:05.802000 audit: BPF prog-id=141 op=UNLOAD Aug 13 00:03:05.816811 kubelet[2838]: I0813 00:03:05.815535 2838 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Aug 13 00:03:05.877845 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5-rootfs.mount: Deactivated successfully. Aug 13 00:03:05.945231 systemd[1]: Created slice kubepods-besteffort-pod4c8c9425_5d62_40c6_9975_ebaf462e6a40.slice. Aug 13 00:03:05.983979 systemd[1]: Created slice kubepods-besteffort-pod2685aad3_6567_4560_87b3_d7416a4b13de.slice. Aug 13 00:03:05.998637 systemd[1]: Created slice kubepods-burstable-pod7f2a0872_b653_4823_a791_53f494f41cd6.slice. Aug 13 00:03:06.017770 kubelet[2838]: I0813 00:03:06.017641 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wh29c\" (UniqueName: \"kubernetes.io/projected/7f2a0872-b653-4823-a791-53f494f41cd6-kube-api-access-wh29c\") pod \"coredns-674b8bbfcf-8rqw2\" (UID: \"7f2a0872-b653-4823-a791-53f494f41cd6\") " pod="kube-system/coredns-674b8bbfcf-8rqw2" Aug 13 00:03:06.017770 kubelet[2838]: I0813 00:03:06.017764 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2685aad3-6567-4560-87b3-d7416a4b13de-tigera-ca-bundle\") pod \"calico-kube-controllers-549cb8fbb5-cw54h\" (UID: \"2685aad3-6567-4560-87b3-d7416a4b13de\") " pod="calico-system/calico-kube-controllers-549cb8fbb5-cw54h" Aug 13 00:03:06.018168 kubelet[2838]: I0813 00:03:06.017815 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v4nnl\" (UniqueName: \"kubernetes.io/projected/2685aad3-6567-4560-87b3-d7416a4b13de-kube-api-access-v4nnl\") pod \"calico-kube-controllers-549cb8fbb5-cw54h\" (UID: \"2685aad3-6567-4560-87b3-d7416a4b13de\") " pod="calico-system/calico-kube-controllers-549cb8fbb5-cw54h" Aug 13 00:03:06.018168 kubelet[2838]: I0813 00:03:06.017878 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4c8c9425-5d62-40c6-9975-ebaf462e6a40-calico-apiserver-certs\") pod \"calico-apiserver-cdd4cf7cc-8nm9d\" (UID: \"4c8c9425-5d62-40c6-9975-ebaf462e6a40\") " pod="calico-apiserver/calico-apiserver-cdd4cf7cc-8nm9d" Aug 13 00:03:06.018168 kubelet[2838]: I0813 00:03:06.017937 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q2d64\" (UniqueName: \"kubernetes.io/projected/4c8c9425-5d62-40c6-9975-ebaf462e6a40-kube-api-access-q2d64\") pod \"calico-apiserver-cdd4cf7cc-8nm9d\" (UID: \"4c8c9425-5d62-40c6-9975-ebaf462e6a40\") " pod="calico-apiserver/calico-apiserver-cdd4cf7cc-8nm9d" Aug 13 00:03:06.018168 kubelet[2838]: I0813 00:03:06.017996 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7f2a0872-b653-4823-a791-53f494f41cd6-config-volume\") pod \"coredns-674b8bbfcf-8rqw2\" (UID: \"7f2a0872-b653-4823-a791-53f494f41cd6\") " pod="kube-system/coredns-674b8bbfcf-8rqw2" Aug 13 00:03:06.024054 systemd[1]: Created slice kubepods-besteffort-pod15a20f9f_f564_4eee_9d7c_96d1388c2ca8.slice. Aug 13 00:03:06.115875 systemd[1]: Created slice kubepods-burstable-pod9145686c_13e5_4445_9d8a_456f0e216d3d.slice. Aug 13 00:03:06.118988 kubelet[2838]: I0813 00:03:06.118915 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-backend-key-pair\") pod \"whisker-77b8cbdb44-9l6sw\" (UID: \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\") " pod="calico-system/whisker-77b8cbdb44-9l6sw" Aug 13 00:03:06.119494 kubelet[2838]: I0813 00:03:06.119450 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-ca-bundle\") pod \"whisker-77b8cbdb44-9l6sw\" (UID: \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\") " pod="calico-system/whisker-77b8cbdb44-9l6sw" Aug 13 00:03:06.122562 kubelet[2838]: I0813 00:03:06.122502 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gjm2w\" (UniqueName: \"kubernetes.io/projected/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-kube-api-access-gjm2w\") pod \"whisker-77b8cbdb44-9l6sw\" (UID: \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\") " pod="calico-system/whisker-77b8cbdb44-9l6sw" Aug 13 00:03:06.123183 kubelet[2838]: I0813 00:03:06.123095 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/9145686c-13e5-4445-9d8a-456f0e216d3d-config-volume\") pod \"coredns-674b8bbfcf-n9qr7\" (UID: \"9145686c-13e5-4445-9d8a-456f0e216d3d\") " pod="kube-system/coredns-674b8bbfcf-n9qr7" Aug 13 00:03:06.125377 kubelet[2838]: I0813 00:03:06.125232 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d8r6f\" (UniqueName: \"kubernetes.io/projected/9145686c-13e5-4445-9d8a-456f0e216d3d-kube-api-access-d8r6f\") pod \"coredns-674b8bbfcf-n9qr7\" (UID: \"9145686c-13e5-4445-9d8a-456f0e216d3d\") " pod="kube-system/coredns-674b8bbfcf-n9qr7" Aug 13 00:03:06.182668 env[1823]: time="2025-08-13T00:03:06.182536752Z" level=info msg="shim disconnected" id=801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5 Aug 13 00:03:06.182668 env[1823]: time="2025-08-13T00:03:06.182659634Z" level=warning msg="cleaning up after shim disconnected" id=801bec1e27c57b6722826fce947e22f29a88b1b6be40c0a2e08f72ca135b9df5 namespace=k8s.io Aug 13 00:03:06.183026 env[1823]: time="2025-08-13T00:03:06.182687618Z" level=info msg="cleaning up dead shim" Aug 13 00:03:06.205622 systemd[1]: Created slice kubepods-besteffort-pod9b141971_41e8_493d_832d_456ddc8f16b3.slice. Aug 13 00:03:06.236910 kubelet[2838]: I0813 00:03:06.236856 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/23c8b7ce-3409-4554-8a49-6a153e13caef-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-qfmk7\" (UID: \"23c8b7ce-3409-4554-8a49-6a153e13caef\") " pod="calico-system/goldmane-768f4c5c69-qfmk7" Aug 13 00:03:06.237334 kubelet[2838]: I0813 00:03:06.237271 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zrcb2\" (UniqueName: \"kubernetes.io/projected/23c8b7ce-3409-4554-8a49-6a153e13caef-kube-api-access-zrcb2\") pod \"goldmane-768f4c5c69-qfmk7\" (UID: \"23c8b7ce-3409-4554-8a49-6a153e13caef\") " pod="calico-system/goldmane-768f4c5c69-qfmk7" Aug 13 00:03:06.237612 kubelet[2838]: I0813 00:03:06.237573 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/23c8b7ce-3409-4554-8a49-6a153e13caef-config\") pod \"goldmane-768f4c5c69-qfmk7\" (UID: \"23c8b7ce-3409-4554-8a49-6a153e13caef\") " pod="calico-system/goldmane-768f4c5c69-qfmk7" Aug 13 00:03:06.240738 kubelet[2838]: I0813 00:03:06.240690 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/23c8b7ce-3409-4554-8a49-6a153e13caef-goldmane-key-pair\") pod \"goldmane-768f4c5c69-qfmk7\" (UID: \"23c8b7ce-3409-4554-8a49-6a153e13caef\") " pod="calico-system/goldmane-768f4c5c69-qfmk7" Aug 13 00:03:06.241785 env[1823]: time="2025-08-13T00:03:06.241711375Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:03:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3607 runtime=io.containerd.runc.v2\n" Aug 13 00:03:06.269147 env[1823]: time="2025-08-13T00:03:06.262709758Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-8nm9d,Uid:4c8c9425-5d62-40c6-9975-ebaf462e6a40,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:03:06.306452 systemd[1]: Created slice kubepods-besteffort-pod23c8b7ce_3409_4554_8a49_6a153e13caef.slice. Aug 13 00:03:06.311382 env[1823]: time="2025-08-13T00:03:06.311133301Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-549cb8fbb5-cw54h,Uid:2685aad3-6567-4560-87b3-d7416a4b13de,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:06.322172 env[1823]: time="2025-08-13T00:03:06.321971598Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8rqw2,Uid:7f2a0872-b653-4823-a791-53f494f41cd6,Namespace:kube-system,Attempt:0,}" Aug 13 00:03:06.343251 env[1823]: time="2025-08-13T00:03:06.341225279Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-77b8cbdb44-9l6sw,Uid:15a20f9f-f564-4eee-9d7c-96d1388c2ca8,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:06.343497 kubelet[2838]: I0813 00:03:06.341467 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/9b141971-41e8-493d-832d-456ddc8f16b3-calico-apiserver-certs\") pod \"calico-apiserver-cdd4cf7cc-tjfh2\" (UID: \"9b141971-41e8-493d-832d-456ddc8f16b3\") " pod="calico-apiserver/calico-apiserver-cdd4cf7cc-tjfh2" Aug 13 00:03:06.343497 kubelet[2838]: I0813 00:03:06.341532 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rk8xw\" (UniqueName: \"kubernetes.io/projected/9b141971-41e8-493d-832d-456ddc8f16b3-kube-api-access-rk8xw\") pod \"calico-apiserver-cdd4cf7cc-tjfh2\" (UID: \"9b141971-41e8-493d-832d-456ddc8f16b3\") " pod="calico-apiserver/calico-apiserver-cdd4cf7cc-tjfh2" Aug 13 00:03:06.426505 env[1823]: time="2025-08-13T00:03:06.426306995Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n9qr7,Uid:9145686c-13e5-4445-9d8a-456f0e216d3d,Namespace:kube-system,Attempt:0,}" Aug 13 00:03:06.532752 env[1823]: time="2025-08-13T00:03:06.523097007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-tjfh2,Uid:9b141971-41e8-493d-832d-456ddc8f16b3,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:03:06.634427 env[1823]: time="2025-08-13T00:03:06.634300403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qfmk7,Uid:23c8b7ce-3409-4554-8a49-6a153e13caef,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:06.672175 env[1823]: time="2025-08-13T00:03:06.672089218Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Aug 13 00:03:06.846755 env[1823]: time="2025-08-13T00:03:06.846643890Z" level=error msg="Failed to destroy network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.848170 env[1823]: time="2025-08-13T00:03:06.848080224Z" level=error msg="encountered an error cleaning up failed sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.848512 env[1823]: time="2025-08-13T00:03:06.848446061Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-77b8cbdb44-9l6sw,Uid:15a20f9f-f564-4eee-9d7c-96d1388c2ca8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.849740 kubelet[2838]: E0813 00:03:06.849055 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.849740 kubelet[2838]: E0813 00:03:06.849165 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-77b8cbdb44-9l6sw" Aug 13 00:03:06.849740 kubelet[2838]: E0813 00:03:06.849204 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-77b8cbdb44-9l6sw" Aug 13 00:03:06.851139 kubelet[2838]: E0813 00:03:06.849289 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-77b8cbdb44-9l6sw_calico-system(15a20f9f-f564-4eee-9d7c-96d1388c2ca8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-77b8cbdb44-9l6sw_calico-system(15a20f9f-f564-4eee-9d7c-96d1388c2ca8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-77b8cbdb44-9l6sw" podUID="15a20f9f-f564-4eee-9d7c-96d1388c2ca8" Aug 13 00:03:06.851785 env[1823]: time="2025-08-13T00:03:06.851684746Z" level=error msg="Failed to destroy network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.852883 env[1823]: time="2025-08-13T00:03:06.852796056Z" level=error msg="encountered an error cleaning up failed sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.853246 env[1823]: time="2025-08-13T00:03:06.853179905Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-8nm9d,Uid:4c8c9425-5d62-40c6-9975-ebaf462e6a40,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.854222 kubelet[2838]: E0813 00:03:06.854062 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.855696 kubelet[2838]: E0813 00:03:06.854772 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-8nm9d" Aug 13 00:03:06.855696 kubelet[2838]: E0813 00:03:06.854834 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-8nm9d" Aug 13 00:03:06.855696 kubelet[2838]: E0813 00:03:06.854917 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-cdd4cf7cc-8nm9d_calico-apiserver(4c8c9425-5d62-40c6-9975-ebaf462e6a40)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-cdd4cf7cc-8nm9d_calico-apiserver(4c8c9425-5d62-40c6-9975-ebaf462e6a40)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-8nm9d" podUID="4c8c9425-5d62-40c6-9975-ebaf462e6a40" Aug 13 00:03:06.878779 env[1823]: time="2025-08-13T00:03:06.878694629Z" level=error msg="Failed to destroy network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.881995 env[1823]: time="2025-08-13T00:03:06.881898562Z" level=error msg="encountered an error cleaning up failed sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.882309 env[1823]: time="2025-08-13T00:03:06.882244334Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8rqw2,Uid:7f2a0872-b653-4823-a791-53f494f41cd6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.886737 kubelet[2838]: E0813 00:03:06.882800 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.886737 kubelet[2838]: E0813 00:03:06.882878 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-8rqw2" Aug 13 00:03:06.886737 kubelet[2838]: E0813 00:03:06.882919 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-8rqw2" Aug 13 00:03:06.887061 kubelet[2838]: E0813 00:03:06.883016 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-8rqw2_kube-system(7f2a0872-b653-4823-a791-53f494f41cd6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-8rqw2_kube-system(7f2a0872-b653-4823-a791-53f494f41cd6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-8rqw2" podUID="7f2a0872-b653-4823-a791-53f494f41cd6" Aug 13 00:03:06.926517 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c-shm.mount: Deactivated successfully. Aug 13 00:03:06.955627 env[1823]: time="2025-08-13T00:03:06.955530572Z" level=error msg="Failed to destroy network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.956514 env[1823]: time="2025-08-13T00:03:06.956085207Z" level=error msg="Failed to destroy network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.957805 env[1823]: time="2025-08-13T00:03:06.957709656Z" level=error msg="encountered an error cleaning up failed sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.961616 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3-shm.mount: Deactivated successfully. Aug 13 00:03:06.968727 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec-shm.mount: Deactivated successfully. Aug 13 00:03:06.972090 env[1823]: time="2025-08-13T00:03:06.972005762Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-549cb8fbb5-cw54h,Uid:2685aad3-6567-4560-87b3-d7416a4b13de,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.973689 kubelet[2838]: E0813 00:03:06.972924 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.973689 kubelet[2838]: E0813 00:03:06.973012 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-549cb8fbb5-cw54h" Aug 13 00:03:06.973689 kubelet[2838]: E0813 00:03:06.973049 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-549cb8fbb5-cw54h" Aug 13 00:03:06.974060 kubelet[2838]: E0813 00:03:06.973145 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-549cb8fbb5-cw54h_calico-system(2685aad3-6567-4560-87b3-d7416a4b13de)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-549cb8fbb5-cw54h_calico-system(2685aad3-6567-4560-87b3-d7416a4b13de)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-549cb8fbb5-cw54h" podUID="2685aad3-6567-4560-87b3-d7416a4b13de" Aug 13 00:03:06.974541 env[1823]: time="2025-08-13T00:03:06.971929069Z" level=error msg="encountered an error cleaning up failed sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.975439 env[1823]: time="2025-08-13T00:03:06.974770033Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n9qr7,Uid:9145686c-13e5-4445-9d8a-456f0e216d3d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.976185 kubelet[2838]: E0813 00:03:06.975125 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:06.976185 kubelet[2838]: E0813 00:03:06.975838 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n9qr7" Aug 13 00:03:06.976185 kubelet[2838]: E0813 00:03:06.975898 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n9qr7" Aug 13 00:03:06.976669 kubelet[2838]: E0813 00:03:06.976011 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-n9qr7_kube-system(9145686c-13e5-4445-9d8a-456f0e216d3d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-n9qr7_kube-system(9145686c-13e5-4445-9d8a-456f0e216d3d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n9qr7" podUID="9145686c-13e5-4445-9d8a-456f0e216d3d" Aug 13 00:03:07.012609 env[1823]: time="2025-08-13T00:03:07.012520146Z" level=error msg="Failed to destroy network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.017655 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40-shm.mount: Deactivated successfully. Aug 13 00:03:07.020660 env[1823]: time="2025-08-13T00:03:07.020525363Z" level=error msg="encountered an error cleaning up failed sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.021057 env[1823]: time="2025-08-13T00:03:07.020954032Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-tjfh2,Uid:9b141971-41e8-493d-832d-456ddc8f16b3,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.022440 kubelet[2838]: E0813 00:03:07.022012 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.022440 kubelet[2838]: E0813 00:03:07.022104 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-tjfh2" Aug 13 00:03:07.022440 kubelet[2838]: E0813 00:03:07.022142 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-tjfh2" Aug 13 00:03:07.022810 kubelet[2838]: E0813 00:03:07.022218 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-cdd4cf7cc-tjfh2_calico-apiserver(9b141971-41e8-493d-832d-456ddc8f16b3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-cdd4cf7cc-tjfh2_calico-apiserver(9b141971-41e8-493d-832d-456ddc8f16b3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-tjfh2" podUID="9b141971-41e8-493d-832d-456ddc8f16b3" Aug 13 00:03:07.060773 env[1823]: time="2025-08-13T00:03:07.060678180Z" level=error msg="Failed to destroy network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.061641 env[1823]: time="2025-08-13T00:03:07.061536347Z" level=error msg="encountered an error cleaning up failed sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.061851 env[1823]: time="2025-08-13T00:03:07.061674756Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qfmk7,Uid:23c8b7ce-3409-4554-8a49-6a153e13caef,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.062158 kubelet[2838]: E0813 00:03:07.062096 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.062312 kubelet[2838]: E0813 00:03:07.062211 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-qfmk7" Aug 13 00:03:07.062312 kubelet[2838]: E0813 00:03:07.062287 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-qfmk7" Aug 13 00:03:07.062622 kubelet[2838]: E0813 00:03:07.062481 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-qfmk7_calico-system(23c8b7ce-3409-4554-8a49-6a153e13caef)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-qfmk7_calico-system(23c8b7ce-3409-4554-8a49-6a153e13caef)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-qfmk7" podUID="23c8b7ce-3409-4554-8a49-6a153e13caef" Aug 13 00:03:07.462017 systemd[1]: Created slice kubepods-besteffort-pod2ad37774_8f99_4834_9a29_4a2eececd14c.slice. Aug 13 00:03:07.470233 env[1823]: time="2025-08-13T00:03:07.469303814Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-czrjx,Uid:2ad37774-8f99-4834-9a29-4a2eececd14c,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:07.618314 env[1823]: time="2025-08-13T00:03:07.618186098Z" level=error msg="Failed to destroy network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.619150 env[1823]: time="2025-08-13T00:03:07.619019281Z" level=error msg="encountered an error cleaning up failed sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.619431 env[1823]: time="2025-08-13T00:03:07.619154726Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-czrjx,Uid:2ad37774-8f99-4834-9a29-4a2eececd14c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.620064 kubelet[2838]: E0813 00:03:07.619746 2838 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.620064 kubelet[2838]: E0813 00:03:07.619841 2838 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-czrjx" Aug 13 00:03:07.620064 kubelet[2838]: E0813 00:03:07.619884 2838 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-czrjx" Aug 13 00:03:07.621124 kubelet[2838]: E0813 00:03:07.619978 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-czrjx_calico-system(2ad37774-8f99-4834-9a29-4a2eececd14c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-czrjx_calico-system(2ad37774-8f99-4834-9a29-4a2eececd14c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:03:07.660066 kubelet[2838]: I0813 00:03:07.659947 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:07.665044 env[1823]: time="2025-08-13T00:03:07.664849813Z" level=info msg="StopPodSandbox for \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\"" Aug 13 00:03:07.669832 kubelet[2838]: I0813 00:03:07.669735 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:07.674540 env[1823]: time="2025-08-13T00:03:07.674434237Z" level=info msg="StopPodSandbox for \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\"" Aug 13 00:03:07.681857 kubelet[2838]: I0813 00:03:07.680616 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:07.683507 env[1823]: time="2025-08-13T00:03:07.683419350Z" level=info msg="StopPodSandbox for \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\"" Aug 13 00:03:07.687402 kubelet[2838]: I0813 00:03:07.687288 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:07.693341 env[1823]: time="2025-08-13T00:03:07.693221662Z" level=info msg="StopPodSandbox for \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\"" Aug 13 00:03:07.698317 kubelet[2838]: I0813 00:03:07.698260 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:07.703922 env[1823]: time="2025-08-13T00:03:07.703852247Z" level=info msg="StopPodSandbox for \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\"" Aug 13 00:03:07.704498 kubelet[2838]: I0813 00:03:07.704433 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:07.711029 env[1823]: time="2025-08-13T00:03:07.710932432Z" level=info msg="StopPodSandbox for \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\"" Aug 13 00:03:07.740525 kubelet[2838]: I0813 00:03:07.739031 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:07.742242 env[1823]: time="2025-08-13T00:03:07.742134673Z" level=info msg="StopPodSandbox for \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\"" Aug 13 00:03:07.752283 kubelet[2838]: I0813 00:03:07.751190 2838 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:07.753217 env[1823]: time="2025-08-13T00:03:07.753072918Z" level=info msg="StopPodSandbox for \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\"" Aug 13 00:03:07.873188 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d-shm.mount: Deactivated successfully. Aug 13 00:03:07.947558 env[1823]: time="2025-08-13T00:03:07.947473155Z" level=error msg="StopPodSandbox for \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\" failed" error="failed to destroy network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:07.948543 kubelet[2838]: E0813 00:03:07.948471 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:07.949092 kubelet[2838]: E0813 00:03:07.948566 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5"} Aug 13 00:03:07.949092 kubelet[2838]: E0813 00:03:07.948655 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4c8c9425-5d62-40c6-9975-ebaf462e6a40\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:07.949092 kubelet[2838]: E0813 00:03:07.948701 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4c8c9425-5d62-40c6-9975-ebaf462e6a40\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-8nm9d" podUID="4c8c9425-5d62-40c6-9975-ebaf462e6a40" Aug 13 00:03:08.020526 env[1823]: time="2025-08-13T00:03:08.020329692Z" level=error msg="StopPodSandbox for \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\" failed" error="failed to destroy network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:08.021826 kubelet[2838]: E0813 00:03:08.021727 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:08.021826 kubelet[2838]: E0813 00:03:08.021818 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c"} Aug 13 00:03:08.022120 kubelet[2838]: E0813 00:03:08.021881 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7f2a0872-b653-4823-a791-53f494f41cd6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:08.022120 kubelet[2838]: E0813 00:03:08.021923 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7f2a0872-b653-4823-a791-53f494f41cd6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-8rqw2" podUID="7f2a0872-b653-4823-a791-53f494f41cd6" Aug 13 00:03:08.038674 env[1823]: time="2025-08-13T00:03:08.038562720Z" level=error msg="StopPodSandbox for \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\" failed" error="failed to destroy network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:08.039327 kubelet[2838]: E0813 00:03:08.039221 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:08.039541 kubelet[2838]: E0813 00:03:08.039335 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29"} Aug 13 00:03:08.039541 kubelet[2838]: E0813 00:03:08.039505 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2ad37774-8f99-4834-9a29-4a2eececd14c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:08.039743 kubelet[2838]: E0813 00:03:08.039554 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2ad37774-8f99-4834-9a29-4a2eececd14c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-czrjx" podUID="2ad37774-8f99-4834-9a29-4a2eececd14c" Aug 13 00:03:08.099882 env[1823]: time="2025-08-13T00:03:08.099768498Z" level=error msg="StopPodSandbox for \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\" failed" error="failed to destroy network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:08.101782 kubelet[2838]: E0813 00:03:08.101644 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:08.102331 kubelet[2838]: E0813 00:03:08.102063 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d"} Aug 13 00:03:08.102331 kubelet[2838]: E0813 00:03:08.102151 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"23c8b7ce-3409-4554-8a49-6a153e13caef\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:08.102331 kubelet[2838]: E0813 00:03:08.102230 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"23c8b7ce-3409-4554-8a49-6a153e13caef\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-qfmk7" podUID="23c8b7ce-3409-4554-8a49-6a153e13caef" Aug 13 00:03:08.131640 env[1823]: time="2025-08-13T00:03:08.131509842Z" level=error msg="StopPodSandbox for \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\" failed" error="failed to destroy network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:08.132413 kubelet[2838]: E0813 00:03:08.132190 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:08.132413 kubelet[2838]: E0813 00:03:08.132277 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a"} Aug 13 00:03:08.132923 kubelet[2838]: E0813 00:03:08.132346 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:08.133328 kubelet[2838]: E0813 00:03:08.132846 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-77b8cbdb44-9l6sw" podUID="15a20f9f-f564-4eee-9d7c-96d1388c2ca8" Aug 13 00:03:08.163428 env[1823]: time="2025-08-13T00:03:08.163240925Z" level=error msg="StopPodSandbox for \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\" failed" error="failed to destroy network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:08.163988 kubelet[2838]: E0813 00:03:08.163798 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:08.164445 kubelet[2838]: E0813 00:03:08.163881 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40"} Aug 13 00:03:08.164445 kubelet[2838]: E0813 00:03:08.164268 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9b141971-41e8-493d-832d-456ddc8f16b3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:08.164445 kubelet[2838]: E0813 00:03:08.164314 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9b141971-41e8-493d-832d-456ddc8f16b3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-tjfh2" podUID="9b141971-41e8-493d-832d-456ddc8f16b3" Aug 13 00:03:08.167326 env[1823]: time="2025-08-13T00:03:08.167169906Z" level=error msg="StopPodSandbox for \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\" failed" error="failed to destroy network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:08.167806 kubelet[2838]: E0813 00:03:08.167700 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:08.168066 kubelet[2838]: E0813 00:03:08.167821 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec"} Aug 13 00:03:08.168201 kubelet[2838]: E0813 00:03:08.168123 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9145686c-13e5-4445-9d8a-456f0e216d3d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:08.168331 kubelet[2838]: E0813 00:03:08.168217 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9145686c-13e5-4445-9d8a-456f0e216d3d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n9qr7" podUID="9145686c-13e5-4445-9d8a-456f0e216d3d" Aug 13 00:03:08.169681 env[1823]: time="2025-08-13T00:03:08.169582488Z" level=error msg="StopPodSandbox for \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\" failed" error="failed to destroy network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:08.170345 kubelet[2838]: E0813 00:03:08.170239 2838 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:08.170579 kubelet[2838]: E0813 00:03:08.170420 2838 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3"} Aug 13 00:03:08.170579 kubelet[2838]: E0813 00:03:08.170517 2838 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2685aad3-6567-4560-87b3-d7416a4b13de\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:08.170808 kubelet[2838]: E0813 00:03:08.170563 2838 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2685aad3-6567-4560-87b3-d7416a4b13de\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-549cb8fbb5-cw54h" podUID="2685aad3-6567-4560-87b3-d7416a4b13de" Aug 13 00:03:16.848527 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1002209215.mount: Deactivated successfully. Aug 13 00:03:16.913932 env[1823]: time="2025-08-13T00:03:16.913867927Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:16.917565 env[1823]: time="2025-08-13T00:03:16.917493771Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:16.920176 env[1823]: time="2025-08-13T00:03:16.920119097Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:16.923179 env[1823]: time="2025-08-13T00:03:16.923109542Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:16.924431 env[1823]: time="2025-08-13T00:03:16.924382680Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Aug 13 00:03:16.962056 env[1823]: time="2025-08-13T00:03:16.961925052Z" level=info msg="CreateContainer within sandbox \"2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Aug 13 00:03:16.990057 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3236467661.mount: Deactivated successfully. Aug 13 00:03:16.995798 env[1823]: time="2025-08-13T00:03:16.995690552Z" level=info msg="CreateContainer within sandbox \"2c7ba2d200bcef6fa065701a331c89ab2133d2d81057d569f29b8dd87886a044\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"d35634b184746e84b3ad8f1b1ef11be9f87bff2f7a5577f36b180614dd267f47\"" Aug 13 00:03:16.999197 env[1823]: time="2025-08-13T00:03:16.998881660Z" level=info msg="StartContainer for \"d35634b184746e84b3ad8f1b1ef11be9f87bff2f7a5577f36b180614dd267f47\"" Aug 13 00:03:17.038593 systemd[1]: Started cri-containerd-d35634b184746e84b3ad8f1b1ef11be9f87bff2f7a5577f36b180614dd267f47.scope. Aug 13 00:03:17.095000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.099441 kernel: kauditd_printk_skb: 34 callbacks suppressed Aug 13 00:03:17.099566 kernel: audit: type=1400 audit(1755043397.095:1025): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.095000 audit[3973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3292 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:17.122499 kernel: audit: type=1300 audit(1755043397.095:1025): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3292 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:17.122665 kernel: audit: type=1327 audit(1755043397.095:1025): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353633346231383437343665383462336164386631623165663131 Aug 13 00:03:17.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353633346231383437343665383462336164386631623165663131 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.141631 kernel: audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.152081 kernel: audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.165338 kernel: audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.173702 kernel: audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.181965 kernel: audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.194463 kernel: audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.194713 env[1823]: time="2025-08-13T00:03:17.187136362Z" level=info msg="StartContainer for \"d35634b184746e84b3ad8f1b1ef11be9f87bff2f7a5577f36b180614dd267f47\" returns successfully" Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.206980 kernel: audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.102000 audit: BPF prog-id=142 op=LOAD Aug 13 00:03:17.102000 audit[3973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3292 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:17.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353633346231383437343665383462336164386631623165663131 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.106000 audit: BPF prog-id=143 op=LOAD Aug 13 00:03:17.106000 audit[3973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3292 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:17.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353633346231383437343665383462336164386631623165663131 Aug 13 00:03:17.121000 audit: BPF prog-id=143 op=UNLOAD Aug 13 00:03:17.121000 audit: BPF prog-id=142 op=UNLOAD Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:17.121000 audit: BPF prog-id=144 op=LOAD Aug 13 00:03:17.121000 audit[3973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3292 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:17.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353633346231383437343665383462336164386631623165663131 Aug 13 00:03:17.487020 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Aug 13 00:03:17.487207 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 13 00:03:17.718353 env[1823]: time="2025-08-13T00:03:17.718279438Z" level=info msg="StopPodSandbox for \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\"" Aug 13 00:03:18.077509 kubelet[2838]: I0813 00:03:18.077347 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-dclmd" podStartSLOduration=2.586121655 podStartE2EDuration="25.077323109s" podCreationTimestamp="2025-08-13 00:02:53 +0000 UTC" firstStartedPulling="2025-08-13 00:02:54.436005666 +0000 UTC m=+27.350925026" lastFinishedPulling="2025-08-13 00:03:16.92720712 +0000 UTC m=+49.842126480" observedRunningTime="2025-08-13 00:03:17.898998989 +0000 UTC m=+50.813918361" watchObservedRunningTime="2025-08-13 00:03:18.077323109 +0000 UTC m=+50.992242505" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.080 [INFO][4024] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.082 [INFO][4024] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" iface="eth0" netns="/var/run/netns/cni-da294887-3820-0064-8c47-03b3d7c2dc91" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.083 [INFO][4024] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" iface="eth0" netns="/var/run/netns/cni-da294887-3820-0064-8c47-03b3d7c2dc91" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.092 [INFO][4024] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" iface="eth0" netns="/var/run/netns/cni-da294887-3820-0064-8c47-03b3d7c2dc91" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.096 [INFO][4024] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.096 [INFO][4024] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.234 [INFO][4038] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.237 [INFO][4038] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.237 [INFO][4038] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.255 [WARNING][4038] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.255 [INFO][4038] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.258 [INFO][4038] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:18.269294 env[1823]: 2025-08-13 00:03:18.265 [INFO][4024] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:18.274099 systemd[1]: run-netns-cni\x2dda294887\x2d3820\x2d0064\x2d8c47\x2d03b3d7c2dc91.mount: Deactivated successfully. Aug 13 00:03:18.276811 env[1823]: time="2025-08-13T00:03:18.276725288Z" level=info msg="TearDown network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\" successfully" Aug 13 00:03:18.276994 env[1823]: time="2025-08-13T00:03:18.276804408Z" level=info msg="StopPodSandbox for \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\" returns successfully" Aug 13 00:03:18.445313 env[1823]: time="2025-08-13T00:03:18.445125650Z" level=info msg="StopPodSandbox for \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\"" Aug 13 00:03:18.446877 kubelet[2838]: I0813 00:03:18.446757 2838 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-backend-key-pair\") pod \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\" (UID: \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\") " Aug 13 00:03:18.446877 kubelet[2838]: I0813 00:03:18.446879 2838 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-ca-bundle\") pod \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\" (UID: \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\") " Aug 13 00:03:18.447194 kubelet[2838]: I0813 00:03:18.446937 2838 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-gjm2w\" (UniqueName: \"kubernetes.io/projected/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-kube-api-access-gjm2w\") pod \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\" (UID: \"15a20f9f-f564-4eee-9d7c-96d1388c2ca8\") " Aug 13 00:03:18.463408 kubelet[2838]: I0813 00:03:18.462342 2838 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "15a20f9f-f564-4eee-9d7c-96d1388c2ca8" (UID: "15a20f9f-f564-4eee-9d7c-96d1388c2ca8"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Aug 13 00:03:18.474144 systemd[1]: var-lib-kubelet-pods-15a20f9f\x2df564\x2d4eee\x2d9d7c\x2d96d1388c2ca8-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dgjm2w.mount: Deactivated successfully. Aug 13 00:03:18.475174 kubelet[2838]: I0813 00:03:18.475103 2838 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-kube-api-access-gjm2w" (OuterVolumeSpecName: "kube-api-access-gjm2w") pod "15a20f9f-f564-4eee-9d7c-96d1388c2ca8" (UID: "15a20f9f-f564-4eee-9d7c-96d1388c2ca8"). InnerVolumeSpecName "kube-api-access-gjm2w". PluginName "kubernetes.io/projected", VolumeGIDValue "" Aug 13 00:03:18.485319 systemd[1]: var-lib-kubelet-pods-15a20f9f\x2df564\x2d4eee\x2d9d7c\x2d96d1388c2ca8-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Aug 13 00:03:18.491196 kubelet[2838]: I0813 00:03:18.491114 2838 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "15a20f9f-f564-4eee-9d7c-96d1388c2ca8" (UID: "15a20f9f-f564-4eee-9d7c-96d1388c2ca8"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Aug 13 00:03:18.551862 kubelet[2838]: I0813 00:03:18.551742 2838 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-backend-key-pair\") on node \"ip-172-31-17-40\" DevicePath \"\"" Aug 13 00:03:18.553101 kubelet[2838]: I0813 00:03:18.553054 2838 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-whisker-ca-bundle\") on node \"ip-172-31-17-40\" DevicePath \"\"" Aug 13 00:03:18.553377 kubelet[2838]: I0813 00:03:18.553333 2838 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-gjm2w\" (UniqueName: \"kubernetes.io/projected/15a20f9f-f564-4eee-9d7c-96d1388c2ca8-kube-api-access-gjm2w\") on node \"ip-172-31-17-40\" DevicePath \"\"" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.614 [INFO][4056] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.614 [INFO][4056] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" iface="eth0" netns="/var/run/netns/cni-cb39279d-8bb1-fbcb-7aa4-a16594d46c79" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.615 [INFO][4056] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" iface="eth0" netns="/var/run/netns/cni-cb39279d-8bb1-fbcb-7aa4-a16594d46c79" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.615 [INFO][4056] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" iface="eth0" netns="/var/run/netns/cni-cb39279d-8bb1-fbcb-7aa4-a16594d46c79" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.615 [INFO][4056] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.615 [INFO][4056] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.653 [INFO][4074] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.653 [INFO][4074] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.654 [INFO][4074] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.669 [WARNING][4074] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.669 [INFO][4074] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.672 [INFO][4074] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:18.677917 env[1823]: 2025-08-13 00:03:18.675 [INFO][4056] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:18.682396 systemd[1]: run-netns-cni\x2dcb39279d\x2d8bb1\x2dfbcb\x2d7aa4\x2da16594d46c79.mount: Deactivated successfully. Aug 13 00:03:18.684825 env[1823]: time="2025-08-13T00:03:18.684707515Z" level=info msg="TearDown network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\" successfully" Aug 13 00:03:18.685050 env[1823]: time="2025-08-13T00:03:18.685012127Z" level=info msg="StopPodSandbox for \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\" returns successfully" Aug 13 00:03:18.686309 env[1823]: time="2025-08-13T00:03:18.686233600Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-549cb8fbb5-cw54h,Uid:2685aad3-6567-4560-87b3-d7416a4b13de,Namespace:calico-system,Attempt:1,}" Aug 13 00:03:18.810896 systemd[1]: Removed slice kubepods-besteffort-pod15a20f9f_f564_4eee_9d7c_96d1388c2ca8.slice. Aug 13 00:03:18.947581 systemd[1]: Created slice kubepods-besteffort-pod7324dba1_273b_4a38_ae5c_49768666fa2e.slice. Aug 13 00:03:19.052933 (udev-worker)[4101]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:03:19.053462 systemd-networkd[1537]: cali8a6eb094f9f: Link UP Aug 13 00:03:19.060538 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:19.060724 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8a6eb094f9f: link becomes ready Aug 13 00:03:19.061496 kubelet[2838]: I0813 00:03:19.060233 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7324dba1-273b-4a38-ae5c-49768666fa2e-whisker-ca-bundle\") pod \"whisker-7ddd884bfb-9jrsq\" (UID: \"7324dba1-273b-4a38-ae5c-49768666fa2e\") " pod="calico-system/whisker-7ddd884bfb-9jrsq" Aug 13 00:03:19.061496 kubelet[2838]: I0813 00:03:19.060305 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bkdff\" (UniqueName: \"kubernetes.io/projected/7324dba1-273b-4a38-ae5c-49768666fa2e-kube-api-access-bkdff\") pod \"whisker-7ddd884bfb-9jrsq\" (UID: \"7324dba1-273b-4a38-ae5c-49768666fa2e\") " pod="calico-system/whisker-7ddd884bfb-9jrsq" Aug 13 00:03:19.061496 kubelet[2838]: I0813 00:03:19.060379 2838 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/7324dba1-273b-4a38-ae5c-49768666fa2e-whisker-backend-key-pair\") pod \"whisker-7ddd884bfb-9jrsq\" (UID: \"7324dba1-273b-4a38-ae5c-49768666fa2e\") " pod="calico-system/whisker-7ddd884bfb-9jrsq" Aug 13 00:03:19.060091 systemd-networkd[1537]: cali8a6eb094f9f: Gained carrier Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.752 [INFO][4081] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.775 [INFO][4081] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0 calico-kube-controllers-549cb8fbb5- calico-system 2685aad3-6567-4560-87b3-d7416a4b13de 947 0 2025-08-13 00:02:54 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:549cb8fbb5 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-17-40 calico-kube-controllers-549cb8fbb5-cw54h eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali8a6eb094f9f [] [] }} ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.775 [INFO][4081] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.878 [INFO][4094] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" HandleID="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.878 [INFO][4094] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" HandleID="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024aff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-40", "pod":"calico-kube-controllers-549cb8fbb5-cw54h", "timestamp":"2025-08-13 00:03:18.878326924 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.878 [INFO][4094] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.878 [INFO][4094] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.878 [INFO][4094] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.901 [INFO][4094] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.934 [INFO][4094] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:18.977 [INFO][4094] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.004 [INFO][4094] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.012 [INFO][4094] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.012 [INFO][4094] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.014 [INFO][4094] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.023 [INFO][4094] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.033 [INFO][4094] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.1/26] block=192.168.110.0/26 handle="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.033 [INFO][4094] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.1/26] handle="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" host="ip-172-31-17-40" Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.033 [INFO][4094] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:19.095951 env[1823]: 2025-08-13 00:03:19.033 [INFO][4094] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.1/26] IPv6=[] ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" HandleID="k8s-pod-network.9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:19.097407 env[1823]: 2025-08-13 00:03:19.037 [INFO][4081] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0", GenerateName:"calico-kube-controllers-549cb8fbb5-", Namespace:"calico-system", SelfLink:"", UID:"2685aad3-6567-4560-87b3-d7416a4b13de", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"549cb8fbb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"calico-kube-controllers-549cb8fbb5-cw54h", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.110.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali8a6eb094f9f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:19.097407 env[1823]: 2025-08-13 00:03:19.037 [INFO][4081] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.1/32] ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:19.097407 env[1823]: 2025-08-13 00:03:19.037 [INFO][4081] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8a6eb094f9f ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:19.097407 env[1823]: 2025-08-13 00:03:19.062 [INFO][4081] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:19.097407 env[1823]: 2025-08-13 00:03:19.063 [INFO][4081] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0", GenerateName:"calico-kube-controllers-549cb8fbb5-", Namespace:"calico-system", SelfLink:"", UID:"2685aad3-6567-4560-87b3-d7416a4b13de", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"549cb8fbb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b", Pod:"calico-kube-controllers-549cb8fbb5-cw54h", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.110.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali8a6eb094f9f", MAC:"ca:44:0d:a9:e6:57", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:19.097407 env[1823]: 2025-08-13 00:03:19.091 [INFO][4081] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b" Namespace="calico-system" Pod="calico-kube-controllers-549cb8fbb5-cw54h" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:19.115257 env[1823]: time="2025-08-13T00:03:19.115113315Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:19.115257 env[1823]: time="2025-08-13T00:03:19.115192039Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:19.115657 env[1823]: time="2025-08-13T00:03:19.115573227Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:19.116135 env[1823]: time="2025-08-13T00:03:19.116042128Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b pid=4117 runtime=io.containerd.runc.v2 Aug 13 00:03:19.153735 systemd[1]: Started cri-containerd-9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b.scope. Aug 13 00:03:19.180346 systemd[1]: run-containerd-runc-k8s.io-9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b-runc.6N4C9b.mount: Deactivated successfully. Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.233000 audit: BPF prog-id=145 op=LOAD Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4117 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931353761343934373137623439653731623238363962366664353562 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4117 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931353761343934373137623439653731623238363962366664353562 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit: BPF prog-id=146 op=LOAD Aug 13 00:03:19.234000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4117 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931353761343934373137623439653731623238363962366664353562 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.234000 audit: BPF prog-id=147 op=LOAD Aug 13 00:03:19.234000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4117 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931353761343934373137623439653731623238363962366664353562 Aug 13 00:03:19.235000 audit: BPF prog-id=147 op=UNLOAD Aug 13 00:03:19.235000 audit: BPF prog-id=146 op=UNLOAD Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.235000 audit: BPF prog-id=148 op=LOAD Aug 13 00:03:19.235000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4117 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931353761343934373137623439653731623238363962366664353562 Aug 13 00:03:19.255859 env[1823]: time="2025-08-13T00:03:19.255790143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7ddd884bfb-9jrsq,Uid:7324dba1-273b-4a38-ae5c-49768666fa2e,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:19.282076 env[1823]: time="2025-08-13T00:03:19.282011440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-549cb8fbb5-cw54h,Uid:2685aad3-6567-4560-87b3-d7416a4b13de,Namespace:calico-system,Attempt:1,} returns sandbox id \"9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b\"" Aug 13 00:03:19.287649 env[1823]: time="2025-08-13T00:03:19.285259541Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Aug 13 00:03:19.446954 env[1823]: time="2025-08-13T00:03:19.446888061Z" level=info msg="StopPodSandbox for \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\"" Aug 13 00:03:19.447806 env[1823]: time="2025-08-13T00:03:19.447737465Z" level=info msg="StopPodSandbox for \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\"" Aug 13 00:03:19.450934 kubelet[2838]: I0813 00:03:19.450458 2838 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="15a20f9f-f564-4eee-9d7c-96d1388c2ca8" path="/var/lib/kubelet/pods/15a20f9f-f564-4eee-9d7c-96d1388c2ca8/volumes" Aug 13 00:03:19.517645 systemd-networkd[1537]: califece4df471e: Link UP Aug 13 00:03:19.518791 systemd-networkd[1537]: califece4df471e: Gained carrier Aug 13 00:03:19.519796 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califece4df471e: link becomes ready Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.343 [INFO][4151] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.366 [INFO][4151] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0 whisker-7ddd884bfb- calico-system 7324dba1-273b-4a38-ae5c-49768666fa2e 959 0 2025-08-13 00:03:18 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7ddd884bfb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-17-40 whisker-7ddd884bfb-9jrsq eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] califece4df471e [] [] }} ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.366 [INFO][4151] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.424 [INFO][4165] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" HandleID="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Workload="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.425 [INFO][4165] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" HandleID="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Workload="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024b610), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-40", "pod":"whisker-7ddd884bfb-9jrsq", "timestamp":"2025-08-13 00:03:19.424204714 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.425 [INFO][4165] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.425 [INFO][4165] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.425 [INFO][4165] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.440 [INFO][4165] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.465 [INFO][4165] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.473 [INFO][4165] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.476 [INFO][4165] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.481 [INFO][4165] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.482 [INFO][4165] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.485 [INFO][4165] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.493 [INFO][4165] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.506 [INFO][4165] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.2/26] block=192.168.110.0/26 handle="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.506 [INFO][4165] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.2/26] handle="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" host="ip-172-31-17-40" Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.506 [INFO][4165] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:19.558632 env[1823]: 2025-08-13 00:03:19.506 [INFO][4165] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.2/26] IPv6=[] ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" HandleID="k8s-pod-network.bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Workload="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" Aug 13 00:03:19.561975 env[1823]: 2025-08-13 00:03:19.510 [INFO][4151] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0", GenerateName:"whisker-7ddd884bfb-", Namespace:"calico-system", SelfLink:"", UID:"7324dba1-273b-4a38-ae5c-49768666fa2e", ResourceVersion:"959", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7ddd884bfb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"whisker-7ddd884bfb-9jrsq", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.110.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"califece4df471e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:19.561975 env[1823]: 2025-08-13 00:03:19.510 [INFO][4151] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.2/32] ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" Aug 13 00:03:19.561975 env[1823]: 2025-08-13 00:03:19.510 [INFO][4151] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califece4df471e ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" Aug 13 00:03:19.561975 env[1823]: 2025-08-13 00:03:19.520 [INFO][4151] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" Aug 13 00:03:19.561975 env[1823]: 2025-08-13 00:03:19.521 [INFO][4151] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0", GenerateName:"whisker-7ddd884bfb-", Namespace:"calico-system", SelfLink:"", UID:"7324dba1-273b-4a38-ae5c-49768666fa2e", ResourceVersion:"959", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7ddd884bfb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d", Pod:"whisker-7ddd884bfb-9jrsq", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.110.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"califece4df471e", MAC:"3a:c2:88:29:0e:03", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:19.561975 env[1823]: 2025-08-13 00:03:19.549 [INFO][4151] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d" Namespace="calico-system" Pod="whisker-7ddd884bfb-9jrsq" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--7ddd884bfb--9jrsq-eth0" Aug 13 00:03:19.654249 env[1823]: time="2025-08-13T00:03:19.654126274Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:19.654649 env[1823]: time="2025-08-13T00:03:19.654588130Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:19.654878 env[1823]: time="2025-08-13T00:03:19.654811402Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:19.655415 env[1823]: time="2025-08-13T00:03:19.655316988Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d pid=4237 runtime=io.containerd.runc.v2 Aug 13 00:03:19.750556 systemd[1]: Started cri-containerd-bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d.scope. Aug 13 00:03:19.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.930000 audit: BPF prog-id=149 op=LOAD Aug 13 00:03:19.931000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.931000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4237 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336566316264636162613938326431343937383336333166333438 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4237 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336566316264636162613938326431343937383336333166333438 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.934000 audit: BPF prog-id=150 op=LOAD Aug 13 00:03:19.934000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4237 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336566316264636162613938326431343937383336333166333438 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.936000 audit: BPF prog-id=151 op=LOAD Aug 13 00:03:19.936000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4237 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336566316264636162613938326431343937383336333166333438 Aug 13 00:03:19.938000 audit: BPF prog-id=151 op=UNLOAD Aug 13 00:03:19.938000 audit: BPF prog-id=150 op=UNLOAD Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:19.938000 audit: BPF prog-id=152 op=LOAD Aug 13 00:03:19.938000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4237 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336566316264636162613938326431343937383336333166333438 Aug 13 00:03:19.951000 audit[4297]: AVC avc: denied { write } for pid=4297 comm="tee" name="fd" dev="proc" ino=22249 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:19.951000 audit[4297]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe2e5f7d6 a2=241 a3=1b6 items=1 ppid=4220 pid=4297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.951000 audit: CWD cwd="/etc/service/enabled/bird/log" Aug 13 00:03:19.951000 audit: PATH item=0 name="/dev/fd/63" inode=21184 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:19.951000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:19.953000 audit[4303]: AVC avc: denied { write } for pid=4303 comm="tee" name="fd" dev="proc" ino=22255 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:19.953000 audit[4303]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffd66b7d5 a2=241 a3=1b6 items=1 ppid=4223 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.953000 audit: CWD cwd="/etc/service/enabled/felix/log" Aug 13 00:03:19.953000 audit: PATH item=0 name="/dev/fd/63" inode=21189 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:19.953000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:19.915000 audit[4277]: AVC avc: denied { write } for pid=4277 comm="tee" name="fd" dev="proc" ino=22235 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:19.915000 audit[4277]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffcc8e7d5 a2=241 a3=1b6 items=1 ppid=4214 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.915000 audit: CWD cwd="/etc/service/enabled/confd/log" Aug 13 00:03:19.915000 audit: PATH item=0 name="/dev/fd/63" inode=21173 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:19.915000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:19.976000 audit[4310]: AVC avc: denied { write } for pid=4310 comm="tee" name="fd" dev="proc" ino=21197 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:19.986000 audit[4305]: AVC avc: denied { write } for pid=4305 comm="tee" name="fd" dev="proc" ino=22264 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:19.986000 audit[4305]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe4ced7d5 a2=241 a3=1b6 items=1 ppid=4221 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.986000 audit: CWD cwd="/etc/service/enabled/bird6/log" Aug 13 00:03:19.986000 audit: PATH item=0 name="/dev/fd/63" inode=21190 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:19.986000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.707 [INFO][4191] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.707 [INFO][4191] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" iface="eth0" netns="/var/run/netns/cni-13e89c57-cd6b-4581-4b1d-e314ddd2e9bc" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.708 [INFO][4191] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" iface="eth0" netns="/var/run/netns/cni-13e89c57-cd6b-4581-4b1d-e314ddd2e9bc" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.709 [INFO][4191] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" iface="eth0" netns="/var/run/netns/cni-13e89c57-cd6b-4581-4b1d-e314ddd2e9bc" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.709 [INFO][4191] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.709 [INFO][4191] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.961 [INFO][4268] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.967 [INFO][4268] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.967 [INFO][4268] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.987 [WARNING][4268] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.987 [INFO][4268] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.992 [INFO][4268] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:20.000763 env[1823]: 2025-08-13 00:03:19.995 [INFO][4191] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:20.005396 systemd[1]: run-netns-cni\x2d13e89c57\x2dcd6b\x2d4581\x2d4b1d\x2de314ddd2e9bc.mount: Deactivated successfully. Aug 13 00:03:20.012000 audit[4322]: AVC avc: denied { write } for pid=4322 comm="tee" name="fd" dev="proc" ino=22273 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:20.012000 audit[4322]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc8da97d7 a2=241 a3=1b6 items=1 ppid=4212 pid=4322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.012000 audit: CWD cwd="/etc/service/enabled/cni/log" Aug 13 00:03:20.012000 audit: PATH item=0 name="/dev/fd/63" inode=21202 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:20.012000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:19.976000 audit[4310]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc9c337c5 a2=241 a3=1b6 items=1 ppid=4216 pid=4310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:19.976000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Aug 13 00:03:19.976000 audit: PATH item=0 name="/dev/fd/63" inode=21193 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:19.976000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:20.025000 audit[4325]: AVC avc: denied { write } for pid=4325 comm="tee" name="fd" dev="proc" ino=22279 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:20.025000 audit[4325]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffde8807c6 a2=241 a3=1b6 items=1 ppid=4226 pid=4325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.025000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Aug 13 00:03:20.025000 audit: PATH item=0 name="/dev/fd/63" inode=22276 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:20.025000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.727 [INFO][4187] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.727 [INFO][4187] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" iface="eth0" netns="/var/run/netns/cni-81971df9-889e-4387-a16d-860e33c40cf1" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.729 [INFO][4187] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" iface="eth0" netns="/var/run/netns/cni-81971df9-889e-4387-a16d-860e33c40cf1" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.730 [INFO][4187] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" iface="eth0" netns="/var/run/netns/cni-81971df9-889e-4387-a16d-860e33c40cf1" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.731 [INFO][4187] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.731 [INFO][4187] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.979 [INFO][4271] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.979 [INFO][4271] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:19.995 [INFO][4271] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:20.032 [WARNING][4271] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:20.032 [INFO][4271] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:20.041 [INFO][4271] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:20.047545 env[1823]: 2025-08-13 00:03:20.044 [INFO][4187] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:20.052305 systemd[1]: run-netns-cni\x2d81971df9\x2d889e\x2d4387\x2da16d\x2d860e33c40cf1.mount: Deactivated successfully. Aug 13 00:03:20.058837 env[1823]: time="2025-08-13T00:03:20.057203957Z" level=info msg="TearDown network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\" successfully" Aug 13 00:03:20.058837 env[1823]: time="2025-08-13T00:03:20.057277257Z" level=info msg="StopPodSandbox for \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\" returns successfully" Aug 13 00:03:20.058837 env[1823]: time="2025-08-13T00:03:20.057938803Z" level=info msg="TearDown network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\" successfully" Aug 13 00:03:20.058837 env[1823]: time="2025-08-13T00:03:20.058049724Z" level=info msg="StopPodSandbox for \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\" returns successfully" Aug 13 00:03:20.064543 env[1823]: time="2025-08-13T00:03:20.063150691Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-8nm9d,Uid:4c8c9425-5d62-40c6-9975-ebaf462e6a40,Namespace:calico-apiserver,Attempt:1,}" Aug 13 00:03:20.064543 env[1823]: time="2025-08-13T00:03:20.063931570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n9qr7,Uid:9145686c-13e5-4445-9d8a-456f0e216d3d,Namespace:kube-system,Attempt:1,}" Aug 13 00:03:20.317498 env[1823]: time="2025-08-13T00:03:20.317309229Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7ddd884bfb-9jrsq,Uid:7324dba1-273b-4a38-ae5c-49768666fa2e,Namespace:calico-system,Attempt:0,} returns sandbox id \"bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d\"" Aug 13 00:03:20.515221 systemd-networkd[1537]: calia9602b11512: Link UP Aug 13 00:03:20.521769 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:20.521950 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia9602b11512: link becomes ready Aug 13 00:03:20.522796 systemd-networkd[1537]: calia9602b11512: Gained carrier Aug 13 00:03:20.527020 systemd-networkd[1537]: cali8a6eb094f9f: Gained IPv6LL Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.212 [INFO][4334] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.275 [INFO][4334] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0 coredns-674b8bbfcf- kube-system 9145686c-13e5-4445-9d8a-456f0e216d3d 974 0 2025-08-13 00:02:31 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-17-40 coredns-674b8bbfcf-n9qr7 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calia9602b11512 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.275 [INFO][4334] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.389 [INFO][4370] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" HandleID="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.390 [INFO][4370] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" HandleID="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb640), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-17-40", "pod":"coredns-674b8bbfcf-n9qr7", "timestamp":"2025-08-13 00:03:20.389180607 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.390 [INFO][4370] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.390 [INFO][4370] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.390 [INFO][4370] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.428 [INFO][4370] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.448 [INFO][4370] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.457 [INFO][4370] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.462 [INFO][4370] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.469 [INFO][4370] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.469 [INFO][4370] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.478 [INFO][4370] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.489 [INFO][4370] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.502 [INFO][4370] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.3/26] block=192.168.110.0/26 handle="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.502 [INFO][4370] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.3/26] handle="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" host="ip-172-31-17-40" Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.504 [INFO][4370] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:20.583702 env[1823]: 2025-08-13 00:03:20.505 [INFO][4370] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.3/26] IPv6=[] ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" HandleID="k8s-pod-network.34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.585018 env[1823]: 2025-08-13 00:03:20.509 [INFO][4334] cni-plugin/k8s.go 418: Populated endpoint ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9145686c-13e5-4445-9d8a-456f0e216d3d", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"coredns-674b8bbfcf-n9qr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia9602b11512", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:20.585018 env[1823]: 2025-08-13 00:03:20.509 [INFO][4334] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.3/32] ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.585018 env[1823]: 2025-08-13 00:03:20.509 [INFO][4334] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia9602b11512 ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.585018 env[1823]: 2025-08-13 00:03:20.530 [INFO][4334] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.585018 env[1823]: 2025-08-13 00:03:20.533 [INFO][4334] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9145686c-13e5-4445-9d8a-456f0e216d3d", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f", Pod:"coredns-674b8bbfcf-n9qr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia9602b11512", MAC:"96:66:fb:45:58:63", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:20.585018 env[1823]: 2025-08-13 00:03:20.578 [INFO][4334] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f" Namespace="kube-system" Pod="coredns-674b8bbfcf-n9qr7" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:20.643190 env[1823]: time="2025-08-13T00:03:20.642633161Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:20.643190 env[1823]: time="2025-08-13T00:03:20.642885282Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:20.643190 env[1823]: time="2025-08-13T00:03:20.642957010Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:20.648752 env[1823]: time="2025-08-13T00:03:20.643967305Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f pid=4397 runtime=io.containerd.runc.v2 Aug 13 00:03:20.686919 systemd-networkd[1537]: calif0c049a87c1: Link UP Aug 13 00:03:20.693517 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif0c049a87c1: link becomes ready Aug 13 00:03:20.696950 systemd-networkd[1537]: calif0c049a87c1: Gained carrier Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.221 [INFO][4333] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.297 [INFO][4333] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0 calico-apiserver-cdd4cf7cc- calico-apiserver 4c8c9425-5d62-40c6-9975-ebaf462e6a40 973 0 2025-08-13 00:02:44 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:cdd4cf7cc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-17-40 calico-apiserver-cdd4cf7cc-8nm9d eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif0c049a87c1 [] [] }} ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.297 [INFO][4333] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.444 [INFO][4374] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" HandleID="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.445 [INFO][4374] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" HandleID="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb640), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-17-40", "pod":"calico-apiserver-cdd4cf7cc-8nm9d", "timestamp":"2025-08-13 00:03:20.444527135 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.448 [INFO][4374] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.503 [INFO][4374] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.504 [INFO][4374] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.565 [INFO][4374] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.593 [INFO][4374] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.622 [INFO][4374] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.627 [INFO][4374] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.642 [INFO][4374] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.642 [INFO][4374] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.647 [INFO][4374] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4 Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.657 [INFO][4374] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.678 [INFO][4374] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.4/26] block=192.168.110.0/26 handle="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.678 [INFO][4374] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.4/26] handle="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" host="ip-172-31-17-40" Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.678 [INFO][4374] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:20.721506 env[1823]: 2025-08-13 00:03:20.679 [INFO][4374] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.4/26] IPv6=[] ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" HandleID="k8s-pod-network.31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.725163 env[1823]: 2025-08-13 00:03:20.683 [INFO][4333] cni-plugin/k8s.go 418: Populated endpoint ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8c9425-5d62-40c6-9975-ebaf462e6a40", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"calico-apiserver-cdd4cf7cc-8nm9d", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif0c049a87c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:20.725163 env[1823]: 2025-08-13 00:03:20.683 [INFO][4333] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.4/32] ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.725163 env[1823]: 2025-08-13 00:03:20.683 [INFO][4333] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif0c049a87c1 ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.725163 env[1823]: 2025-08-13 00:03:20.694 [INFO][4333] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.725163 env[1823]: 2025-08-13 00:03:20.694 [INFO][4333] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8c9425-5d62-40c6-9975-ebaf462e6a40", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4", Pod:"calico-apiserver-cdd4cf7cc-8nm9d", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif0c049a87c1", MAC:"4a:2c:a7:a0:49:bd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:20.725163 env[1823]: 2025-08-13 00:03:20.713 [INFO][4333] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-8nm9d" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:20.772676 systemd[1]: Started cri-containerd-34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f.scope. Aug 13 00:03:20.853749 env[1823]: time="2025-08-13T00:03:20.853456616Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:20.857342 env[1823]: time="2025-08-13T00:03:20.857215470Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:20.857810 env[1823]: time="2025-08-13T00:03:20.857688342Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:20.858946 env[1823]: time="2025-08-13T00:03:20.858719483Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4 pid=4438 runtime=io.containerd.runc.v2 Aug 13 00:03:20.908279 systemd[1]: Started cri-containerd-31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4.scope. Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.918000 audit: BPF prog-id=153 op=LOAD Aug 13 00:03:20.919000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.919000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623531373565313837613266393263336433303434356334326538 Aug 13 00:03:20.919000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.919000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623531373565313837613266393263336433303434356334326538 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.920000 audit: BPF prog-id=154 op=LOAD Aug 13 00:03:20.920000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623531373565313837613266393263336433303434356334326538 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.944968 systemd[1]: run-containerd-runc-k8s.io-31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4-runc.6AK5QX.mount: Deactivated successfully. Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.942000 audit: BPF prog-id=155 op=LOAD Aug 13 00:03:20.942000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623531373565313837613266393263336433303434356334326538 Aug 13 00:03:20.950000 audit: BPF prog-id=155 op=UNLOAD Aug 13 00:03:20.950000 audit: BPF prog-id=154 op=UNLOAD Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:20.950000 audit: BPF prog-id=156 op=LOAD Aug 13 00:03:20.950000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623531373565313837613266393263336433303434356334326538 Aug 13 00:03:21.068917 env[1823]: time="2025-08-13T00:03:21.068855926Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n9qr7,Uid:9145686c-13e5-4445-9d8a-456f0e216d3d,Namespace:kube-system,Attempt:1,} returns sandbox id \"34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f\"" Aug 13 00:03:21.088410 env[1823]: time="2025-08-13T00:03:21.088299867Z" level=info msg="CreateContainer within sandbox \"34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.122000 audit: BPF prog-id=157 op=LOAD Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4438 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343037616161386238663432393531373865623062326137653863 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4438 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343037616161386238663432393531373865623062326137653863 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit: BPF prog-id=158 op=LOAD Aug 13 00:03:21.126000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4438 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343037616161386238663432393531373865623062326137653863 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.126000 audit: BPF prog-id=159 op=LOAD Aug 13 00:03:21.126000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4438 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343037616161386238663432393531373865623062326137653863 Aug 13 00:03:21.126000 audit: BPF prog-id=159 op=UNLOAD Aug 13 00:03:21.127000 audit: BPF prog-id=158 op=UNLOAD Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.127000 audit: BPF prog-id=160 op=LOAD Aug 13 00:03:21.127000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4438 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343037616161386238663432393531373865623062326137653863 Aug 13 00:03:21.139165 env[1823]: time="2025-08-13T00:03:21.139006534Z" level=info msg="CreateContainer within sandbox \"34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"580ae600466fd0504d38fd29f67dfa21db3a0a8f7957c832202e51ffa5c73155\"" Aug 13 00:03:21.140542 env[1823]: time="2025-08-13T00:03:21.140492076Z" level=info msg="StartContainer for \"580ae600466fd0504d38fd29f67dfa21db3a0a8f7957c832202e51ffa5c73155\"" Aug 13 00:03:21.177527 systemd[1]: Started cri-containerd-580ae600466fd0504d38fd29f67dfa21db3a0a8f7957c832202e51ffa5c73155.scope. Aug 13 00:03:21.231187 systemd-networkd[1537]: califece4df471e: Gained IPv6LL Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.234000 audit: BPF prog-id=161 op=LOAD Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4397 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538306165363030343636666430353034643338666432396636376466 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4397 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538306165363030343636666430353034643338666432396636376466 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit: BPF prog-id=162 op=LOAD Aug 13 00:03:21.236000 audit[4478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4397 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538306165363030343636666430353034643338666432396636376466 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.236000 audit: BPF prog-id=163 op=LOAD Aug 13 00:03:21.236000 audit[4478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4397 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538306165363030343636666430353034643338666432396636376466 Aug 13 00:03:21.236000 audit: BPF prog-id=163 op=UNLOAD Aug 13 00:03:21.237000 audit: BPF prog-id=162 op=UNLOAD Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.237000 audit: BPF prog-id=164 op=LOAD Aug 13 00:03:21.237000 audit[4478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4397 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538306165363030343636666430353034643338666432396636376466 Aug 13 00:03:21.297908 env[1823]: time="2025-08-13T00:03:21.297837712Z" level=info msg="StartContainer for \"580ae600466fd0504d38fd29f67dfa21db3a0a8f7957c832202e51ffa5c73155\" returns successfully" Aug 13 00:03:21.307672 env[1823]: time="2025-08-13T00:03:21.307595648Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-8nm9d,Uid:4c8c9425-5d62-40c6-9975-ebaf462e6a40,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4\"" Aug 13 00:03:21.450563 env[1823]: time="2025-08-13T00:03:21.448688567Z" level=info msg="StopPodSandbox for \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\"" Aug 13 00:03:21.450563 env[1823]: time="2025-08-13T00:03:21.450050094Z" level=info msg="StopPodSandbox for \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\"" Aug 13 00:03:21.679000 audit[4488]: AVC avc: denied { getattr } for pid=4488 comm="coredns" path="cgroup:[4026532966]" dev="nsfs" ino=4026532966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c564,c763 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 00:03:21.679000 audit[4488]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056450 a2=40000b20f8 a3=0 items=0 ppid=4397 pid=4488 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c564,c763 key=(null) Aug 13 00:03:21.679000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 00:03:21.999317 systemd-networkd[1537]: calif0c049a87c1: Gained IPv6LL Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.785 [INFO][4526] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.785 [INFO][4526] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" iface="eth0" netns="/var/run/netns/cni-d62c7110-a1a3-3d77-395d-d7d3c324d8df" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.786 [INFO][4526] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" iface="eth0" netns="/var/run/netns/cni-d62c7110-a1a3-3d77-395d-d7d3c324d8df" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.786 [INFO][4526] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" iface="eth0" netns="/var/run/netns/cni-d62c7110-a1a3-3d77-395d-d7d3c324d8df" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.786 [INFO][4526] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.786 [INFO][4526] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.947 [INFO][4545] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.947 [INFO][4545] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.948 [INFO][4545] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.986 [WARNING][4545] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.986 [INFO][4545] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.992 [INFO][4545] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:22.005961 env[1823]: 2025-08-13 00:03:21.995 [INFO][4526] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:22.004912 systemd[1]: run-netns-cni\x2dd62c7110\x2da1a3\x2d3d77\x2d395d\x2dd7d3c324d8df.mount: Deactivated successfully. Aug 13 00:03:22.008382 env[1823]: time="2025-08-13T00:03:22.008300929Z" level=info msg="TearDown network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\" successfully" Aug 13 00:03:22.008634 env[1823]: time="2025-08-13T00:03:22.008582847Z" level=info msg="StopPodSandbox for \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\" returns successfully" Aug 13 00:03:22.009959 env[1823]: time="2025-08-13T00:03:22.009883230Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qfmk7,Uid:23c8b7ce-3409-4554-8a49-6a153e13caef,Namespace:calico-system,Attempt:1,}" Aug 13 00:03:22.063179 systemd-networkd[1537]: calia9602b11512: Gained IPv6LL Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.800 [INFO][4533] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.800 [INFO][4533] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" iface="eth0" netns="/var/run/netns/cni-9197feba-5df0-c1f4-ea49-586f90fcd96e" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.800 [INFO][4533] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" iface="eth0" netns="/var/run/netns/cni-9197feba-5df0-c1f4-ea49-586f90fcd96e" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.801 [INFO][4533] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" iface="eth0" netns="/var/run/netns/cni-9197feba-5df0-c1f4-ea49-586f90fcd96e" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.801 [INFO][4533] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.801 [INFO][4533] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.980 [INFO][4550] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.981 [INFO][4550] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:21.998 [INFO][4550] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:22.030 [WARNING][4550] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:22.030 [INFO][4550] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:22.038 [INFO][4550] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:22.079037 env[1823]: 2025-08-13 00:03:22.067 [INFO][4533] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:22.085027 systemd[1]: run-netns-cni\x2d9197feba\x2d5df0\x2dc1f4\x2dea49\x2d586f90fcd96e.mount: Deactivated successfully. Aug 13 00:03:22.091189 env[1823]: time="2025-08-13T00:03:22.091114887Z" level=info msg="TearDown network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\" successfully" Aug 13 00:03:22.091501 env[1823]: time="2025-08-13T00:03:22.091456244Z" level=info msg="StopPodSandbox for \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\" returns successfully" Aug 13 00:03:22.092667 env[1823]: time="2025-08-13T00:03:22.092511587Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-tjfh2,Uid:9b141971-41e8-493d-832d-456ddc8f16b3,Namespace:calico-apiserver,Attempt:1,}" Aug 13 00:03:22.374491 kernel: kauditd_printk_skb: 356 callbacks suppressed Aug 13 00:03:22.374677 kernel: audit: type=1400 audit(1755043402.360:1129): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6755 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.360000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6755 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.360000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010ca3230 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.391658 kernel: audit: type=1300 audit(1755043402.360:1129): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010ca3230 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.360000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.408158 kernel: audit: type=1327 audit(1755043402.360:1129): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.362000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.430054 kernel: audit: type=1400 audit(1755043402.362:1130): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.362000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010dfc510 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.454172 kernel: audit: type=1300 audit(1755043402.362:1130): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010dfc510 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.454839 env[1823]: time="2025-08-13T00:03:22.454765404Z" level=info msg="StopPodSandbox for \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\"" Aug 13 00:03:22.455561 env[1823]: time="2025-08-13T00:03:22.455505804Z" level=info msg="StopPodSandbox for \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\"" Aug 13 00:03:22.461427 kernel: audit: type=1327 audit(1755043402.362:1130): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.362000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.491837 kernel: audit: type=1400 audit(1755043402.362:1131): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.498449 kernel: audit: type=1300 audit(1755043402.362:1131): arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4010ca3260 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.362000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4010ca3260 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.534814 kernel: audit: type=1327 audit(1755043402.362:1131): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.362000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.557340 kernel: audit: type=1400 audit(1755043402.362:1132): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.362000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=401107f620 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.368000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.368000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010dfc5d0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.368000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.368000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:22.368000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=401107f640 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:03:22.368000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:03:22.661027 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:22.661197 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali887cc257d98: link becomes ready Aug 13 00:03:22.655419 systemd-networkd[1537]: cali887cc257d98: Link UP Aug 13 00:03:22.668310 systemd-networkd[1537]: cali887cc257d98: Gained carrier Aug 13 00:03:22.673000 audit[4609]: NETFILTER_CFG table=filter:103 family=2 entries=20 op=nft_register_rule pid=4609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:22.673000 audit[4609]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffffb671310 a2=0 a3=1 items=0 ppid=2944 pid=4609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:22.673000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:22.685000 audit[4609]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=4609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:22.685000 audit[4609]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffffb671310 a2=0 a3=1 items=0 ppid=2944 pid=4609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:22.685000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:22.722216 kubelet[2838]: I0813 00:03:22.722113 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-n9qr7" podStartSLOduration=51.722088383 podStartE2EDuration="51.722088383s" podCreationTimestamp="2025-08-13 00:02:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:03:21.901878614 +0000 UTC m=+54.816798022" watchObservedRunningTime="2025-08-13 00:03:22.722088383 +0000 UTC m=+55.637007755" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.177 [INFO][4563] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.230 [INFO][4563] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0 goldmane-768f4c5c69- calico-system 23c8b7ce-3409-4554-8a49-6a153e13caef 992 0 2025-08-13 00:02:52 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-17-40 goldmane-768f4c5c69-qfmk7 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali887cc257d98 [] [] }} ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.230 [INFO][4563] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.395 [INFO][4585] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" HandleID="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.395 [INFO][4585] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" HandleID="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003282b0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-40", "pod":"goldmane-768f4c5c69-qfmk7", "timestamp":"2025-08-13 00:03:22.39508611 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.395 [INFO][4585] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.396 [INFO][4585] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.396 [INFO][4585] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.438 [INFO][4585] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.474 [INFO][4585] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.512 [INFO][4585] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.519 [INFO][4585] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.536 [INFO][4585] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.536 [INFO][4585] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.556 [INFO][4585] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044 Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.594 [INFO][4585] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.628 [INFO][4585] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.5/26] block=192.168.110.0/26 handle="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.628 [INFO][4585] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.5/26] handle="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" host="ip-172-31-17-40" Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.628 [INFO][4585] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:22.732201 env[1823]: 2025-08-13 00:03:22.628 [INFO][4585] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.5/26] IPv6=[] ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" HandleID="k8s-pod-network.2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.733742 env[1823]: 2025-08-13 00:03:22.632 [INFO][4563] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"23c8b7ce-3409-4554-8a49-6a153e13caef", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"goldmane-768f4c5c69-qfmk7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.110.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali887cc257d98", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:22.733742 env[1823]: 2025-08-13 00:03:22.632 [INFO][4563] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.5/32] ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.733742 env[1823]: 2025-08-13 00:03:22.632 [INFO][4563] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali887cc257d98 ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.733742 env[1823]: 2025-08-13 00:03:22.672 [INFO][4563] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.733742 env[1823]: 2025-08-13 00:03:22.672 [INFO][4563] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"23c8b7ce-3409-4554-8a49-6a153e13caef", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044", Pod:"goldmane-768f4c5c69-qfmk7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.110.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali887cc257d98", MAC:"26:c5:0f:cc:b2:0a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:22.733742 env[1823]: 2025-08-13 00:03:22.719 [INFO][4563] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044" Namespace="calico-system" Pod="goldmane-768f4c5c69-qfmk7" WorkloadEndpoint="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:22.875011 systemd-networkd[1537]: calia6e6a300362: Link UP Aug 13 00:03:22.882965 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia6e6a300362: link becomes ready Aug 13 00:03:22.881869 systemd-networkd[1537]: calia6e6a300362: Gained carrier Aug 13 00:03:22.914174 env[1823]: time="2025-08-13T00:03:22.914047786Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:22.914445 env[1823]: time="2025-08-13T00:03:22.914128058Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:22.914445 env[1823]: time="2025-08-13T00:03:22.914189621Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:22.914792 env[1823]: time="2025-08-13T00:03:22.914712162Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044 pid=4650 runtime=io.containerd.runc.v2 Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.263 [INFO][4574] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.294 [INFO][4574] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0 calico-apiserver-cdd4cf7cc- calico-apiserver 9b141971-41e8-493d-832d-456ddc8f16b3 993 0 2025-08-13 00:02:44 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:cdd4cf7cc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-17-40 calico-apiserver-cdd4cf7cc-tjfh2 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia6e6a300362 [] [] }} ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.294 [INFO][4574] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.595 [INFO][4592] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" HandleID="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.596 [INFO][4592] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" HandleID="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400030a070), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-17-40", "pod":"calico-apiserver-cdd4cf7cc-tjfh2", "timestamp":"2025-08-13 00:03:22.595408719 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.596 [INFO][4592] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.635 [INFO][4592] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.638 [INFO][4592] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.726 [INFO][4592] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.740 [INFO][4592] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.758 [INFO][4592] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.761 [INFO][4592] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.767 [INFO][4592] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.767 [INFO][4592] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.778 [INFO][4592] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037 Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.794 [INFO][4592] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.812 [INFO][4592] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.6/26] block=192.168.110.0/26 handle="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.812 [INFO][4592] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.6/26] handle="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" host="ip-172-31-17-40" Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.812 [INFO][4592] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:22.971881 env[1823]: 2025-08-13 00:03:22.813 [INFO][4592] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.6/26] IPv6=[] ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" HandleID="k8s-pod-network.136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.973577 env[1823]: 2025-08-13 00:03:22.818 [INFO][4574] cni-plugin/k8s.go 418: Populated endpoint ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b141971-41e8-493d-832d-456ddc8f16b3", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"calico-apiserver-cdd4cf7cc-tjfh2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia6e6a300362", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:22.973577 env[1823]: 2025-08-13 00:03:22.818 [INFO][4574] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.6/32] ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.973577 env[1823]: 2025-08-13 00:03:22.818 [INFO][4574] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia6e6a300362 ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.973577 env[1823]: 2025-08-13 00:03:22.888 [INFO][4574] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:22.973577 env[1823]: 2025-08-13 00:03:22.890 [INFO][4574] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b141971-41e8-493d-832d-456ddc8f16b3", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037", Pod:"calico-apiserver-cdd4cf7cc-tjfh2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia6e6a300362", MAC:"2a:14:11:b4:08:9e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:22.973577 env[1823]: 2025-08-13 00:03:22.956 [INFO][4574] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037" Namespace="calico-apiserver" Pod="calico-apiserver-cdd4cf7cc-tjfh2" WorkloadEndpoint="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:23.058973 env[1823]: time="2025-08-13T00:03:23.058849917Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:23.059441 env[1823]: time="2025-08-13T00:03:23.059239816Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:23.059905 env[1823]: time="2025-08-13T00:03:23.059840324Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:23.060880 env[1823]: time="2025-08-13T00:03:23.060786257Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037 pid=4687 runtime=io.containerd.runc.v2 Aug 13 00:03:23.103963 systemd[1]: Started cri-containerd-2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044.scope. Aug 13 00:03:23.130136 systemd[1]: run-containerd-runc-k8s.io-2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044-runc.0Fv27o.mount: Deactivated successfully. Aug 13 00:03:23.178000 audit[4715]: NETFILTER_CFG table=filter:105 family=2 entries=17 op=nft_register_rule pid=4715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:23.178000 audit[4715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcf7a7a20 a2=0 a3=1 items=0 ppid=2944 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.178000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:23.188000 audit[4715]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=4715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:23.188000 audit[4715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffcf7a7a20 a2=0 a3=1 items=0 ppid=2944 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.188000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:23.209962 systemd[1]: Started cri-containerd-136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037.scope. Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.003 [INFO][4621] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.004 [INFO][4621] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" iface="eth0" netns="/var/run/netns/cni-3075fb4c-191e-84b3-2dee-911c11f095ed" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.004 [INFO][4621] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" iface="eth0" netns="/var/run/netns/cni-3075fb4c-191e-84b3-2dee-911c11f095ed" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.004 [INFO][4621] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" iface="eth0" netns="/var/run/netns/cni-3075fb4c-191e-84b3-2dee-911c11f095ed" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.004 [INFO][4621] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.004 [INFO][4621] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.228 [INFO][4677] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.231 [INFO][4677] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.231 [INFO][4677] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.268 [WARNING][4677] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.268 [INFO][4677] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.280 [INFO][4677] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:23.289175 env[1823]: 2025-08-13 00:03:23.283 [INFO][4621] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.340000 audit: BPF prog-id=165 op=LOAD Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4687 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133366630303335373939623834326532373264373634643131323638 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4687 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133366630303335373939623834326532373264373634643131323638 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit: BPF prog-id=166 op=LOAD Aug 13 00:03:23.341000 audit[4702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4687 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133366630303335373939623834326532373264373634643131323638 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit: BPF prog-id=167 op=LOAD Aug 13 00:03:23.341000 audit[4702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4687 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133366630303335373939623834326532373264373634643131323638 Aug 13 00:03:23.341000 audit: BPF prog-id=167 op=UNLOAD Aug 13 00:03:23.341000 audit: BPF prog-id=166 op=UNLOAD Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.341000 audit: BPF prog-id=168 op=LOAD Aug 13 00:03:23.341000 audit[4702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4687 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133366630303335373939623834326532373264373634643131323638 Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.040 [INFO][4620] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.040 [INFO][4620] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" iface="eth0" netns="/var/run/netns/cni-06825001-0036-4d80-8028-447e7c027a55" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.040 [INFO][4620] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" iface="eth0" netns="/var/run/netns/cni-06825001-0036-4d80-8028-447e7c027a55" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.040 [INFO][4620] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" iface="eth0" netns="/var/run/netns/cni-06825001-0036-4d80-8028-447e7c027a55" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.041 [INFO][4620] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.041 [INFO][4620] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.302 [INFO][4698] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.303 [INFO][4698] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.304 [INFO][4698] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.328 [WARNING][4698] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.328 [INFO][4698] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.331 [INFO][4698] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:23.350667 env[1823]: 2025-08-13 00:03:23.335 [INFO][4620] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:23.357387 env[1823]: time="2025-08-13T00:03:23.357012475Z" level=info msg="TearDown network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\" successfully" Aug 13 00:03:23.357387 env[1823]: time="2025-08-13T00:03:23.357185403Z" level=info msg="StopPodSandbox for \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\" returns successfully" Aug 13 00:03:23.370726 env[1823]: time="2025-08-13T00:03:23.369995604Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-czrjx,Uid:2ad37774-8f99-4834-9a29-4a2eececd14c,Namespace:calico-system,Attempt:1,}" Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.380000 audit: BPF prog-id=169 op=LOAD Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4650 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383963316437336365323866653637316433663361653165613663 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4650 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383963316437336365323866653637316433663361653165613663 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.381000 audit: BPF prog-id=170 op=LOAD Aug 13 00:03:23.381000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4650 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383963316437336365323866653637316433663361653165613663 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit: BPF prog-id=171 op=LOAD Aug 13 00:03:23.382000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4650 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383963316437336365323866653637316433663361653165613663 Aug 13 00:03:23.382000 audit: BPF prog-id=171 op=UNLOAD Aug 13 00:03:23.382000 audit: BPF prog-id=170 op=UNLOAD Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.382000 audit: BPF prog-id=172 op=LOAD Aug 13 00:03:23.382000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4650 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383963316437336365323866653637316433663361653165613663 Aug 13 00:03:23.393707 env[1823]: time="2025-08-13T00:03:23.393125540Z" level=info msg="TearDown network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\" successfully" Aug 13 00:03:23.393707 env[1823]: time="2025-08-13T00:03:23.393190379Z" level=info msg="StopPodSandbox for \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\" returns successfully" Aug 13 00:03:23.397501 env[1823]: time="2025-08-13T00:03:23.394421302Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8rqw2,Uid:7f2a0872-b653-4823-a791-53f494f41cd6,Namespace:kube-system,Attempt:1,}" Aug 13 00:03:23.485890 kubelet[2838]: I0813 00:03:23.485813 2838 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:23.676600 env[1823]: time="2025-08-13T00:03:23.676510763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qfmk7,Uid:23c8b7ce-3409-4554-8a49-6a153e13caef,Namespace:calico-system,Attempt:1,} returns sandbox id \"2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044\"" Aug 13 00:03:23.864088 systemd[1]: run-netns-cni\x2d3075fb4c\x2d191e\x2d84b3\x2d2dee\x2d911c11f095ed.mount: Deactivated successfully. Aug 13 00:03:23.864274 systemd[1]: run-netns-cni\x2d06825001\x2d0036\x2d4d80\x2d8028\x2d447e7c027a55.mount: Deactivated successfully. Aug 13 00:03:23.880627 env[1823]: time="2025-08-13T00:03:23.880512042Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cdd4cf7cc-tjfh2,Uid:9b141971-41e8-493d-832d-456ddc8f16b3,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037\"" Aug 13 00:03:24.048699 systemd-networkd[1537]: calia6e6a300362: Gained IPv6LL Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.094000 audit: BPF prog-id=173 op=LOAD Aug 13 00:03:24.094000 audit[4833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe54cf808 a2=98 a3=ffffe54cf7f8 items=0 ppid=4224 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.094000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.096000 audit: BPF prog-id=173 op=UNLOAD Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.097000 audit: BPF prog-id=174 op=LOAD Aug 13 00:03:24.097000 audit[4833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe54cf6b8 a2=74 a3=95 items=0 ppid=4224 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.097000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.098000 audit: BPF prog-id=174 op=UNLOAD Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { bpf } for pid=4833 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit: BPF prog-id=175 op=LOAD Aug 13 00:03:24.098000 audit[4833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe54cf6e8 a2=40 a3=ffffe54cf718 items=0 ppid=4224 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.098000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.098000 audit: BPF prog-id=175 op=UNLOAD Aug 13 00:03:24.098000 audit[4833]: AVC avc: denied { perfmon } for pid=4833 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.098000 audit[4833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe54cf800 a2=50 a3=0 items=0 ppid=4224 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.098000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.104000 audit: BPF prog-id=176 op=LOAD Aug 13 00:03:24.104000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc2af7428 a2=98 a3=ffffc2af7418 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.104000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.106000 audit: BPF prog-id=176 op=UNLOAD Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit: BPF prog-id=177 op=LOAD Aug 13 00:03:24.107000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc2af70b8 a2=74 a3=95 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.107000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.107000 audit: BPF prog-id=177 op=UNLOAD Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.107000 audit: BPF prog-id=178 op=LOAD Aug 13 00:03:24.107000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc2af7118 a2=94 a3=2 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.107000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.107000 audit: BPF prog-id=178 op=UNLOAD Aug 13 00:03:24.139481 systemd-networkd[1537]: cali9fd50bece16: Link UP Aug 13 00:03:24.147324 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:24.147592 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9fd50bece16: link becomes ready Aug 13 00:03:24.147848 systemd-networkd[1537]: cali9fd50bece16: Gained carrier Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.720 [INFO][4742] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.766 [INFO][4742] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0 csi-node-driver- calico-system 2ad37774-8f99-4834-9a29-4a2eececd14c 1013 0 2025-08-13 00:02:53 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-17-40 csi-node-driver-czrjx eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali9fd50bece16 [] [] }} ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.766 [INFO][4742] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.973 [INFO][4799] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" HandleID="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.973 [INFO][4799] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" HandleID="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40000e0a70), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-40", "pod":"csi-node-driver-czrjx", "timestamp":"2025-08-13 00:03:23.973223772 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.973 [INFO][4799] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.973 [INFO][4799] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.974 [INFO][4799] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:23.999 [INFO][4799] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.033 [INFO][4799] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.045 [INFO][4799] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.053 [INFO][4799] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.073 [INFO][4799] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.073 [INFO][4799] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.079 [INFO][4799] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16 Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.089 [INFO][4799] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.112 [INFO][4799] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.7/26] block=192.168.110.0/26 handle="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.112 [INFO][4799] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.7/26] handle="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" host="ip-172-31-17-40" Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.112 [INFO][4799] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:24.208587 env[1823]: 2025-08-13 00:03:24.117 [INFO][4799] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.7/26] IPv6=[] ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" HandleID="k8s-pod-network.8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:24.209953 env[1823]: 2025-08-13 00:03:24.125 [INFO][4742] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ad37774-8f99-4834-9a29-4a2eececd14c", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"csi-node-driver-czrjx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.110.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9fd50bece16", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:24.209953 env[1823]: 2025-08-13 00:03:24.125 [INFO][4742] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.7/32] ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:24.209953 env[1823]: 2025-08-13 00:03:24.125 [INFO][4742] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9fd50bece16 ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:24.209953 env[1823]: 2025-08-13 00:03:24.154 [INFO][4742] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:24.209953 env[1823]: 2025-08-13 00:03:24.157 [INFO][4742] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ad37774-8f99-4834-9a29-4a2eececd14c", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16", Pod:"csi-node-driver-czrjx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.110.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9fd50bece16", MAC:"66:c9:05:2b:0d:fc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:24.209953 env[1823]: 2025-08-13 00:03:24.197 [INFO][4742] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16" Namespace="calico-system" Pod="csi-node-driver-czrjx" WorkloadEndpoint="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:24.271745 env[1823]: time="2025-08-13T00:03:24.271642914Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:24.272136 env[1823]: time="2025-08-13T00:03:24.272079386Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:24.272396 env[1823]: time="2025-08-13T00:03:24.272323322Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:24.273022 env[1823]: time="2025-08-13T00:03:24.272938326Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16 pid=4849 runtime=io.containerd.runc.v2 Aug 13 00:03:24.359197 systemd[1]: run-containerd-runc-k8s.io-8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16-runc.tveyNP.mount: Deactivated successfully. Aug 13 00:03:24.376115 systemd[1]: Started cri-containerd-8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16.scope. Aug 13 00:03:24.389969 systemd-networkd[1537]: cali1e71e06228c: Link UP Aug 13 00:03:24.404258 systemd-networkd[1537]: cali1e71e06228c: Gained carrier Aug 13 00:03:24.404537 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1e71e06228c: link becomes ready Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:23.752 [INFO][4751] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:23.825 [INFO][4751] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0 coredns-674b8bbfcf- kube-system 7f2a0872-b653-4823-a791-53f494f41cd6 1014 0 2025-08-13 00:02:31 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-17-40 coredns-674b8bbfcf-8rqw2 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali1e71e06228c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:23.825 [INFO][4751] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.076 [INFO][4808] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" HandleID="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.077 [INFO][4808] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" HandleID="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000308150), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-17-40", "pod":"coredns-674b8bbfcf-8rqw2", "timestamp":"2025-08-13 00:03:24.076786619 +0000 UTC"}, Hostname:"ip-172-31-17-40", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.077 [INFO][4808] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.113 [INFO][4808] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.113 [INFO][4808] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-40' Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.149 [INFO][4808] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.204 [INFO][4808] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.238 [INFO][4808] ipam/ipam.go 511: Trying affinity for 192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.243 [INFO][4808] ipam/ipam.go 158: Attempting to load block cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.253 [INFO][4808] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.110.0/26 host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.253 [INFO][4808] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.110.0/26 handle="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.263 [INFO][4808] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178 Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.281 [INFO][4808] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.110.0/26 handle="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.321 [INFO][4808] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.110.8/26] block=192.168.110.0/26 handle="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.321 [INFO][4808] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.110.8/26] handle="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" host="ip-172-31-17-40" Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.321 [INFO][4808] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:24.456905 env[1823]: 2025-08-13 00:03:24.321 [INFO][4808] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.110.8/26] IPv6=[] ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" HandleID="k8s-pod-network.80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:24.459671 env[1823]: 2025-08-13 00:03:24.349 [INFO][4751] cni-plugin/k8s.go 418: Populated endpoint ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7f2a0872-b653-4823-a791-53f494f41cd6", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"", Pod:"coredns-674b8bbfcf-8rqw2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e71e06228c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:24.459671 env[1823]: 2025-08-13 00:03:24.349 [INFO][4751] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.110.8/32] ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:24.459671 env[1823]: 2025-08-13 00:03:24.349 [INFO][4751] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1e71e06228c ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:24.459671 env[1823]: 2025-08-13 00:03:24.410 [INFO][4751] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:24.459671 env[1823]: 2025-08-13 00:03:24.416 [INFO][4751] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7f2a0872-b653-4823-a791-53f494f41cd6", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178", Pod:"coredns-674b8bbfcf-8rqw2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e71e06228c", MAC:"1a:3b:4f:ef:e7:6f", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:24.459671 env[1823]: 2025-08-13 00:03:24.452 [INFO][4751] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178" Namespace="kube-system" Pod="coredns-674b8bbfcf-8rqw2" WorkloadEndpoint="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:24.510159 env[1823]: time="2025-08-13T00:03:24.510021229Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:24.510384 env[1823]: time="2025-08-13T00:03:24.510181100Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:24.510384 env[1823]: time="2025-08-13T00:03:24.510245231Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:24.510682 env[1823]: time="2025-08-13T00:03:24.510606916Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178 pid=4891 runtime=io.containerd.runc.v2 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.524000 audit: BPF prog-id=179 op=LOAD Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4849 pid=4860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865326437643231396462643132346265656462636139343937613431 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4849 pid=4860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865326437643231396462643132346265656462636139343937613431 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.525000 audit: BPF prog-id=180 op=LOAD Aug 13 00:03:24.525000 audit[4860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4849 pid=4860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865326437643231396462643132346265656462636139343937613431 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit: BPF prog-id=181 op=LOAD Aug 13 00:03:24.526000 audit[4860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4849 pid=4860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865326437643231396462643132346265656462636139343937613431 Aug 13 00:03:24.526000 audit: BPF prog-id=181 op=UNLOAD Aug 13 00:03:24.526000 audit: BPF prog-id=180 op=UNLOAD Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { perfmon } for pid=4860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit[4860]: AVC avc: denied { bpf } for pid=4860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.526000 audit: BPF prog-id=182 op=LOAD Aug 13 00:03:24.526000 audit[4860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4849 pid=4860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865326437643231396462643132346265656462636139343937613431 Aug 13 00:03:24.577774 systemd[1]: Started cri-containerd-80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178.scope. Aug 13 00:03:24.622584 systemd-networkd[1537]: cali887cc257d98: Gained IPv6LL Aug 13 00:03:24.640000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:24.640000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40028ed950 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:03:24.640000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:24.642000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:24.642000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001c200c0 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:03:24.642000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.688000 audit: BPF prog-id=183 op=LOAD Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4891 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653536633263333766393335366233393639313962633630393730 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4891 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653536633263333766393335366233393639313962633630393730 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.690000 audit: BPF prog-id=184 op=LOAD Aug 13 00:03:24.690000 audit[4901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4891 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653536633263333766393335366233393639313962633630393730 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.691000 audit: BPF prog-id=185 op=LOAD Aug 13 00:03:24.691000 audit[4901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4891 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653536633263333766393335366233393639313962633630393730 Aug 13 00:03:24.692000 audit: BPF prog-id=185 op=UNLOAD Aug 13 00:03:24.692000 audit: BPF prog-id=184 op=UNLOAD Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { perfmon } for pid=4901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit[4901]: AVC avc: denied { bpf } for pid=4901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.692000 audit: BPF prog-id=186 op=LOAD Aug 13 00:03:24.692000 audit[4901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4891 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653536633263333766393335366233393639313962633630393730 Aug 13 00:03:24.703258 env[1823]: time="2025-08-13T00:03:24.703143095Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-czrjx,Uid:2ad37774-8f99-4834-9a29-4a2eececd14c,Namespace:calico-system,Attempt:1,} returns sandbox id \"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16\"" Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.792000 audit: BPF prog-id=187 op=LOAD Aug 13 00:03:24.792000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc2af70d8 a2=40 a3=ffffc2af7108 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.792000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.792000 audit: BPF prog-id=187 op=UNLOAD Aug 13 00:03:24.793000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.793000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc2af71f0 a2=50 a3=0 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.793000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.812881 env[1823]: time="2025-08-13T00:03:24.812793763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8rqw2,Uid:7f2a0872-b653-4823-a791-53f494f41cd6,Namespace:kube-system,Attempt:1,} returns sandbox id \"80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178\"" Aug 13 00:03:24.830895 env[1823]: time="2025-08-13T00:03:24.830828828Z" level=info msg="CreateContainer within sandbox \"80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 00:03:24.869034 env[1823]: time="2025-08-13T00:03:24.868931395Z" level=info msg="CreateContainer within sandbox \"80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"ca549bf7e9a4624c3e90de3029c6e685ac13a9f41eedb5c8c5af4abbf5582553\"" Aug 13 00:03:24.871821 env[1823]: time="2025-08-13T00:03:24.870239912Z" level=info msg="StartContainer for \"ca549bf7e9a4624c3e90de3029c6e685ac13a9f41eedb5c8c5af4abbf5582553\"" Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc2af7148 a2=28 a3=ffffc2af7278 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc2af7178 a2=28 a3=ffffc2af72a8 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc2af7028 a2=28 a3=ffffc2af7158 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc2af7198 a2=28 a3=ffffc2af72c8 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc2af7178 a2=28 a3=ffffc2af72a8 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc2af7168 a2=28 a3=ffffc2af7298 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc2af7198 a2=28 a3=ffffc2af72c8 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc2af7178 a2=28 a3=ffffc2af72a8 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc2af7198 a2=28 a3=ffffc2af72c8 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.874000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.874000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc2af7168 a2=28 a3=ffffc2af7298 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc2af71e8 a2=28 a3=ffffc2af7328 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.878000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc2af6f20 a2=50 a3=0 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.878000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit: BPF prog-id=188 op=LOAD Aug 13 00:03:24.878000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc2af6f28 a2=94 a3=5 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.878000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.878000 audit: BPF prog-id=188 op=UNLOAD Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc2af7030 a2=50 a3=0 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.878000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc2af7178 a2=4 a3=3 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.878000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.878000 audit[4834]: AVC avc: denied { confidentiality } for pid=4834 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.878000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc2af7158 a2=94 a3=6 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.878000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.891000 audit[4834]: AVC avc: denied { confidentiality } for pid=4834 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.891000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc2af6928 a2=94 a3=83 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.891000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.894000 audit[4834]: AVC avc: denied { confidentiality } for pid=4834 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.894000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc2af6928 a2=94 a3=83 items=0 ppid=4224 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.894000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.934646 systemd[1]: run-containerd-runc-k8s.io-d35634b184746e84b3ad8f1b1ef11be9f87bff2f7a5577f36b180614dd267f47-runc.zjKPa0.mount: Deactivated successfully. Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.992000 audit: BPF prog-id=189 op=LOAD Aug 13 00:03:24.992000 audit[4959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe96b3d48 a2=98 a3=ffffe96b3d38 items=0 ppid=4224 pid=4959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.992000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:03:24.998000 audit: BPF prog-id=189 op=UNLOAD Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit: BPF prog-id=190 op=LOAD Aug 13 00:03:24.998000 audit[4959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe96b3bf8 a2=74 a3=95 items=0 ppid=4224 pid=4959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.998000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:03:24.998000 audit: BPF prog-id=190 op=UNLOAD Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { perfmon } for pid=4959 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit[4959]: AVC avc: denied { bpf } for pid=4959 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.998000 audit: BPF prog-id=191 op=LOAD Aug 13 00:03:24.998000 audit[4959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe96b3c28 a2=40 a3=ffffe96b3c58 items=0 ppid=4224 pid=4959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.998000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:03:25.000000 audit: BPF prog-id=191 op=UNLOAD Aug 13 00:03:25.005459 systemd[1]: Started cri-containerd-ca549bf7e9a4624c3e90de3029c6e685ac13a9f41eedb5c8c5af4abbf5582553.scope. Aug 13 00:03:25.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.112000 audit: BPF prog-id=192 op=LOAD Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4891 pid=4949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353439626637653961343632346333653930646533303239633665 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4891 pid=4949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353439626637653961343632346333653930646533303239633665 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit: BPF prog-id=193 op=LOAD Aug 13 00:03:25.113000 audit[4949]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4891 pid=4949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353439626637653961343632346333653930646533303239633665 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.113000 audit: BPF prog-id=194 op=LOAD Aug 13 00:03:25.113000 audit[4949]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4891 pid=4949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353439626637653961343632346333653930646533303239633665 Aug 13 00:03:25.114000 audit: BPF prog-id=194 op=UNLOAD Aug 13 00:03:25.114000 audit: BPF prog-id=193 op=UNLOAD Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { perfmon } for pid=4949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit[4949]: AVC avc: denied { bpf } for pid=4949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.114000 audit: BPF prog-id=195 op=LOAD Aug 13 00:03:25.114000 audit[4949]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4891 pid=4949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353439626637653961343632346333653930646533303239633665 Aug 13 00:03:25.189034 env[1823]: time="2025-08-13T00:03:25.188873708Z" level=info msg="StartContainer for \"ca549bf7e9a4624c3e90de3029c6e685ac13a9f41eedb5c8c5af4abbf5582553\" returns successfully" Aug 13 00:03:25.501000 audit[4976]: AVC avc: denied { getattr } for pid=4976 comm="coredns" path="cgroup:[4026532993]" dev="nsfs" ino=4026532993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c776,c892 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 00:03:25.501000 audit[4976]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000116af8 a2=4000146578 a3=0 items=0 ppid=4891 pid=4976 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c776,c892 key=(null) Aug 13 00:03:25.501000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 00:03:25.887790 systemd-networkd[1537]: vxlan.calico: Link UP Aug 13 00:03:25.887812 systemd-networkd[1537]: vxlan.calico: Gained carrier Aug 13 00:03:25.978723 kubelet[2838]: I0813 00:03:25.978030 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-8rqw2" podStartSLOduration=54.977998736 podStartE2EDuration="54.977998736s" podCreationTimestamp="2025-08-13 00:02:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:03:25.94610512 +0000 UTC m=+58.861024540" watchObservedRunningTime="2025-08-13 00:03:25.977998736 +0000 UTC m=+58.892918108" Aug 13 00:03:26.159668 systemd-networkd[1537]: cali9fd50bece16: Gained IPv6LL Aug 13 00:03:26.173819 (udev-worker)[4006]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:03:26.177000 audit[5015]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=5015 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.178000 audit: BPF prog-id=196 op=LOAD Aug 13 00:03:26.178000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe066b538 a2=98 a3=ffffe066b528 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.178000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.181000 audit: BPF prog-id=196 op=UNLOAD Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.181000 audit: BPF prog-id=197 op=LOAD Aug 13 00:03:26.181000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe066b218 a2=74 a3=95 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.181000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.182000 audit: BPF prog-id=197 op=UNLOAD Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit: BPF prog-id=198 op=LOAD Aug 13 00:03:26.182000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe066b278 a2=94 a3=2 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.182000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.182000 audit: BPF prog-id=198 op=UNLOAD Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe066b2a8 a2=28 a3=ffffe066b3d8 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.182000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe066b2d8 a2=28 a3=ffffe066b408 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.182000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe066b188 a2=28 a3=ffffe066b2b8 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.182000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe066b2f8 a2=28 a3=ffffe066b428 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.182000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.182000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.182000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe066b2d8 a2=28 a3=ffffe066b408 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.182000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.183000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.183000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe066b2c8 a2=28 a3=ffffe066b3f8 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.183000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.183000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.183000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe066b2f8 a2=28 a3=ffffe066b428 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.183000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.183000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.183000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe066b2d8 a2=28 a3=ffffe066b408 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.183000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.183000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.183000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe066b2f8 a2=28 a3=ffffe066b428 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.183000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.183000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.183000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe066b2c8 a2=28 a3=ffffe066b3f8 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.183000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.177000 audit[5015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc895dee0 a2=0 a3=1 items=0 ppid=2944 pid=5015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.183000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.177000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:26.183000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe066b348 a2=28 a3=ffffe066b488 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.183000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.184000 audit: BPF prog-id=199 op=LOAD Aug 13 00:03:26.184000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe066b168 a2=40 a3=ffffe066b198 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.184000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.184000 audit: BPF prog-id=199 op=UNLOAD Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe066b190 a2=50 a3=0 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.185000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe066b190 a2=50 a3=0 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.185000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.185000 audit: BPF prog-id=200 op=LOAD Aug 13 00:03:26.185000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe066a8f8 a2=94 a3=2 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.185000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.189000 audit: BPF prog-id=200 op=UNLOAD Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { perfmon } for pid=5020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit[5020]: AVC avc: denied { bpf } for pid=5020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.189000 audit: BPF prog-id=201 op=LOAD Aug 13 00:03:26.189000 audit[5020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe066aa88 a2=94 a3=30 items=0 ppid=4224 pid=5020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.189000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.245000 audit: BPF prog-id=202 op=LOAD Aug 13 00:03:26.245000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffca605fd8 a2=98 a3=ffffca605fc8 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.245000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:26.245000 audit: BPF prog-id=202 op=UNLOAD Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit: BPF prog-id=203 op=LOAD Aug 13 00:03:26.246000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffca605c68 a2=74 a3=95 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:26.246000 audit: BPF prog-id=203 op=UNLOAD Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:26.246000 audit: BPF prog-id=204 op=LOAD Aug 13 00:03:26.246000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffca605cc8 a2=94 a3=2 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:26.246000 audit: BPF prog-id=204 op=UNLOAD Aug 13 00:03:26.356000 audit[5015]: NETFILTER_CFG table=nat:108 family=2 entries=56 op=nft_register_chain pid=5015 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:26.356000 audit[5015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffc895dee0 a2=0 a3=1 items=0 ppid=2944 pid=5015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:26.414722 systemd-networkd[1537]: cali1e71e06228c: Gained IPv6LL Aug 13 00:03:26.588000 audit[5029]: NETFILTER_CFG table=filter:109 family=2 entries=14 op=nft_register_rule pid=5029 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:26.588000 audit[5029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd4f5c1b0 a2=0 a3=1 items=0 ppid=2944 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.588000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:26.743000 audit[5029]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=5029 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:26.743000 audit[5029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd4f5c1b0 a2=0 a3=1 items=0 ppid=2944 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:26.743000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:26.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.17.40:22-139.178.89.65:54062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:26.759123 systemd[1]: Started sshd@7-172.31.17.40:22-139.178.89.65:54062.service. Aug 13 00:03:26.990610 systemd-networkd[1537]: vxlan.calico: Gained IPv6LL Aug 13 00:03:27.015000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:27.015000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001d51bc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:03:27.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:27.016000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:27.016000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001d51be0 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:03:27.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:27.017000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:27.017000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001d51e00 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:03:27.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:27.022000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:27.022000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002919780 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:03:27.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:27.085802 sshd[5032]: Accepted publickey for core from 139.178.89.65 port 54062 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:27.084000 audit[5032]: USER_ACCT pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:27.090000 audit[5032]: CRED_ACQ pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:27.090000 audit[5032]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd79ca510 a2=3 a3=1 items=0 ppid=1 pid=5032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:27.092302 sshd[5032]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:27.116911 systemd[1]: Started session-8.scope. Aug 13 00:03:27.117753 systemd-logind[1812]: New session 8 of user core. Aug 13 00:03:27.142000 audit[5032]: USER_START pid=5032 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:27.145000 audit[5037]: CRED_ACQ pid=5037 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:27.148447 env[1823]: time="2025-08-13T00:03:27.148320804Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:27.152339 env[1823]: time="2025-08-13T00:03:27.152258537Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:27.156211 env[1823]: time="2025-08-13T00:03:27.156124615Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:27.160306 env[1823]: time="2025-08-13T00:03:27.160228939Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:27.162888 env[1823]: time="2025-08-13T00:03:27.161765210Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Aug 13 00:03:27.167484 env[1823]: time="2025-08-13T00:03:27.166022961Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Aug 13 00:03:27.215558 env[1823]: time="2025-08-13T00:03:27.215126234Z" level=info msg="CreateContainer within sandbox \"9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Aug 13 00:03:27.243537 env[1823]: time="2025-08-13T00:03:27.243352588Z" level=info msg="CreateContainer within sandbox \"9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f\"" Aug 13 00:03:27.246311 env[1823]: time="2025-08-13T00:03:27.246236051Z" level=info msg="StartContainer for \"56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f\"" Aug 13 00:03:27.354393 env[1823]: time="2025-08-13T00:03:27.353710736Z" level=info msg="StopPodSandbox for \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\"" Aug 13 00:03:27.434041 systemd[1]: Started cri-containerd-56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f.scope. Aug 13 00:03:27.596237 kernel: kauditd_printk_skb: 733 callbacks suppressed Aug 13 00:03:27.596470 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.619490 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.643674 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.657069 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.669636 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.681336 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.695470 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.715171 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.715330 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 00:03:27.715422 kernel: audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.589000 audit: BPF prog-id=205 op=LOAD Aug 13 00:03:27.589000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffca605c88 a2=40 a3=ffffca605cb8 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.589000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.600000 audit: BPF prog-id=205 op=UNLOAD Aug 13 00:03:27.600000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.600000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffca605da0 a2=50 a3=0 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.600000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.694000 audit: BPF prog-id=206 op=LOAD Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001cdb38 a2=10 a3=0 items=0 ppid=4117 pid=5055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663762366564663064613532343462343035343864636339396338 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001cd5a0 a2=3c a3=0 items=0 ppid=4117 pid=5055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663762366564663064613532343462343035343864636339396338 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit: BPF prog-id=207 op=LOAD Aug 13 00:03:27.704000 audit[5055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cd8e0 a2=78 a3=0 items=0 ppid=4117 pid=5055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663762366564663064613532343462343035343864636339396338 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit: BPF prog-id=208 op=LOAD Aug 13 00:03:27.704000 audit[5055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001cd670 a2=78 a3=0 items=0 ppid=4117 pid=5055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663762366564663064613532343462343035343864636339396338 Aug 13 00:03:27.704000 audit: BPF prog-id=208 op=UNLOAD Aug 13 00:03:27.704000 audit: BPF prog-id=207 op=UNLOAD Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { perfmon } for pid=5055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.704000 audit[5055]: AVC avc: denied { bpf } for pid=5055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffca605cf8 a2=28 a3=ffffca605e28 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.723000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.723000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffca605d28 a2=28 a3=ffffca605e58 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.723000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.723000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffca605bd8 a2=28 a3=ffffca605d08 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.723000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.723000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffca605d48 a2=28 a3=ffffca605e78 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.723000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.723000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffca605d28 a2=28 a3=ffffca605e58 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.723000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.723000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffca605d18 a2=28 a3=ffffca605e48 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.723000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.723000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.723000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffca605d48 a2=28 a3=ffffca605e78 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.723000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.704000 audit[5055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cdb40 a2=78 a3=0 items=0 ppid=4117 pid=5055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663762366564663064613532343462343035343864636339396338 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffca605d28 a2=28 a3=ffffca605e58 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.725000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffca605d48 a2=28 a3=ffffca605e78 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.725000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffca605d18 a2=28 a3=ffffca605e48 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.725000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffca605d98 a2=28 a3=ffffca605ed8 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.725000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffca605ad0 a2=50 a3=0 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.725000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.725000 audit: BPF prog-id=210 op=LOAD Aug 13 00:03:27.725000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffca605ad8 a2=94 a3=5 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.725000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.726000 audit: BPF prog-id=210 op=UNLOAD Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffca605be0 a2=50 a3=0 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffca605d28 a2=4 a3=3 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.726000 audit[5026]: AVC avc: denied { confidentiality } for pid=5026 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:27.726000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffca605d08 a2=94 a3=6 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.730000 audit[5026]: AVC avc: denied { confidentiality } for pid=5026 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:27.730000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffca6054d8 a2=94 a3=83 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.731000 audit[5026]: AVC avc: denied { confidentiality } for pid=5026 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:27.731000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffca6054d8 a2=94 a3=83 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.741178 sshd[5032]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:27.744000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.744000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffca606f18 a2=10 a3=ffffca607008 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.744000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.744000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.744000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffca606dd8 a2=10 a3=ffffca606ec8 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.744000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.746000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.747000 audit[5032]: USER_END pid=5032 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:27.747000 audit[5032]: CRED_DISP pid=5032 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:27.746000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffca606d48 a2=10 a3=ffffca606ec8 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.746000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.17.40:22-139.178.89.65:54062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:27.750000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:27.750344 systemd[1]: sshd@7-172.31.17.40:22-139.178.89.65:54062.service: Deactivated successfully. Aug 13 00:03:27.751846 systemd[1]: session-8.scope: Deactivated successfully. Aug 13 00:03:27.750000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffca606d48 a2=10 a3=ffffca606ec8 items=0 ppid=4224 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:27.750000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:27.754930 systemd-logind[1812]: Session 8 logged out. Waiting for processes to exit. Aug 13 00:03:27.759666 systemd-logind[1812]: Removed session 8. Aug 13 00:03:27.775000 audit: BPF prog-id=201 op=UNLOAD Aug 13 00:03:27.868593 env[1823]: time="2025-08-13T00:03:27.868448830Z" level=info msg="StartContainer for \"56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f\" returns successfully" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.686 [WARNING][5073] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0", GenerateName:"calico-kube-controllers-549cb8fbb5-", Namespace:"calico-system", SelfLink:"", UID:"2685aad3-6567-4560-87b3-d7416a4b13de", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"549cb8fbb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b", Pod:"calico-kube-controllers-549cb8fbb5-cw54h", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.110.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali8a6eb094f9f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.687 [INFO][5073] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.687 [INFO][5073] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" iface="eth0" netns="" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.687 [INFO][5073] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.687 [INFO][5073] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.847 [INFO][5095] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.848 [INFO][5095] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.848 [INFO][5095] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.866 [WARNING][5095] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.866 [INFO][5095] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.876 [INFO][5095] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:27.884490 env[1823]: 2025-08-13 00:03:27.881 [INFO][5073] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:27.886697 env[1823]: time="2025-08-13T00:03:27.886637644Z" level=info msg="TearDown network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\" successfully" Aug 13 00:03:27.886969 env[1823]: time="2025-08-13T00:03:27.886916380Z" level=info msg="StopPodSandbox for \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\" returns successfully" Aug 13 00:03:27.888156 env[1823]: time="2025-08-13T00:03:27.888099056Z" level=info msg="RemovePodSandbox for \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\"" Aug 13 00:03:27.888859 env[1823]: time="2025-08-13T00:03:27.888776533Z" level=info msg="Forcibly stopping sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\"" Aug 13 00:03:28.175828 systemd[1]: run-containerd-runc-k8s.io-56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f-runc.W6XBf6.mount: Deactivated successfully. Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.100 [WARNING][5126] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0", GenerateName:"calico-kube-controllers-549cb8fbb5-", Namespace:"calico-system", SelfLink:"", UID:"2685aad3-6567-4560-87b3-d7416a4b13de", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"549cb8fbb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"9157a494717b49e71b2869b6fd55b1239eb9353d96ccf9acdc875da6e5972f1b", Pod:"calico-kube-controllers-549cb8fbb5-cw54h", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.110.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali8a6eb094f9f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.101 [INFO][5126] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.113 [INFO][5126] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" iface="eth0" netns="" Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.165 [INFO][5126] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.165 [INFO][5126] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.268 [INFO][5167] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.269 [INFO][5167] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.269 [INFO][5167] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.286 [WARNING][5167] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.286 [INFO][5167] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" HandleID="k8s-pod-network.67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Workload="ip--172--31--17--40-k8s-calico--kube--controllers--549cb8fbb5--cw54h-eth0" Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.290 [INFO][5167] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:28.298217 env[1823]: 2025-08-13 00:03:28.293 [INFO][5126] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3" Aug 13 00:03:28.299761 env[1823]: time="2025-08-13T00:03:28.299690666Z" level=info msg="TearDown network for sandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\" successfully" Aug 13 00:03:28.307898 env[1823]: time="2025-08-13T00:03:28.307802871Z" level=info msg="RemovePodSandbox \"67e640a85cb1c25bf8f9279a41d68cdae10e5ab16e37cacf0987249b231527b3\" returns successfully" Aug 13 00:03:28.309182 env[1823]: time="2025-08-13T00:03:28.309131832Z" level=info msg="StopPodSandbox for \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\"" Aug 13 00:03:28.648000 audit[5211]: NETFILTER_CFG table=nat:111 family=2 entries=15 op=nft_register_chain pid=5211 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:28.648000 audit[5211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffffeaf4ae0 a2=0 a3=ffffb5eeefa8 items=0 ppid=4224 pid=5211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.648000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.464 [WARNING][5186] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ad37774-8f99-4834-9a29-4a2eececd14c", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16", Pod:"csi-node-driver-czrjx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.110.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9fd50bece16", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.465 [INFO][5186] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.465 [INFO][5186] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" iface="eth0" netns="" Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.465 [INFO][5186] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.465 [INFO][5186] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.597 [INFO][5195] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.598 [INFO][5195] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.599 [INFO][5195] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.630 [WARNING][5195] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.635 [INFO][5195] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.641 [INFO][5195] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:28.654535 env[1823]: 2025-08-13 00:03:28.651 [INFO][5186] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:28.655625 env[1823]: time="2025-08-13T00:03:28.655570193Z" level=info msg="TearDown network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\" successfully" Aug 13 00:03:28.655778 env[1823]: time="2025-08-13T00:03:28.655742196Z" level=info msg="StopPodSandbox for \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\" returns successfully" Aug 13 00:03:28.656715 env[1823]: time="2025-08-13T00:03:28.656661687Z" level=info msg="RemovePodSandbox for \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\"" Aug 13 00:03:28.656978 env[1823]: time="2025-08-13T00:03:28.656911502Z" level=info msg="Forcibly stopping sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\"" Aug 13 00:03:28.674000 audit[5209]: NETFILTER_CFG table=mangle:112 family=2 entries=16 op=nft_register_chain pid=5209 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:28.674000 audit[5209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffe22abbd0 a2=0 a3=ffffb7825fa8 items=0 ppid=4224 pid=5209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.674000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:28.735000 audit[5207]: NETFILTER_CFG table=raw:113 family=2 entries=21 op=nft_register_chain pid=5207 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:28.735000 audit[5207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff187c230 a2=0 a3=ffffb2810fa8 items=0 ppid=4224 pid=5207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.735000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:28.830000 audit[5228]: NETFILTER_CFG table=filter:114 family=2 entries=333 op=nft_register_chain pid=5228 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:28.830000 audit[5228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=196320 a0=3 a1=fffffbb4a2b0 a2=0 a3=ffffbe44ffa8 items=0 ppid=4224 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.830000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:28.858 [WARNING][5224] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ad37774-8f99-4834-9a29-4a2eececd14c", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16", Pod:"csi-node-driver-czrjx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.110.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9fd50bece16", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:28.859 [INFO][5224] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:28.859 [INFO][5224] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" iface="eth0" netns="" Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:28.859 [INFO][5224] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:28.859 [INFO][5224] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:29.001 [INFO][5238] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:29.001 [INFO][5238] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:29.001 [INFO][5238] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:29.031 [WARNING][5238] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:29.031 [INFO][5238] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" HandleID="k8s-pod-network.31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Workload="ip--172--31--17--40-k8s-csi--node--driver--czrjx-eth0" Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:29.036 [INFO][5238] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:29.045809 env[1823]: 2025-08-13 00:03:29.039 [INFO][5224] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29" Aug 13 00:03:29.047147 env[1823]: time="2025-08-13T00:03:29.047083593Z" level=info msg="TearDown network for sandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\" successfully" Aug 13 00:03:29.065419 env[1823]: time="2025-08-13T00:03:29.065313969Z" level=info msg="RemovePodSandbox \"31bd830835fc804770d6d1b1a703bf5303a37abcee51ccdf7a8c64b05c6fcb29\" returns successfully" Aug 13 00:03:29.067750 env[1823]: time="2025-08-13T00:03:29.067680877Z" level=info msg="StopPodSandbox for \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\"" Aug 13 00:03:29.093016 systemd[1]: run-containerd-runc-k8s.io-56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f-runc.PoK9Gw.mount: Deactivated successfully. Aug 13 00:03:29.105861 env[1823]: time="2025-08-13T00:03:29.105754463Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:29.122276 env[1823]: time="2025-08-13T00:03:29.122203461Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:29.137874 env[1823]: time="2025-08-13T00:03:29.137800626Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:29.154391 env[1823]: time="2025-08-13T00:03:29.154160376Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:29.158896 env[1823]: time="2025-08-13T00:03:29.155893777Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Aug 13 00:03:29.167174 env[1823]: time="2025-08-13T00:03:29.167099202Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 00:03:29.178638 env[1823]: time="2025-08-13T00:03:29.178567977Z" level=info msg="CreateContainer within sandbox \"bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Aug 13 00:03:29.223915 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4210257977.mount: Deactivated successfully. Aug 13 00:03:29.238477 env[1823]: time="2025-08-13T00:03:29.238409209Z" level=info msg="CreateContainer within sandbox \"bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"e75c7e452412dd855f83a233e0e21c410097994cc56417acdb7ed7335b848dce\"" Aug 13 00:03:29.239930 env[1823]: time="2025-08-13T00:03:29.239868483Z" level=info msg="StartContainer for \"e75c7e452412dd855f83a233e0e21c410097994cc56417acdb7ed7335b848dce\"" Aug 13 00:03:29.356499 systemd[1]: run-containerd-runc-k8s.io-e75c7e452412dd855f83a233e0e21c410097994cc56417acdb7ed7335b848dce-runc.0vky1A.mount: Deactivated successfully. Aug 13 00:03:29.365245 systemd[1]: Started cri-containerd-e75c7e452412dd855f83a233e0e21c410097994cc56417acdb7ed7335b848dce.scope. Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.314 [WARNING][5261] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8c9425-5d62-40c6-9975-ebaf462e6a40", ResourceVersion:"983", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4", Pod:"calico-apiserver-cdd4cf7cc-8nm9d", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif0c049a87c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.315 [INFO][5261] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.315 [INFO][5261] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" iface="eth0" netns="" Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.315 [INFO][5261] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.315 [INFO][5261] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.446 [INFO][5293] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.446 [INFO][5293] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.446 [INFO][5293] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.467 [WARNING][5293] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.467 [INFO][5293] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.470 [INFO][5293] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:29.481480 env[1823]: 2025-08-13 00:03:29.475 [INFO][5261] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.483531 env[1823]: time="2025-08-13T00:03:29.483470079Z" level=info msg="TearDown network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\" successfully" Aug 13 00:03:29.483755 env[1823]: time="2025-08-13T00:03:29.483709081Z" level=info msg="StopPodSandbox for \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\" returns successfully" Aug 13 00:03:29.484752 env[1823]: time="2025-08-13T00:03:29.484686223Z" level=info msg="RemovePodSandbox for \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\"" Aug 13 00:03:29.485982 env[1823]: time="2025-08-13T00:03:29.485869353Z" level=info msg="Forcibly stopping sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\"" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.615 [WARNING][5308] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8c9425-5d62-40c6-9975-ebaf462e6a40", ResourceVersion:"983", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4", Pod:"calico-apiserver-cdd4cf7cc-8nm9d", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif0c049a87c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.616 [INFO][5308] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.616 [INFO][5308] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" iface="eth0" netns="" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.616 [INFO][5308] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.616 [INFO][5308] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.678 [INFO][5316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.679 [INFO][5316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.679 [INFO][5316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.701 [WARNING][5316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.702 [INFO][5316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" HandleID="k8s-pod-network.5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--8nm9d-eth0" Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.705 [INFO][5316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:29.710461 env[1823]: 2025-08-13 00:03:29.707 [INFO][5308] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5" Aug 13 00:03:29.711711 env[1823]: time="2025-08-13T00:03:29.711651902Z" level=info msg="TearDown network for sandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\" successfully" Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.740000 audit: BPF prog-id=211 op=LOAD Aug 13 00:03:29.741000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.741000 audit[5283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4237 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537356337653435323431326464383535663833613233336530653231 Aug 13 00:03:29.742000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.742000 audit[5283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4237 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537356337653435323431326464383535663833613233336530653231 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.743000 audit: BPF prog-id=212 op=LOAD Aug 13 00:03:29.743000 audit[5283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4237 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537356337653435323431326464383535663833613233336530653231 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.746000 audit: BPF prog-id=213 op=LOAD Aug 13 00:03:29.746000 audit[5283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4237 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537356337653435323431326464383535663833613233336530653231 Aug 13 00:03:29.748000 audit: BPF prog-id=213 op=UNLOAD Aug 13 00:03:29.748000 audit: BPF prog-id=212 op=UNLOAD Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.748000 audit: BPF prog-id=214 op=LOAD Aug 13 00:03:29.748000 audit[5283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4237 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537356337653435323431326464383535663833613233336530653231 Aug 13 00:03:29.752215 env[1823]: time="2025-08-13T00:03:29.752152770Z" level=info msg="RemovePodSandbox \"5108d465d1d134322b704f089212ba04e090c67e37209982871ac09d62645dc5\" returns successfully" Aug 13 00:03:29.753410 env[1823]: time="2025-08-13T00:03:29.753301002Z" level=info msg="StopPodSandbox for \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\"" Aug 13 00:03:29.895314 kubelet[2838]: I0813 00:03:29.894543 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-549cb8fbb5-cw54h" podStartSLOduration=28.014611243 podStartE2EDuration="35.8944943s" podCreationTimestamp="2025-08-13 00:02:54 +0000 UTC" firstStartedPulling="2025-08-13 00:03:19.28433044 +0000 UTC m=+52.199249812" lastFinishedPulling="2025-08-13 00:03:27.164213497 +0000 UTC m=+60.079132869" observedRunningTime="2025-08-13 00:03:27.969577961 +0000 UTC m=+60.884497357" watchObservedRunningTime="2025-08-13 00:03:29.8944943 +0000 UTC m=+62.809413708" Aug 13 00:03:29.896412 env[1823]: time="2025-08-13T00:03:29.896326694Z" level=info msg="StartContainer for \"e75c7e452412dd855f83a233e0e21c410097994cc56417acdb7ed7335b848dce\" returns successfully" Aug 13 00:03:29.967000 audit[5321]: AVC avc: denied { search } for pid=5321 comm="nginx" name="crypto" dev="proc" ino=25584 scontext=system_u:system_r:svirt_lxc_net_t:s0:c769,c975 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Aug 13 00:03:29.967000 audit[5321]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff8d433958 a2=0 a3=0 items=0 ppid=4237 pid=5321 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c769,c975 key=(null) Aug 13 00:03:29.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.872 [WARNING][5337] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7f2a0872-b653-4823-a791-53f494f41cd6", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178", Pod:"coredns-674b8bbfcf-8rqw2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e71e06228c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.882 [INFO][5337] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.882 [INFO][5337] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" iface="eth0" netns="" Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.882 [INFO][5337] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.882 [INFO][5337] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.964 [INFO][5354] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.965 [INFO][5354] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.965 [INFO][5354] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.979 [WARNING][5354] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.979 [INFO][5354] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.982 [INFO][5354] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:29.987884 env[1823]: 2025-08-13 00:03:29.984 [INFO][5337] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:29.989062 env[1823]: time="2025-08-13T00:03:29.987915204Z" level=info msg="TearDown network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\" successfully" Aug 13 00:03:29.989062 env[1823]: time="2025-08-13T00:03:29.987961718Z" level=info msg="StopPodSandbox for \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\" returns successfully" Aug 13 00:03:29.989816 env[1823]: time="2025-08-13T00:03:29.989658230Z" level=info msg="RemovePodSandbox for \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\"" Aug 13 00:03:29.989816 env[1823]: time="2025-08-13T00:03:29.989726848Z" level=info msg="Forcibly stopping sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\"" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.077 [WARNING][5375] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7f2a0872-b653-4823-a791-53f494f41cd6", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"80e56c2c37f9356b396919bc60970b162672431d66c66f91aaa8eceba8ecc178", Pod:"coredns-674b8bbfcf-8rqw2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e71e06228c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.078 [INFO][5375] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.078 [INFO][5375] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" iface="eth0" netns="" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.078 [INFO][5375] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.078 [INFO][5375] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.122 [INFO][5382] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.122 [INFO][5382] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.122 [INFO][5382] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.139 [WARNING][5382] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.139 [INFO][5382] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" HandleID="k8s-pod-network.b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--8rqw2-eth0" Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.142 [INFO][5382] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.149574 env[1823]: 2025-08-13 00:03:30.146 [INFO][5375] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c" Aug 13 00:03:30.150985 env[1823]: time="2025-08-13T00:03:30.150931230Z" level=info msg="TearDown network for sandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\" successfully" Aug 13 00:03:30.159071 env[1823]: time="2025-08-13T00:03:30.158984319Z" level=info msg="RemovePodSandbox \"b2e8b3494e9f3a0e383bc7a8cc8ac234e2e9e6aea65a9c06d8ead275d7f71b6c\" returns successfully" Aug 13 00:03:30.160539 env[1823]: time="2025-08-13T00:03:30.160457236Z" level=info msg="StopPodSandbox for \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\"" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.241 [WARNING][5397] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b141971-41e8-493d-832d-456ddc8f16b3", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037", Pod:"calico-apiserver-cdd4cf7cc-tjfh2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia6e6a300362", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.241 [INFO][5397] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.241 [INFO][5397] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" iface="eth0" netns="" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.241 [INFO][5397] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.241 [INFO][5397] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.283 [INFO][5404] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.283 [INFO][5404] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.283 [INFO][5404] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.299 [WARNING][5404] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.299 [INFO][5404] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.301 [INFO][5404] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.307738 env[1823]: 2025-08-13 00:03:30.305 [INFO][5397] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.309502 env[1823]: time="2025-08-13T00:03:30.309424090Z" level=info msg="TearDown network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\" successfully" Aug 13 00:03:30.309693 env[1823]: time="2025-08-13T00:03:30.309653203Z" level=info msg="StopPodSandbox for \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\" returns successfully" Aug 13 00:03:30.310698 env[1823]: time="2025-08-13T00:03:30.310643088Z" level=info msg="RemovePodSandbox for \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\"" Aug 13 00:03:30.311127 env[1823]: time="2025-08-13T00:03:30.311057502Z" level=info msg="Forcibly stopping sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\"" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.411 [WARNING][5418] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0", GenerateName:"calico-apiserver-cdd4cf7cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b141971-41e8-493d-832d-456ddc8f16b3", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cdd4cf7cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037", Pod:"calico-apiserver-cdd4cf7cc-tjfh2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.110.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia6e6a300362", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.411 [INFO][5418] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.411 [INFO][5418] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" iface="eth0" netns="" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.411 [INFO][5418] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.412 [INFO][5418] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.470 [INFO][5425] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.471 [INFO][5425] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.471 [INFO][5425] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.487 [WARNING][5425] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.487 [INFO][5425] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" HandleID="k8s-pod-network.7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Workload="ip--172--31--17--40-k8s-calico--apiserver--cdd4cf7cc--tjfh2-eth0" Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.490 [INFO][5425] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.496699 env[1823]: 2025-08-13 00:03:30.493 [INFO][5418] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40" Aug 13 00:03:30.498787 env[1823]: time="2025-08-13T00:03:30.497477413Z" level=info msg="TearDown network for sandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\" successfully" Aug 13 00:03:30.504572 env[1823]: time="2025-08-13T00:03:30.504494151Z" level=info msg="RemovePodSandbox \"7be82c774d472c8e650593b4324b0221fcfcd3aa7c4a4138f6bee38e6f5a0b40\" returns successfully" Aug 13 00:03:30.505503 env[1823]: time="2025-08-13T00:03:30.505438711Z" level=info msg="StopPodSandbox for \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\"" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.609 [WARNING][5441] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"23c8b7ce-3409-4554-8a49-6a153e13caef", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044", Pod:"goldmane-768f4c5c69-qfmk7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.110.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali887cc257d98", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.610 [INFO][5441] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.610 [INFO][5441] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" iface="eth0" netns="" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.610 [INFO][5441] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.610 [INFO][5441] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.688 [INFO][5448] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.689 [INFO][5448] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.689 [INFO][5448] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.708 [WARNING][5448] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.708 [INFO][5448] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.713 [INFO][5448] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.720580 env[1823]: 2025-08-13 00:03:30.717 [INFO][5441] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.721677 env[1823]: time="2025-08-13T00:03:30.721610457Z" level=info msg="TearDown network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\" successfully" Aug 13 00:03:30.721826 env[1823]: time="2025-08-13T00:03:30.721788220Z" level=info msg="StopPodSandbox for \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\" returns successfully" Aug 13 00:03:30.722717 env[1823]: time="2025-08-13T00:03:30.722664929Z" level=info msg="RemovePodSandbox for \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\"" Aug 13 00:03:30.723189 env[1823]: time="2025-08-13T00:03:30.723086674Z" level=info msg="Forcibly stopping sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\"" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.837 [WARNING][5464] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"23c8b7ce-3409-4554-8a49-6a153e13caef", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044", Pod:"goldmane-768f4c5c69-qfmk7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.110.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali887cc257d98", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.838 [INFO][5464] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.838 [INFO][5464] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" iface="eth0" netns="" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.838 [INFO][5464] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.838 [INFO][5464] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.919 [INFO][5471] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.919 [INFO][5471] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.919 [INFO][5471] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.936 [WARNING][5471] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.936 [INFO][5471] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" HandleID="k8s-pod-network.572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Workload="ip--172--31--17--40-k8s-goldmane--768f4c5c69--qfmk7-eth0" Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.938 [INFO][5471] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.945189 env[1823]: 2025-08-13 00:03:30.941 [INFO][5464] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d" Aug 13 00:03:30.946157 env[1823]: time="2025-08-13T00:03:30.945302819Z" level=info msg="TearDown network for sandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\" successfully" Aug 13 00:03:30.954102 env[1823]: time="2025-08-13T00:03:30.954021047Z" level=info msg="RemovePodSandbox \"572606f09ac46f2f35178272bfb00aa1346c9b60167e3584b28e92928dc79c7d\" returns successfully" Aug 13 00:03:30.955670 env[1823]: time="2025-08-13T00:03:30.955600253Z" level=info msg="StopPodSandbox for \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\"" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.057 [WARNING][5486] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.058 [INFO][5486] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.058 [INFO][5486] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" iface="eth0" netns="" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.058 [INFO][5486] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.058 [INFO][5486] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.117 [INFO][5493] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.118 [INFO][5493] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.118 [INFO][5493] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.136 [WARNING][5493] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.136 [INFO][5493] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.139 [INFO][5493] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:31.145283 env[1823]: 2025-08-13 00:03:31.142 [INFO][5486] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.146450 env[1823]: time="2025-08-13T00:03:31.145459538Z" level=info msg="TearDown network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\" successfully" Aug 13 00:03:31.146450 env[1823]: time="2025-08-13T00:03:31.145548617Z" level=info msg="StopPodSandbox for \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\" returns successfully" Aug 13 00:03:31.147019 env[1823]: time="2025-08-13T00:03:31.146969355Z" level=info msg="RemovePodSandbox for \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\"" Aug 13 00:03:31.147214 env[1823]: time="2025-08-13T00:03:31.147150886Z" level=info msg="Forcibly stopping sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\"" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.236 [WARNING][5508] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" WorkloadEndpoint="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.236 [INFO][5508] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.236 [INFO][5508] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" iface="eth0" netns="" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.236 [INFO][5508] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.236 [INFO][5508] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.284 [INFO][5515] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.284 [INFO][5515] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.284 [INFO][5515] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.299 [WARNING][5515] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.299 [INFO][5515] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" HandleID="k8s-pod-network.a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Workload="ip--172--31--17--40-k8s-whisker--77b8cbdb44--9l6sw-eth0" Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.301 [INFO][5515] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:31.307997 env[1823]: 2025-08-13 00:03:31.304 [INFO][5508] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a" Aug 13 00:03:31.308904 env[1823]: time="2025-08-13T00:03:31.308050861Z" level=info msg="TearDown network for sandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\" successfully" Aug 13 00:03:31.313727 env[1823]: time="2025-08-13T00:03:31.313647180Z" level=info msg="RemovePodSandbox \"a05a2f63606e7e60e0a5387ee347c551cb87ab1cdb1b94424326f8993342f26a\" returns successfully" Aug 13 00:03:31.314425 env[1823]: time="2025-08-13T00:03:31.314321452Z" level=info msg="StopPodSandbox for \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\"" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.427 [WARNING][5531] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9145686c-13e5-4445-9d8a-456f0e216d3d", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f", Pod:"coredns-674b8bbfcf-n9qr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia9602b11512", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.432 [INFO][5531] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.432 [INFO][5531] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" iface="eth0" netns="" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.432 [INFO][5531] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.432 [INFO][5531] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.515 [INFO][5538] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.515 [INFO][5538] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.516 [INFO][5538] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.532 [WARNING][5538] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.532 [INFO][5538] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.536 [INFO][5538] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:31.543275 env[1823]: 2025-08-13 00:03:31.540 [INFO][5531] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.545766 env[1823]: time="2025-08-13T00:03:31.543231427Z" level=info msg="TearDown network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\" successfully" Aug 13 00:03:31.545766 env[1823]: time="2025-08-13T00:03:31.544747904Z" level=info msg="StopPodSandbox for \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\" returns successfully" Aug 13 00:03:31.545766 env[1823]: time="2025-08-13T00:03:31.545428080Z" level=info msg="RemovePodSandbox for \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\"" Aug 13 00:03:31.545766 env[1823]: time="2025-08-13T00:03:31.545481770Z" level=info msg="Forcibly stopping sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\"" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.659 [WARNING][5553] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9145686c-13e5-4445-9d8a-456f0e216d3d", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-40", ContainerID:"34b5175e187a2f92c3d30445c42e8ba82eff479e16f33ff13366829e20ec0c2f", Pod:"coredns-674b8bbfcf-n9qr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.110.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia9602b11512", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.660 [INFO][5553] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.660 [INFO][5553] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" iface="eth0" netns="" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.660 [INFO][5553] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.660 [INFO][5553] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.720 [INFO][5560] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.720 [INFO][5560] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.720 [INFO][5560] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.734 [WARNING][5560] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.734 [INFO][5560] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" HandleID="k8s-pod-network.5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Workload="ip--172--31--17--40-k8s-coredns--674b8bbfcf--n9qr7-eth0" Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.737 [INFO][5560] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:31.742958 env[1823]: 2025-08-13 00:03:31.740 [INFO][5553] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec" Aug 13 00:03:31.744144 env[1823]: time="2025-08-13T00:03:31.744087468Z" level=info msg="TearDown network for sandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\" successfully" Aug 13 00:03:31.749833 env[1823]: time="2025-08-13T00:03:31.749773058Z" level=info msg="RemovePodSandbox \"5aad315e15d38490b2f64b35c1d689f34445875a487d87b8b7e9d8fb83c990ec\" returns successfully" Aug 13 00:03:32.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.40:22-139.178.89.65:52718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:32.776933 kernel: kauditd_printk_skb: 251 callbacks suppressed Aug 13 00:03:32.777028 kernel: audit: type=1130 audit(1755043412.773:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.40:22-139.178.89.65:52718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:32.774186 systemd[1]: Started sshd@8-172.31.17.40:22-139.178.89.65:52718.service. Aug 13 00:03:32.974000 audit[5570]: USER_ACCT pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:32.976151 sshd[5570]: Accepted publickey for core from 139.178.89.65 port 52718 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:32.974000 audit[5570]: CRED_ACQ pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.000248 kernel: audit: type=1101 audit(1755043412.974:1389): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.000560 kernel: audit: type=1103 audit(1755043412.974:1390): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.000637 kernel: audit: type=1006 audit(1755043412.974:1391): pid=5570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Aug 13 00:03:32.974000 audit[5570]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd08a770 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.015658 sshd[5570]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:33.017476 kernel: audit: type=1300 audit(1755043412.974:1391): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd08a770 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.017664 kernel: audit: type=1327 audit(1755043412.974:1391): proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:32.974000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:33.028471 systemd[1]: Started session-9.scope. Aug 13 00:03:33.030446 systemd-logind[1812]: New session 9 of user core. Aug 13 00:03:33.039000 audit[5570]: USER_START pid=5570 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.043000 audit[5572]: CRED_ACQ pid=5572 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.063643 kernel: audit: type=1105 audit(1755043413.039:1392): pid=5570 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.063807 kernel: audit: type=1103 audit(1755043413.043:1393): pid=5572 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.069920 env[1823]: time="2025-08-13T00:03:33.069857178Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:33.072682 env[1823]: time="2025-08-13T00:03:33.072628051Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:33.075523 env[1823]: time="2025-08-13T00:03:33.075438537Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:33.078131 env[1823]: time="2025-08-13T00:03:33.078064419Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:33.079657 env[1823]: time="2025-08-13T00:03:33.079609012Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Aug 13 00:03:33.086868 env[1823]: time="2025-08-13T00:03:33.086816434Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Aug 13 00:03:33.091865 env[1823]: time="2025-08-13T00:03:33.091737730Z" level=info msg="CreateContainer within sandbox \"31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:03:33.118926 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1257063325.mount: Deactivated successfully. Aug 13 00:03:33.122476 env[1823]: time="2025-08-13T00:03:33.122413594Z" level=info msg="CreateContainer within sandbox \"31407aaa8b8f4295178eb0b2a7e8c4f5c2cd25ee15afdfdf737922bc60ab62f4\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"7d60b156377b30c83fb449a9861e69bee19fbbd4877f9ff945c28c99e0f4f0ca\"" Aug 13 00:03:33.128820 env[1823]: time="2025-08-13T00:03:33.128553838Z" level=info msg="StartContainer for \"7d60b156377b30c83fb449a9861e69bee19fbbd4877f9ff945c28c99e0f4f0ca\"" Aug 13 00:03:33.187915 systemd[1]: Started cri-containerd-7d60b156377b30c83fb449a9861e69bee19fbbd4877f9ff945c28c99e0f4f0ca.scope. Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280599 kernel: audit: type=1400 audit(1755043413.263:1394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280779 kernel: audit: type=1400 audit(1755043413.263:1395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.271000 audit: BPF prog-id=215 op=LOAD Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4438 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764363062313536333737623330633833666234343961393836316536 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4438 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764363062313536333737623330633833666234343961393836316536 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit: BPF prog-id=216 op=LOAD Aug 13 00:03:33.280000 audit[5588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4438 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764363062313536333737623330633833666234343961393836316536 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit: BPF prog-id=217 op=LOAD Aug 13 00:03:33.280000 audit[5588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4438 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764363062313536333737623330633833666234343961393836316536 Aug 13 00:03:33.280000 audit: BPF prog-id=217 op=UNLOAD Aug 13 00:03:33.280000 audit: BPF prog-id=216 op=UNLOAD Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { perfmon } for pid=5588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit[5588]: AVC avc: denied { bpf } for pid=5588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:33.280000 audit: BPF prog-id=218 op=LOAD Aug 13 00:03:33.280000 audit[5588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4438 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764363062313536333737623330633833666234343961393836316536 Aug 13 00:03:33.337081 env[1823]: time="2025-08-13T00:03:33.337019090Z" level=info msg="StartContainer for \"7d60b156377b30c83fb449a9861e69bee19fbbd4877f9ff945c28c99e0f4f0ca\" returns successfully" Aug 13 00:03:33.457553 sshd[5570]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:33.459000 audit[5570]: USER_END pid=5570 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.459000 audit[5570]: CRED_DISP pid=5570 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:33.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.40:22-139.178.89.65:52718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:33.465509 systemd-logind[1812]: Session 9 logged out. Waiting for processes to exit. Aug 13 00:03:33.466195 systemd[1]: sshd@8-172.31.17.40:22-139.178.89.65:52718.service: Deactivated successfully. Aug 13 00:03:33.467641 systemd[1]: session-9.scope: Deactivated successfully. Aug 13 00:03:33.469944 systemd-logind[1812]: Removed session 9. Aug 13 00:03:34.003315 kubelet[2838]: I0813 00:03:34.003230 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-8nm9d" podStartSLOduration=38.231207154 podStartE2EDuration="50.003206264s" podCreationTimestamp="2025-08-13 00:02:44 +0000 UTC" firstStartedPulling="2025-08-13 00:03:21.310764873 +0000 UTC m=+54.225684245" lastFinishedPulling="2025-08-13 00:03:33.082763923 +0000 UTC m=+65.997683355" observedRunningTime="2025-08-13 00:03:34.000763666 +0000 UTC m=+66.915683062" watchObservedRunningTime="2025-08-13 00:03:34.003206264 +0000 UTC m=+66.918125648" Aug 13 00:03:34.086000 audit[5631]: NETFILTER_CFG table=filter:115 family=2 entries=14 op=nft_register_rule pid=5631 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:34.086000 audit[5631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff6b23b60 a2=0 a3=1 items=0 ppid=2944 pid=5631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:34.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:34.094000 audit[5631]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5631 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:34.094000 audit[5631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff6b23b60 a2=0 a3=1 items=0 ppid=2944 pid=5631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:34.094000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:35.988025 kubelet[2838]: I0813 00:03:35.987378 2838 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:36.038000 audit[5600]: AVC avc: denied { watch } for pid=5600 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3850234030/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c521,c930 tclass=file permissive=0 Aug 13 00:03:36.038000 audit[5600]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000e5a1c0 a2=fc6 a3=0 items=0 ppid=4438 pid=5600 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 key=(null) Aug 13 00:03:36.038000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:03:36.094554 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3096375011.mount: Deactivated successfully. Aug 13 00:03:36.183000 audit[5635]: NETFILTER_CFG table=filter:117 family=2 entries=13 op=nft_register_rule pid=5635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:36.183000 audit[5635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd8469050 a2=0 a3=1 items=0 ppid=2944 pid=5635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:36.183000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:36.191000 audit[5635]: NETFILTER_CFG table=nat:118 family=2 entries=27 op=nft_register_chain pid=5635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:36.191000 audit[5635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffd8469050 a2=0 a3=1 items=0 ppid=2944 pid=5635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:36.191000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:38.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.40:22-139.178.89.65:52730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:38.487005 systemd[1]: Started sshd@9-172.31.17.40:22-139.178.89.65:52730.service. Aug 13 00:03:38.489991 kernel: kauditd_printk_skb: 73 callbacks suppressed Aug 13 00:03:38.490104 kernel: audit: type=1130 audit(1755043418.486:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.40:22-139.178.89.65:52730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:38.681000 audit[5638]: USER_ACCT pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:38.684501 sshd[5638]: Accepted publickey for core from 139.178.89.65 port 52730 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:38.689103 sshd[5638]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:38.681000 audit[5638]: CRED_ACQ pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:38.704781 kernel: audit: type=1101 audit(1755043418.681:1421): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:38.704972 kernel: audit: type=1103 audit(1755043418.681:1422): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:38.711176 kernel: audit: type=1006 audit(1755043418.681:1423): pid=5638 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Aug 13 00:03:38.681000 audit[5638]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec04aed0 a2=3 a3=1 items=0 ppid=1 pid=5638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:38.720009 systemd[1]: Started session-10.scope. Aug 13 00:03:38.724319 kernel: audit: type=1300 audit(1755043418.681:1423): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec04aed0 a2=3 a3=1 items=0 ppid=1 pid=5638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:38.724931 systemd-logind[1812]: New session 10 of user core. Aug 13 00:03:38.681000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:38.730234 kernel: audit: type=1327 audit(1755043418.681:1423): proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:38.736000 audit[5638]: USER_START pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:38.737000 audit[5642]: CRED_ACQ pid=5642 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:38.760570 kernel: audit: type=1105 audit(1755043418.736:1424): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:38.760706 kernel: audit: type=1103 audit(1755043418.737:1425): pid=5642 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.032803 sshd[5638]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:39.033000 audit[5638]: USER_END pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.037931 systemd[1]: session-10.scope: Deactivated successfully. Aug 13 00:03:39.039080 systemd[1]: sshd@9-172.31.17.40:22-139.178.89.65:52730.service: Deactivated successfully. Aug 13 00:03:39.034000 audit[5638]: CRED_DISP pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.057621 kernel: audit: type=1106 audit(1755043419.033:1426): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.057767 kernel: audit: type=1104 audit(1755043419.034:1427): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.059031 systemd-logind[1812]: Session 10 logged out. Waiting for processes to exit. Aug 13 00:03:39.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.40:22-139.178.89.65:52730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:39.063064 systemd[1]: Started sshd@10-172.31.17.40:22-139.178.89.65:49956.service. Aug 13 00:03:39.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.40:22-139.178.89.65:49956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:39.067532 systemd-logind[1812]: Removed session 10. Aug 13 00:03:39.237000 audit[5658]: USER_ACCT pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.239505 sshd[5658]: Accepted publickey for core from 139.178.89.65 port 49956 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:39.239000 audit[5658]: CRED_ACQ pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.239000 audit[5658]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9fc9d70 a2=3 a3=1 items=0 ppid=1 pid=5658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.239000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:39.241495 sshd[5658]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:39.249732 systemd-logind[1812]: New session 11 of user core. Aug 13 00:03:39.251603 systemd[1]: Started session-11.scope. Aug 13 00:03:39.263000 audit[5658]: USER_START pid=5658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.267000 audit[5660]: CRED_ACQ pid=5660 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.679677 sshd[5658]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:39.681000 audit[5658]: USER_END pid=5658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.681000 audit[5658]: CRED_DISP pid=5658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.40:22-139.178.89.65:49956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:39.686424 systemd-logind[1812]: Session 11 logged out. Waiting for processes to exit. Aug 13 00:03:39.686831 systemd[1]: sshd@10-172.31.17.40:22-139.178.89.65:49956.service: Deactivated successfully. Aug 13 00:03:39.688317 systemd[1]: session-11.scope: Deactivated successfully. Aug 13 00:03:39.691339 systemd-logind[1812]: Removed session 11. Aug 13 00:03:39.708706 systemd[1]: Started sshd@11-172.31.17.40:22-139.178.89.65:49960.service. Aug 13 00:03:39.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.40:22-139.178.89.65:49960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:39.896000 audit[5669]: USER_ACCT pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.898669 sshd[5669]: Accepted publickey for core from 139.178.89.65 port 49960 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:39.900000 audit[5669]: CRED_ACQ pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.900000 audit[5669]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdef794f0 a2=3 a3=1 items=0 ppid=1 pid=5669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.900000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:39.903118 sshd[5669]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:39.912661 systemd-logind[1812]: New session 12 of user core. Aug 13 00:03:39.913657 systemd[1]: Started session-12.scope. Aug 13 00:03:39.930000 audit[5669]: USER_START pid=5669 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:39.935000 audit[5671]: CRED_ACQ pid=5671 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.259967 sshd[5669]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:40.261000 audit[5669]: USER_END pid=5669 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.261000 audit[5669]: CRED_DISP pid=5669 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.265128 systemd[1]: session-12.scope: Deactivated successfully. Aug 13 00:03:40.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.40:22-139.178.89.65:49960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:40.266916 systemd-logind[1812]: Session 12 logged out. Waiting for processes to exit. Aug 13 00:03:40.267260 systemd[1]: sshd@11-172.31.17.40:22-139.178.89.65:49960.service: Deactivated successfully. Aug 13 00:03:40.271720 systemd-logind[1812]: Removed session 12. Aug 13 00:03:40.962411 env[1823]: time="2025-08-13T00:03:40.962317193Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:40.968661 env[1823]: time="2025-08-13T00:03:40.968600838Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:40.973335 env[1823]: time="2025-08-13T00:03:40.973259819Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:40.979872 env[1823]: time="2025-08-13T00:03:40.979794177Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:40.983313 env[1823]: time="2025-08-13T00:03:40.982161391Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Aug 13 00:03:40.986222 env[1823]: time="2025-08-13T00:03:40.986159270Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 00:03:40.997684 env[1823]: time="2025-08-13T00:03:40.997552644Z" level=info msg="CreateContainer within sandbox \"2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Aug 13 00:03:41.038965 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount162507080.mount: Deactivated successfully. Aug 13 00:03:41.043440 env[1823]: time="2025-08-13T00:03:41.039984410Z" level=info msg="CreateContainer within sandbox \"2289c1d73ce28fe671d3f3ae1ea6c8731cbd85c1f0f1d1aa5a7d163e8b1d8044\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33\"" Aug 13 00:03:41.047101 env[1823]: time="2025-08-13T00:03:41.045278522Z" level=info msg="StartContainer for \"2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33\"" Aug 13 00:03:41.100173 systemd[1]: Started cri-containerd-2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33.scope. Aug 13 00:03:41.130149 systemd[1]: run-containerd-runc-k8s.io-2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33-runc.ncCia4.mount: Deactivated successfully. Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.179000 audit: BPF prog-id=219 op=LOAD Aug 13 00:03:41.181000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.181000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4650 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333832323965313564616262656563353939316166393861396235 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4650 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333832323965313564616262656563353939316166393861396235 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit: BPF prog-id=220 op=LOAD Aug 13 00:03:41.182000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4650 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333832323965313564616262656563353939316166393861396235 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit: BPF prog-id=221 op=LOAD Aug 13 00:03:41.182000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4650 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333832323965313564616262656563353939316166393861396235 Aug 13 00:03:41.182000 audit: BPF prog-id=221 op=UNLOAD Aug 13 00:03:41.182000 audit: BPF prog-id=220 op=UNLOAD Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.182000 audit: BPF prog-id=222 op=LOAD Aug 13 00:03:41.182000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4650 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333832323965313564616262656563353939316166393861396235 Aug 13 00:03:41.253175 env[1823]: time="2025-08-13T00:03:41.253014291Z" level=info msg="StartContainer for \"2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33\" returns successfully" Aug 13 00:03:41.327826 env[1823]: time="2025-08-13T00:03:41.327746186Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.332656 env[1823]: time="2025-08-13T00:03:41.332569738Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.337170 env[1823]: time="2025-08-13T00:03:41.337108196Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.340755 env[1823]: time="2025-08-13T00:03:41.340666750Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.341946 env[1823]: time="2025-08-13T00:03:41.341860142Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Aug 13 00:03:41.346273 env[1823]: time="2025-08-13T00:03:41.346196994Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Aug 13 00:03:41.352421 env[1823]: time="2025-08-13T00:03:41.352336283Z" level=info msg="CreateContainer within sandbox \"136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:03:41.382995 env[1823]: time="2025-08-13T00:03:41.382919779Z" level=info msg="CreateContainer within sandbox \"136f0035799b842e272d764d1126842bb74cdd8fcf91870e2576279da5fda037\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f1b89539c661046b0d9025f037a075904c3619c2b0f1ba15fa0a976092191081\"" Aug 13 00:03:41.384743 env[1823]: time="2025-08-13T00:03:41.384680731Z" level=info msg="StartContainer for \"f1b89539c661046b0d9025f037a075904c3619c2b0f1ba15fa0a976092191081\"" Aug 13 00:03:41.459325 systemd[1]: Started cri-containerd-f1b89539c661046b0d9025f037a075904c3619c2b0f1ba15fa0a976092191081.scope. Aug 13 00:03:41.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.546000 audit: BPF prog-id=223 op=LOAD Aug 13 00:03:41.549000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.549000 audit[5721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4687 pid=5721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631623839353339633636313034366230643930323566303337613037 Aug 13 00:03:41.550000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.550000 audit[5721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4687 pid=5721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631623839353339633636313034366230643930323566303337613037 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.551000 audit: BPF prog-id=224 op=LOAD Aug 13 00:03:41.551000 audit[5721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4687 pid=5721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631623839353339633636313034366230643930323566303337613037 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.553000 audit: BPF prog-id=225 op=LOAD Aug 13 00:03:41.553000 audit[5721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4687 pid=5721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631623839353339633636313034366230643930323566303337613037 Aug 13 00:03:41.554000 audit: BPF prog-id=225 op=UNLOAD Aug 13 00:03:41.554000 audit: BPF prog-id=224 op=UNLOAD Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { perfmon } for pid=5721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit[5721]: AVC avc: denied { bpf } for pid=5721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:41.555000 audit: BPF prog-id=226 op=LOAD Aug 13 00:03:41.555000 audit[5721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4687 pid=5721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:41.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631623839353339633636313034366230643930323566303337613037 Aug 13 00:03:41.645043 env[1823]: time="2025-08-13T00:03:41.644979537Z" level=info msg="StartContainer for \"f1b89539c661046b0d9025f037a075904c3619c2b0f1ba15fa0a976092191081\" returns successfully" Aug 13 00:03:42.087833 systemd[1]: run-containerd-runc-k8s.io-2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33-runc.YGhtWM.mount: Deactivated successfully. Aug 13 00:03:42.115976 kubelet[2838]: I0813 00:03:42.115855 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-qfmk7" podStartSLOduration=32.813077669 podStartE2EDuration="50.115830304s" podCreationTimestamp="2025-08-13 00:02:52 +0000 UTC" firstStartedPulling="2025-08-13 00:03:23.683061299 +0000 UTC m=+56.597980671" lastFinishedPulling="2025-08-13 00:03:40.985813946 +0000 UTC m=+73.900733306" observedRunningTime="2025-08-13 00:03:42.066258205 +0000 UTC m=+74.981177601" watchObservedRunningTime="2025-08-13 00:03:42.115830304 +0000 UTC m=+75.030749772" Aug 13 00:03:42.178000 audit[5776]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=5776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:42.178000 audit[5776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc7dc75c0 a2=0 a3=1 items=0 ppid=2944 pid=5776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.178000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:42.190000 audit[5776]: NETFILTER_CFG table=nat:120 family=2 entries=22 op=nft_register_rule pid=5776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:42.190000 audit[5776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc7dc75c0 a2=0 a3=1 items=0 ppid=2944 pid=5776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:42.250000 audit[5782]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=5782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:42.250000 audit[5782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd730be40 a2=0 a3=1 items=0 ppid=2944 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.250000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:42.256000 audit[5782]: NETFILTER_CFG table=nat:122 family=2 entries=30 op=nft_register_rule pid=5782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:42.256000 audit[5782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffd730be40 a2=0 a3=1 items=0 ppid=2944 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.256000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:42.796334 env[1823]: time="2025-08-13T00:03:42.796242656Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:42.800639 env[1823]: time="2025-08-13T00:03:42.800564973Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:42.804577 env[1823]: time="2025-08-13T00:03:42.804505641Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:42.808566 env[1823]: time="2025-08-13T00:03:42.808509371Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:42.809646 env[1823]: time="2025-08-13T00:03:42.809578223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Aug 13 00:03:42.817063 env[1823]: time="2025-08-13T00:03:42.817006363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Aug 13 00:03:42.824025 env[1823]: time="2025-08-13T00:03:42.823960104Z" level=info msg="CreateContainer within sandbox \"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Aug 13 00:03:42.881008 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount988397109.mount: Deactivated successfully. Aug 13 00:03:42.886823 env[1823]: time="2025-08-13T00:03:42.886758027Z" level=info msg="CreateContainer within sandbox \"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"6f75ba27fa27a4fb584334e3db53ccf618b75b393661e4b498047748a1cf73cf\"" Aug 13 00:03:42.889228 env[1823]: time="2025-08-13T00:03:42.889171907Z" level=info msg="StartContainer for \"6f75ba27fa27a4fb584334e3db53ccf618b75b393661e4b498047748a1cf73cf\"" Aug 13 00:03:42.930391 systemd[1]: Started cri-containerd-6f75ba27fa27a4fb584334e3db53ccf618b75b393661e4b498047748a1cf73cf.scope. Aug 13 00:03:43.020000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.020000 audit[5792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4849 pid=5792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666373562613237666132376134666235383433333465336462353363 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.024000 audit: BPF prog-id=227 op=LOAD Aug 13 00:03:43.024000 audit[5792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4849 pid=5792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666373562613237666132376134666235383433333465336462353363 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.025000 audit: BPF prog-id=228 op=LOAD Aug 13 00:03:43.025000 audit[5792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4849 pid=5792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666373562613237666132376134666235383433333465336462353363 Aug 13 00:03:43.026000 audit: BPF prog-id=228 op=UNLOAD Aug 13 00:03:43.026000 audit: BPF prog-id=227 op=UNLOAD Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { perfmon } for pid=5792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit[5792]: AVC avc: denied { bpf } for pid=5792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.030000 audit: BPF prog-id=229 op=LOAD Aug 13 00:03:43.030000 audit[5792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4849 pid=5792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666373562613237666132376134666235383433333465336462353363 Aug 13 00:03:43.100683 env[1823]: time="2025-08-13T00:03:43.100604497Z" level=info msg="StartContainer for \"6f75ba27fa27a4fb584334e3db53ccf618b75b393661e4b498047748a1cf73cf\" returns successfully" Aug 13 00:03:43.145914 systemd[1]: run-containerd-runc-k8s.io-2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33-runc.ajVQCd.mount: Deactivated successfully. Aug 13 00:03:44.054932 kubelet[2838]: I0813 00:03:44.054868 2838 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:44.099023 systemd[1]: run-containerd-runc-k8s.io-2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33-runc.QpcPTo.mount: Deactivated successfully. Aug 13 00:03:45.302575 kernel: kauditd_printk_skb: 192 callbacks suppressed Aug 13 00:03:45.302835 kernel: audit: type=1130 audit(1755043425.289:1493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.40:22-139.178.89.65:49966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:45.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.40:22-139.178.89.65:49966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:45.290301 systemd[1]: Started sshd@12-172.31.17.40:22-139.178.89.65:49966.service. Aug 13 00:03:45.527000 audit[5855]: USER_ACCT pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.534230 sshd[5855]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:45.540630 sshd[5855]: Accepted publickey for core from 139.178.89.65 port 49966 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:45.555429 kernel: audit: type=1101 audit(1755043425.527:1494): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.555594 kernel: audit: type=1103 audit(1755043425.527:1495): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.527000 audit[5855]: CRED_ACQ pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.560573 systemd[1]: Started session-13.scope. Aug 13 00:03:45.561634 systemd-logind[1812]: New session 13 of user core. Aug 13 00:03:45.572214 kernel: audit: type=1006 audit(1755043425.527:1496): pid=5855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Aug 13 00:03:45.527000 audit[5855]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb19b6f0 a2=3 a3=1 items=0 ppid=1 pid=5855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:45.583937 kernel: audit: type=1300 audit(1755043425.527:1496): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb19b6f0 a2=3 a3=1 items=0 ppid=1 pid=5855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:45.527000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:45.598981 kernel: audit: type=1327 audit(1755043425.527:1496): proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:45.599137 kernel: audit: type=1105 audit(1755043425.585:1497): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.585000 audit[5855]: USER_START pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.588000 audit[5857]: CRED_ACQ pid=5857 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.628793 kernel: audit: type=1103 audit(1755043425.588:1498): pid=5857 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.863585 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2482836521.mount: Deactivated successfully. Aug 13 00:03:45.889124 env[1823]: time="2025-08-13T00:03:45.889063965Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:45.893810 env[1823]: time="2025-08-13T00:03:45.893750426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:45.898397 env[1823]: time="2025-08-13T00:03:45.898306384Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:45.903050 env[1823]: time="2025-08-13T00:03:45.902961584Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:45.907054 env[1823]: time="2025-08-13T00:03:45.905312411Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Aug 13 00:03:45.915411 env[1823]: time="2025-08-13T00:03:45.915333019Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Aug 13 00:03:45.926164 env[1823]: time="2025-08-13T00:03:45.926095743Z" level=info msg="CreateContainer within sandbox \"bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Aug 13 00:03:46.001276 env[1823]: time="2025-08-13T00:03:46.001208158Z" level=info msg="CreateContainer within sandbox \"bc3ef1bdcaba982d149783631f34856dfa68de58d6ec2ef479815f8dfe31551d\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"9a781f0ad96f11aec6ba604eb3aa65195d35396caf3ea36444d31157008d82bd\"" Aug 13 00:03:46.002794 env[1823]: time="2025-08-13T00:03:46.002698941Z" level=info msg="StartContainer for \"9a781f0ad96f11aec6ba604eb3aa65195d35396caf3ea36444d31157008d82bd\"" Aug 13 00:03:46.022313 sshd[5855]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:46.026000 audit[5855]: USER_END pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.035427 systemd[1]: sshd@12-172.31.17.40:22-139.178.89.65:49966.service: Deactivated successfully. Aug 13 00:03:46.036755 systemd[1]: session-13.scope: Deactivated successfully. Aug 13 00:03:46.042032 systemd-logind[1812]: Session 13 logged out. Waiting for processes to exit. Aug 13 00:03:46.027000 audit[5855]: CRED_DISP pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.056761 kernel: audit: type=1106 audit(1755043426.026:1499): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.056949 kernel: audit: type=1104 audit(1755043426.027:1500): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.056741 systemd-logind[1812]: Removed session 13. Aug 13 00:03:46.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.40:22-139.178.89.65:49966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:46.066353 systemd[1]: Started cri-containerd-9a781f0ad96f11aec6ba604eb3aa65195d35396caf3ea36444d31157008d82bd.scope. Aug 13 00:03:46.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.184000 audit: BPF prog-id=230 op=LOAD Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4237 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961373831663061643936663131616563366261363034656233616136 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4237 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961373831663061643936663131616563366261363034656233616136 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.186000 audit: BPF prog-id=231 op=LOAD Aug 13 00:03:46.186000 audit[5871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4237 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961373831663061643936663131616563366261363034656233616136 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.187000 audit: BPF prog-id=232 op=LOAD Aug 13 00:03:46.187000 audit[5871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4237 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961373831663061643936663131616563366261363034656233616136 Aug 13 00:03:46.189000 audit: BPF prog-id=232 op=UNLOAD Aug 13 00:03:46.190000 audit: BPF prog-id=231 op=UNLOAD Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { perfmon } for pid=5871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit[5871]: AVC avc: denied { bpf } for pid=5871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:46.190000 audit: BPF prog-id=233 op=LOAD Aug 13 00:03:46.190000 audit[5871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4237 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961373831663061643936663131616563366261363034656233616136 Aug 13 00:03:46.267932 env[1823]: time="2025-08-13T00:03:46.267696339Z" level=info msg="StartContainer for \"9a781f0ad96f11aec6ba604eb3aa65195d35396caf3ea36444d31157008d82bd\" returns successfully" Aug 13 00:03:46.806000 audit[5732]: AVC avc: denied { watch } for pid=5732 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3687102684/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c194,c690 tclass=file permissive=0 Aug 13 00:03:46.806000 audit[5732]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40027dcbc0 a2=fc6 a3=0 items=0 ppid=4687 pid=5732 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 key=(null) Aug 13 00:03:46.806000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:03:46.869411 kubelet[2838]: I0813 00:03:46.869249 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-cdd4cf7cc-tjfh2" podStartSLOduration=45.408862746 podStartE2EDuration="1m2.869220982s" podCreationTimestamp="2025-08-13 00:02:44 +0000 UTC" firstStartedPulling="2025-08-13 00:03:23.883914792 +0000 UTC m=+56.798834164" lastFinishedPulling="2025-08-13 00:03:41.344273028 +0000 UTC m=+74.259192400" observedRunningTime="2025-08-13 00:03:42.118005173 +0000 UTC m=+75.032924629" watchObservedRunningTime="2025-08-13 00:03:46.869220982 +0000 UTC m=+79.784140354" Aug 13 00:03:46.935000 audit[5903]: NETFILTER_CFG table=filter:123 family=2 entries=12 op=nft_register_rule pid=5903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:46.935000 audit[5903]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd82453b0 a2=0 a3=1 items=0 ppid=2944 pid=5903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.935000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:46.944000 audit[5903]: NETFILTER_CFG table=nat:124 family=2 entries=34 op=nft_register_chain pid=5903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:46.944000 audit[5903]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffd82453b0 a2=0 a3=1 items=0 ppid=2944 pid=5903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.944000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:47.145000 audit[5905]: NETFILTER_CFG table=filter:125 family=2 entries=11 op=nft_register_rule pid=5905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:47.145000 audit[5905]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff8cf1a90 a2=0 a3=1 items=0 ppid=2944 pid=5905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:47.145000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:47.151000 audit[5905]: NETFILTER_CFG table=nat:126 family=2 entries=29 op=nft_register_chain pid=5905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:47.151000 audit[5905]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffff8cf1a90 a2=0 a3=1 items=0 ppid=2944 pid=5905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:47.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:47.876275 env[1823]: time="2025-08-13T00:03:47.876213331Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:47.880861 env[1823]: time="2025-08-13T00:03:47.880804301Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:47.884404 env[1823]: time="2025-08-13T00:03:47.884304894Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:47.888138 env[1823]: time="2025-08-13T00:03:47.888080211Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:47.889202 env[1823]: time="2025-08-13T00:03:47.889138440Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Aug 13 00:03:47.899660 env[1823]: time="2025-08-13T00:03:47.899596368Z" level=info msg="CreateContainer within sandbox \"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Aug 13 00:03:47.934855 env[1823]: time="2025-08-13T00:03:47.934738760Z" level=info msg="CreateContainer within sandbox \"8e2d7d219dbd124beedbca9497a4114cbae961d877531c5f8541dafb15a12b16\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"22b64465e08b876b0071732c909de7c06ce91bdd7ac29d41df9b48489208d9fe\"" Aug 13 00:03:47.937219 env[1823]: time="2025-08-13T00:03:47.936433345Z" level=info msg="StartContainer for \"22b64465e08b876b0071732c909de7c06ce91bdd7ac29d41df9b48489208d9fe\"" Aug 13 00:03:48.014744 systemd[1]: run-containerd-runc-k8s.io-22b64465e08b876b0071732c909de7c06ce91bdd7ac29d41df9b48489208d9fe-runc.y7BBtL.mount: Deactivated successfully. Aug 13 00:03:48.020010 systemd[1]: Started cri-containerd-22b64465e08b876b0071732c909de7c06ce91bdd7ac29d41df9b48489208d9fe.scope. Aug 13 00:03:48.072000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.072000 audit[5912]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4849 pid=5912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232623634343635653038623837366230303731373332633930396465 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit: BPF prog-id=234 op=LOAD Aug 13 00:03:48.073000 audit[5912]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4849 pid=5912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232623634343635653038623837366230303731373332633930396465 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit: BPF prog-id=235 op=LOAD Aug 13 00:03:48.073000 audit[5912]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4849 pid=5912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232623634343635653038623837366230303731373332633930396465 Aug 13 00:03:48.073000 audit: BPF prog-id=235 op=UNLOAD Aug 13 00:03:48.073000 audit: BPF prog-id=234 op=UNLOAD Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { perfmon } for pid=5912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit[5912]: AVC avc: denied { bpf } for pid=5912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.073000 audit: BPF prog-id=236 op=LOAD Aug 13 00:03:48.073000 audit[5912]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4849 pid=5912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232623634343635653038623837366230303731373332633930396465 Aug 13 00:03:48.122718 env[1823]: time="2025-08-13T00:03:48.122604718Z" level=info msg="StartContainer for \"22b64465e08b876b0071732c909de7c06ce91bdd7ac29d41df9b48489208d9fe\" returns successfully" Aug 13 00:03:48.653487 kubelet[2838]: I0813 00:03:48.653410 2838 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Aug 13 00:03:48.653487 kubelet[2838]: I0813 00:03:48.653495 2838 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Aug 13 00:03:49.131958 kubelet[2838]: I0813 00:03:49.131855 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-czrjx" podStartSLOduration=32.947091286 podStartE2EDuration="56.131790806s" podCreationTimestamp="2025-08-13 00:02:53 +0000 UTC" firstStartedPulling="2025-08-13 00:03:24.706280809 +0000 UTC m=+57.621200169" lastFinishedPulling="2025-08-13 00:03:47.890980305 +0000 UTC m=+80.805899689" observedRunningTime="2025-08-13 00:03:49.130833454 +0000 UTC m=+82.045752862" watchObservedRunningTime="2025-08-13 00:03:49.131790806 +0000 UTC m=+82.046710190" Aug 13 00:03:49.132961 kubelet[2838]: I0813 00:03:49.132856 2838 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-7ddd884bfb-9jrsq" podStartSLOduration=5.54830246 podStartE2EDuration="31.132832426s" podCreationTimestamp="2025-08-13 00:03:18 +0000 UTC" firstStartedPulling="2025-08-13 00:03:20.324667186 +0000 UTC m=+53.239586570" lastFinishedPulling="2025-08-13 00:03:45.909197176 +0000 UTC m=+78.824116536" observedRunningTime="2025-08-13 00:03:47.111877886 +0000 UTC m=+80.026797282" watchObservedRunningTime="2025-08-13 00:03:49.132832426 +0000 UTC m=+82.047751798" Aug 13 00:03:51.058739 systemd[1]: Started sshd@13-172.31.17.40:22-139.178.89.65:34438.service. Aug 13 00:03:51.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.40:22-139.178.89.65:34438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:51.062014 kernel: kauditd_printk_skb: 116 callbacks suppressed Aug 13 00:03:51.062196 kernel: audit: type=1130 audit(1755043431.058:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.40:22-139.178.89.65:34438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:51.265000 audit[5977]: USER_ACCT pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.267538 sshd[5977]: Accepted publickey for core from 139.178.89.65 port 34438 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:51.271648 sshd[5977]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:51.278747 kernel: audit: type=1101 audit(1755043431.265:1532): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.278931 kernel: audit: type=1103 audit(1755043431.265:1533): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.265000 audit[5977]: CRED_ACQ pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.296348 kernel: audit: type=1006 audit(1755043431.265:1534): pid=5977 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Aug 13 00:03:51.265000 audit[5977]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd0ee810 a2=3 a3=1 items=0 ppid=1 pid=5977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:51.307399 kernel: audit: type=1300 audit(1755043431.265:1534): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd0ee810 a2=3 a3=1 items=0 ppid=1 pid=5977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:51.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:51.311726 kernel: audit: type=1327 audit(1755043431.265:1534): proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:51.313836 systemd-logind[1812]: New session 14 of user core. Aug 13 00:03:51.316496 systemd[1]: Started session-14.scope. Aug 13 00:03:51.327000 audit[5977]: USER_START pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.341000 audit[5979]: CRED_ACQ pid=5979 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.352814 kernel: audit: type=1105 audit(1755043431.327:1535): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.352960 kernel: audit: type=1103 audit(1755043431.341:1536): pid=5979 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.713658 sshd[5977]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:51.714000 audit[5977]: USER_END pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.718817 systemd[1]: session-14.scope: Deactivated successfully. Aug 13 00:03:51.720373 systemd[1]: sshd@13-172.31.17.40:22-139.178.89.65:34438.service: Deactivated successfully. Aug 13 00:03:51.729832 systemd-logind[1812]: Session 14 logged out. Waiting for processes to exit. Aug 13 00:03:51.732420 systemd-logind[1812]: Removed session 14. Aug 13 00:03:51.714000 audit[5977]: CRED_DISP pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.744179 kernel: audit: type=1106 audit(1755043431.714:1537): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.744397 kernel: audit: type=1104 audit(1755043431.714:1538): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:51.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.40:22-139.178.89.65:34438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:56.742786 systemd[1]: Started sshd@14-172.31.17.40:22-139.178.89.65:34450.service. Aug 13 00:03:56.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.40:22-139.178.89.65:34450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:56.745910 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:03:56.746062 kernel: audit: type=1130 audit(1755043436.743:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.40:22-139.178.89.65:34450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:56.951773 sshd[6009]: Accepted publickey for core from 139.178.89.65 port 34450 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:56.951000 audit[6009]: USER_ACCT pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:56.962000 audit[6009]: CRED_ACQ pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:56.974385 kernel: audit: type=1101 audit(1755043436.951:1541): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:56.974541 kernel: audit: type=1103 audit(1755043436.962:1542): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:56.964218 sshd[6009]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:56.981664 kernel: audit: type=1006 audit(1755043436.962:1543): pid=6009 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Aug 13 00:03:56.962000 audit[6009]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd114b290 a2=3 a3=1 items=0 ppid=1 pid=6009 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:56.962000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:56.996407 kernel: audit: type=1300 audit(1755043436.962:1543): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd114b290 a2=3 a3=1 items=0 ppid=1 pid=6009 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:57.005828 kernel: audit: type=1327 audit(1755043436.962:1543): proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:57.004964 systemd-logind[1812]: New session 15 of user core. Aug 13 00:03:57.005940 systemd[1]: Started session-15.scope. Aug 13 00:03:57.018000 audit[6009]: USER_START pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.019000 audit[6011]: CRED_ACQ pid=6011 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.032631 kernel: audit: type=1105 audit(1755043437.018:1544): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.043492 kernel: audit: type=1103 audit(1755043437.019:1545): pid=6011 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.310670 sshd[6009]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:57.313000 audit[6009]: USER_END pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.329186 systemd-logind[1812]: Session 15 logged out. Waiting for processes to exit. Aug 13 00:03:57.329890 systemd[1]: sshd@14-172.31.17.40:22-139.178.89.65:34450.service: Deactivated successfully. Aug 13 00:03:57.313000 audit[6009]: CRED_DISP pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.332338 systemd[1]: session-15.scope: Deactivated successfully. Aug 13 00:03:57.341500 kernel: audit: type=1106 audit(1755043437.313:1546): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.341662 kernel: audit: type=1104 audit(1755043437.313:1547): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:57.343266 systemd-logind[1812]: Removed session 15. Aug 13 00:03:57.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.40:22-139.178.89.65:34450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:58.979963 systemd[1]: run-containerd-runc-k8s.io-56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f-runc.EgCgDw.mount: Deactivated successfully. Aug 13 00:04:02.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.40:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:02.342742 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:02.342812 kernel: audit: type=1130 audit(1755043442.340:1549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.40:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:02.340007 systemd[1]: Started sshd@15-172.31.17.40:22-139.178.89.65:55382.service. Aug 13 00:04:02.522602 sshd[6039]: Accepted publickey for core from 139.178.89.65 port 55382 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:02.522000 audit[6039]: USER_ACCT pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.534000 audit[6039]: CRED_ACQ pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.535585 sshd[6039]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:02.546225 kernel: audit: type=1101 audit(1755043442.522:1550): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.546453 kernel: audit: type=1103 audit(1755043442.534:1551): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.552979 kernel: audit: type=1006 audit(1755043442.534:1552): pid=6039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Aug 13 00:04:02.534000 audit[6039]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7686b10 a2=3 a3=1 items=0 ppid=1 pid=6039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:02.564771 kernel: audit: type=1300 audit(1755043442.534:1552): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7686b10 a2=3 a3=1 items=0 ppid=1 pid=6039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:02.534000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:02.568665 kernel: audit: type=1327 audit(1755043442.534:1552): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:02.574849 systemd-logind[1812]: New session 16 of user core. Aug 13 00:04:02.577042 systemd[1]: Started session-16.scope. Aug 13 00:04:02.588000 audit[6039]: USER_START pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.588000 audit[6043]: CRED_ACQ pid=6043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.610783 kernel: audit: type=1105 audit(1755043442.588:1553): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.610967 kernel: audit: type=1103 audit(1755043442.588:1554): pid=6043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.845512 sshd[6039]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:02.847000 audit[6039]: USER_END pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.852340 systemd[1]: session-16.scope: Deactivated successfully. Aug 13 00:04:02.854126 systemd[1]: sshd@15-172.31.17.40:22-139.178.89.65:55382.service: Deactivated successfully. Aug 13 00:04:02.847000 audit[6039]: CRED_DISP pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.869886 kernel: audit: type=1106 audit(1755043442.847:1555): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.870049 kernel: audit: type=1104 audit(1755043442.847:1556): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:02.869992 systemd-logind[1812]: Session 16 logged out. Waiting for processes to exit. Aug 13 00:04:02.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.40:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:02.872924 systemd-logind[1812]: Removed session 16. Aug 13 00:04:07.879084 systemd[1]: Started sshd@16-172.31.17.40:22-139.178.89.65:55384.service. Aug 13 00:04:07.892263 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:07.892512 kernel: audit: type=1130 audit(1755043447.880:1558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.40:22-139.178.89.65:55384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.40:22-139.178.89.65:55384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:08.052000 audit[6053]: USER_ACCT pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.057838 sshd[6053]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:08.058904 sshd[6053]: Accepted publickey for core from 139.178.89.65 port 55384 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:08.054000 audit[6053]: CRED_ACQ pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.076155 kernel: audit: type=1101 audit(1755043448.052:1559): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.076490 kernel: audit: type=1103 audit(1755043448.054:1560): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.082887 kernel: audit: type=1006 audit(1755043448.054:1561): pid=6053 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Aug 13 00:04:08.054000 audit[6053]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc49c000 a2=3 a3=1 items=0 ppid=1 pid=6053 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:08.094589 kernel: audit: type=1300 audit(1755043448.054:1561): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc49c000 a2=3 a3=1 items=0 ppid=1 pid=6053 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:08.054000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:08.100495 kernel: audit: type=1327 audit(1755043448.054:1561): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:08.104965 systemd-logind[1812]: New session 17 of user core. Aug 13 00:04:08.108162 systemd[1]: Started session-17.scope. Aug 13 00:04:08.117000 audit[6053]: USER_START pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.130000 audit[6055]: CRED_ACQ pid=6055 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.140735 kernel: audit: type=1105 audit(1755043448.117:1562): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.140873 kernel: audit: type=1103 audit(1755043448.130:1563): pid=6055 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.379733 sshd[6053]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:08.383000 audit[6053]: USER_END pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.396808 systemd[1]: sshd@16-172.31.17.40:22-139.178.89.65:55384.service: Deactivated successfully. Aug 13 00:04:08.384000 audit[6053]: CRED_DISP pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.406843 kernel: audit: type=1106 audit(1755043448.383:1564): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.406994 kernel: audit: type=1104 audit(1755043448.384:1565): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.398222 systemd[1]: session-17.scope: Deactivated successfully. Aug 13 00:04:08.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.40:22-139.178.89.65:55384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:08.411130 systemd-logind[1812]: Session 17 logged out. Waiting for processes to exit. Aug 13 00:04:08.418898 systemd[1]: Started sshd@17-172.31.17.40:22-139.178.89.65:55396.service. Aug 13 00:04:08.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.40:22-139.178.89.65:55396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:08.423301 systemd-logind[1812]: Removed session 17. Aug 13 00:04:08.594000 audit[6065]: USER_ACCT pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.596453 sshd[6065]: Accepted publickey for core from 139.178.89.65 port 55396 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:08.596000 audit[6065]: CRED_ACQ pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.596000 audit[6065]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd553f6c0 a2=3 a3=1 items=0 ppid=1 pid=6065 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:08.596000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:08.597891 sshd[6065]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:08.607758 systemd[1]: Started session-18.scope. Aug 13 00:04:08.609402 systemd-logind[1812]: New session 18 of user core. Aug 13 00:04:08.620000 audit[6065]: USER_START pid=6065 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:08.623000 audit[6067]: CRED_ACQ pid=6067 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:11.222541 sshd[6065]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:11.224000 audit[6065]: USER_END pid=6065 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:11.225000 audit[6065]: CRED_DISP pid=6065 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:11.229078 systemd[1]: sshd@17-172.31.17.40:22-139.178.89.65:55396.service: Deactivated successfully. Aug 13 00:04:11.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.40:22-139.178.89.65:55396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:11.230613 systemd[1]: session-18.scope: Deactivated successfully. Aug 13 00:04:11.232719 systemd-logind[1812]: Session 18 logged out. Waiting for processes to exit. Aug 13 00:04:11.235441 systemd-logind[1812]: Removed session 18. Aug 13 00:04:11.253018 systemd[1]: Started sshd@18-172.31.17.40:22-139.178.89.65:53862.service. Aug 13 00:04:11.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.40:22-139.178.89.65:53862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:11.457000 audit[6083]: USER_ACCT pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:11.460530 sshd[6083]: Accepted publickey for core from 139.178.89.65 port 53862 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:11.461000 audit[6083]: CRED_ACQ pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:11.461000 audit[6083]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb697ab0 a2=3 a3=1 items=0 ppid=1 pid=6083 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:11.461000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:11.463047 sshd[6083]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:11.472828 systemd-logind[1812]: New session 19 of user core. Aug 13 00:04:11.474313 systemd[1]: Started session-19.scope. Aug 13 00:04:11.484000 audit[6083]: USER_START pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:11.487000 audit[6085]: CRED_ACQ pid=6085 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:12.909000 audit[6098]: NETFILTER_CFG table=filter:127 family=2 entries=22 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:12.914136 kernel: kauditd_printk_skb: 20 callbacks suppressed Aug 13 00:04:12.914221 kernel: audit: type=1325 audit(1755043452.909:1582): table=filter:127 family=2 entries=22 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:12.909000 audit[6098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:12.933948 kernel: audit: type=1300 audit(1755043452.909:1582): arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:12.934713 sshd[6083]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:12.909000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:12.942942 kernel: audit: type=1327 audit(1755043452.909:1582): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:12.940348 systemd[1]: session-19.scope: Deactivated successfully. Aug 13 00:04:12.944571 kernel: audit: type=1106 audit(1755043452.935:1583): pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:12.935000 audit[6083]: USER_END pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:12.941605 systemd[1]: sshd@18-172.31.17.40:22-139.178.89.65:53862.service: Deactivated successfully. Aug 13 00:04:12.955302 systemd-logind[1812]: Session 19 logged out. Waiting for processes to exit. Aug 13 00:04:12.935000 audit[6083]: CRED_DISP pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:12.969404 kernel: audit: type=1104 audit(1755043452.935:1584): pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:12.969555 kernel: audit: type=1131 audit(1755043452.940:1585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.40:22-139.178.89.65:53862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:12.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.40:22-139.178.89.65:53862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:12.972644 systemd[1]: Started sshd@19-172.31.17.40:22-139.178.89.65:53868.service. Aug 13 00:04:12.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.40:22-139.178.89.65:53868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:12.989674 kernel: audit: type=1130 audit(1755043452.968:1586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.40:22-139.178.89.65:53868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:12.989728 systemd-logind[1812]: Removed session 19. Aug 13 00:04:12.957000 audit[6098]: NETFILTER_CFG table=nat:128 family=2 entries=24 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:12.997086 kernel: audit: type=1325 audit(1755043452.957:1587): table=nat:128 family=2 entries=24 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:13.003472 kernel: audit: type=1300 audit(1755043452.957:1587): arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:12.957000 audit[6098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:12.957000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:13.024657 kernel: audit: type=1327 audit(1755043452.957:1587): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:13.054000 audit[6104]: NETFILTER_CFG table=filter:129 family=2 entries=34 op=nft_register_rule pid=6104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:13.054000 audit[6104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe5f32130 a2=0 a3=1 items=0 ppid=2944 pid=6104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:13.054000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:13.062000 audit[6104]: NETFILTER_CFG table=nat:130 family=2 entries=24 op=nft_register_rule pid=6104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:13.062000 audit[6104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe5f32130 a2=0 a3=1 items=0 ppid=2944 pid=6104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:13.062000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:13.160000 audit[6101]: USER_ACCT pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.162453 sshd[6101]: Accepted publickey for core from 139.178.89.65 port 53868 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:13.163000 audit[6101]: CRED_ACQ pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.164000 audit[6101]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5012b20 a2=3 a3=1 items=0 ppid=1 pid=6101 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:13.164000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:13.166450 sshd[6101]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:13.176830 systemd-logind[1812]: New session 20 of user core. Aug 13 00:04:13.177534 systemd[1]: Started session-20.scope. Aug 13 00:04:13.190000 audit[6101]: USER_START pid=6101 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.194000 audit[6105]: CRED_ACQ pid=6105 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.764953 sshd[6101]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:13.765000 audit[6101]: USER_END pid=6101 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.765000 audit[6101]: CRED_DISP pid=6101 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.40:22-139.178.89.65:53868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:13.770344 systemd[1]: sshd@19-172.31.17.40:22-139.178.89.65:53868.service: Deactivated successfully. Aug 13 00:04:13.771839 systemd[1]: session-20.scope: Deactivated successfully. Aug 13 00:04:13.773325 systemd-logind[1812]: Session 20 logged out. Waiting for processes to exit. Aug 13 00:04:13.775219 systemd-logind[1812]: Removed session 20. Aug 13 00:04:13.794696 systemd[1]: Started sshd@20-172.31.17.40:22-139.178.89.65:53872.service. Aug 13 00:04:13.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.17.40:22-139.178.89.65:53872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:13.974000 audit[6113]: USER_ACCT pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.975985 sshd[6113]: Accepted publickey for core from 139.178.89.65 port 53872 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:13.976000 audit[6113]: CRED_ACQ pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:13.976000 audit[6113]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffefa5cd00 a2=3 a3=1 items=0 ppid=1 pid=6113 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:13.976000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:13.979265 sshd[6113]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:13.989455 systemd[1]: Started session-21.scope. Aug 13 00:04:13.990660 systemd-logind[1812]: New session 21 of user core. Aug 13 00:04:14.000000 audit[6113]: USER_START pid=6113 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:14.004000 audit[6115]: CRED_ACQ pid=6115 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:14.106311 systemd[1]: run-containerd-runc-k8s.io-2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33-runc.qahsQ1.mount: Deactivated successfully. Aug 13 00:04:14.296532 sshd[6113]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:14.297000 audit[6113]: USER_END pid=6113 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:14.298000 audit[6113]: CRED_DISP pid=6113 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:14.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.17.40:22-139.178.89.65:53872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:14.302740 systemd[1]: sshd@20-172.31.17.40:22-139.178.89.65:53872.service: Deactivated successfully. Aug 13 00:04:14.304165 systemd[1]: session-21.scope: Deactivated successfully. Aug 13 00:04:14.305173 systemd-logind[1812]: Session 21 logged out. Waiting for processes to exit. Aug 13 00:04:14.308097 systemd-logind[1812]: Removed session 21. Aug 13 00:04:14.407000 audit[6144]: NETFILTER_CFG table=filter:131 family=2 entries=33 op=nft_register_rule pid=6144 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:14.407000 audit[6144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=fffff22b1e90 a2=0 a3=1 items=0 ppid=2944 pid=6144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:14.407000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:14.416000 audit[6144]: NETFILTER_CFG table=nat:132 family=2 entries=31 op=nft_register_chain pid=6144 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:14.416000 audit[6144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=fffff22b1e90 a2=0 a3=1 items=0 ppid=2944 pid=6144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:14.416000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:19.329211 systemd[1]: Started sshd@21-172.31.17.40:22-139.178.89.65:48564.service. Aug 13 00:04:19.336419 kernel: kauditd_printk_skb: 33 callbacks suppressed Aug 13 00:04:19.336655 kernel: audit: type=1130 audit(1755043459.329:1609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.40:22-139.178.89.65:48564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:19.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.40:22-139.178.89.65:48564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:19.512000 audit[6146]: USER_ACCT pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.514784 sshd[6146]: Accepted publickey for core from 139.178.89.65 port 48564 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:19.531413 kernel: audit: type=1101 audit(1755043459.512:1610): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.531572 kernel: audit: type=1103 audit(1755043459.526:1611): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.526000 audit[6146]: CRED_ACQ pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.532709 sshd[6146]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:19.545056 kernel: audit: type=1006 audit(1755043459.530:1612): pid=6146 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Aug 13 00:04:19.530000 audit[6146]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff2aa7e0 a2=3 a3=1 items=0 ppid=1 pid=6146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:19.557480 kernel: audit: type=1300 audit(1755043459.530:1612): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff2aa7e0 a2=3 a3=1 items=0 ppid=1 pid=6146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:19.530000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:19.561982 kernel: audit: type=1327 audit(1755043459.530:1612): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:19.566354 systemd-logind[1812]: New session 22 of user core. Aug 13 00:04:19.566652 systemd[1]: Started session-22.scope. Aug 13 00:04:19.575000 audit[6146]: USER_START pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.578000 audit[6148]: CRED_ACQ pid=6148 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.599682 kernel: audit: type=1105 audit(1755043459.575:1613): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.599800 kernel: audit: type=1103 audit(1755043459.578:1614): pid=6148 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.829759 sshd[6146]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:19.830000 audit[6146]: USER_END pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.835331 systemd[1]: session-22.scope: Deactivated successfully. Aug 13 00:04:19.836948 systemd[1]: sshd@21-172.31.17.40:22-139.178.89.65:48564.service: Deactivated successfully. Aug 13 00:04:19.831000 audit[6146]: CRED_DISP pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.852794 kernel: audit: type=1106 audit(1755043459.830:1615): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.852954 kernel: audit: type=1104 audit(1755043459.831:1616): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:19.852889 systemd-logind[1812]: Session 22 logged out. Waiting for processes to exit. Aug 13 00:04:19.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.40:22-139.178.89.65:48564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:19.855789 systemd-logind[1812]: Removed session 22. Aug 13 00:04:21.155000 audit[6157]: NETFILTER_CFG table=filter:133 family=2 entries=20 op=nft_register_rule pid=6157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.155000 audit[6157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffda1fa720 a2=0 a3=1 items=0 ppid=2944 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.155000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:21.164000 audit[6157]: NETFILTER_CFG table=nat:134 family=2 entries=110 op=nft_register_chain pid=6157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.164000 audit[6157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffda1fa720 a2=0 a3=1 items=0 ppid=2944 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.164000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:22.362000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6755 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:22.362000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4013f70ab0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:04:22.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:22.365000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:22.365000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40147729c0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:04:22.365000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:22.367000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:22.367000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40147729f0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:04:22.367000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:22.368000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:22.368000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40145c1c40 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:04:22.368000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:22.372000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:22.372000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:22.372000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4013f70ba0 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:04:22.372000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:22.372000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40147c2b60 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) Aug 13 00:04:22.372000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:24.640000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:24.644406 kernel: kauditd_printk_skb: 25 callbacks suppressed Aug 13 00:04:24.644506 kernel: audit: type=1400 audit(1755043464.640:1626): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:24.640000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f27680 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:24.667801 kernel: audit: type=1300 audit(1755043464.640:1626): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f27680 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:24.667940 kernel: audit: type=1327 audit(1755043464.640:1626): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:24.640000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:24.642000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:24.688674 kernel: audit: type=1400 audit(1755043464.642:1627): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:24.688843 kernel: audit: type=1300 audit(1755043464.642:1627): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bfd880 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:24.642000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bfd880 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:24.642000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:24.712296 kernel: audit: type=1327 audit(1755043464.642:1627): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:24.860897 systemd[1]: Started sshd@22-172.31.17.40:22-139.178.89.65:48570.service. Aug 13 00:04:24.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.40:22-139.178.89.65:48570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:24.878420 kernel: audit: type=1130 audit(1755043464.860:1628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.40:22-139.178.89.65:48570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:25.054480 sshd[6201]: Accepted publickey for core from 139.178.89.65 port 48570 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:25.052000 audit[6201]: USER_ACCT pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.067888 sshd[6201]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:25.065000 audit[6201]: CRED_ACQ pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.080547 kernel: audit: type=1101 audit(1755043465.052:1629): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.080719 kernel: audit: type=1103 audit(1755043465.065:1630): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.087061 kernel: audit: type=1006 audit(1755043465.065:1631): pid=6201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Aug 13 00:04:25.065000 audit[6201]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde0d5c50 a2=3 a3=1 items=0 ppid=1 pid=6201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:25.065000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:25.093651 systemd-logind[1812]: New session 23 of user core. Aug 13 00:04:25.095349 systemd[1]: Started session-23.scope. Aug 13 00:04:25.106000 audit[6201]: USER_START pid=6201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.110000 audit[6203]: CRED_ACQ pid=6203 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.383494 sshd[6201]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:25.383000 audit[6201]: USER_END pid=6201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.384000 audit[6201]: CRED_DISP pid=6201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:25.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.40:22-139.178.89.65:48570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:25.389396 systemd[1]: sshd@22-172.31.17.40:22-139.178.89.65:48570.service: Deactivated successfully. Aug 13 00:04:25.390971 systemd[1]: session-23.scope: Deactivated successfully. Aug 13 00:04:25.393489 systemd-logind[1812]: Session 23 logged out. Waiting for processes to exit. Aug 13 00:04:25.396611 systemd-logind[1812]: Removed session 23. Aug 13 00:04:27.017000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:27.017000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014851c0 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:27.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:27.017000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:27.017000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001485200 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:27.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:27.018000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:27.018000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002919f80 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:27.018000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:27.023000 audit[2599]: AVC avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:27.023000 audit[2599]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001485b00 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) Aug 13 00:04:27.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:28.992289 systemd[1]: run-containerd-runc-k8s.io-56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f-runc.Sozhli.mount: Deactivated successfully. Aug 13 00:04:30.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.40:22-139.178.89.65:56816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:30.422677 systemd[1]: Started sshd@23-172.31.17.40:22-139.178.89.65:56816.service. Aug 13 00:04:30.425627 kernel: kauditd_printk_skb: 19 callbacks suppressed Aug 13 00:04:30.425704 kernel: audit: type=1130 audit(1755043470.421:1641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.40:22-139.178.89.65:56816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:30.588000 audit[6234]: USER_ACCT pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.590335 sshd[6234]: Accepted publickey for core from 139.178.89.65 port 56816 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:30.603419 kernel: audit: type=1101 audit(1755043470.588:1642): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.604171 sshd[6234]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:30.601000 audit[6234]: CRED_ACQ pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.622248 systemd-logind[1812]: New session 24 of user core. Aug 13 00:04:30.624638 systemd[1]: Started session-24.scope. Aug 13 00:04:30.630526 kernel: audit: type=1103 audit(1755043470.601:1643): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.630644 kernel: audit: type=1006 audit(1755043470.601:1644): pid=6234 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Aug 13 00:04:30.601000 audit[6234]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff97799c0 a2=3 a3=1 items=0 ppid=1 pid=6234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:30.642414 kernel: audit: type=1300 audit(1755043470.601:1644): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff97799c0 a2=3 a3=1 items=0 ppid=1 pid=6234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:30.601000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:30.646460 kernel: audit: type=1327 audit(1755043470.601:1644): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:30.655000 audit[6234]: USER_START pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.658000 audit[6236]: CRED_ACQ pid=6236 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.678567 kernel: audit: type=1105 audit(1755043470.655:1645): pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.678775 kernel: audit: type=1103 audit(1755043470.658:1646): pid=6236 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.934284 sshd[6234]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:30.934000 audit[6234]: USER_END pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.939277 systemd[1]: session-24.scope: Deactivated successfully. Aug 13 00:04:30.940767 systemd[1]: sshd@23-172.31.17.40:22-139.178.89.65:56816.service: Deactivated successfully. Aug 13 00:04:30.950161 systemd-logind[1812]: Session 24 logged out. Waiting for processes to exit. Aug 13 00:04:30.952655 systemd-logind[1812]: Removed session 24. Aug 13 00:04:30.935000 audit[6234]: CRED_DISP pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.966878 kernel: audit: type=1106 audit(1755043470.934:1647): pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.967067 kernel: audit: type=1104 audit(1755043470.935:1648): pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:30.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.40:22-139.178.89.65:56816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:35.963548 systemd[1]: Started sshd@24-172.31.17.40:22-139.178.89.65:56818.service. Aug 13 00:04:35.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.40:22-139.178.89.65:56818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:35.977952 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:35.978103 kernel: audit: type=1130 audit(1755043475.973:1650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.40:22-139.178.89.65:56818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:36.040000 audit[5600]: AVC avc: denied { watch } for pid=5600 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3850234030/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c521,c930 tclass=file permissive=0 Aug 13 00:04:36.040000 audit[5600]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4002700fa0 a2=fc6 a3=0 items=0 ppid=4438 pid=5600 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 key=(null) Aug 13 00:04:36.071464 kernel: audit: type=1400 audit(1755043476.040:1651): avc: denied { watch } for pid=5600 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3850234030/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c521,c930 tclass=file permissive=0 Aug 13 00:04:36.071661 kernel: audit: type=1300 audit(1755043476.040:1651): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4002700fa0 a2=fc6 a3=0 items=0 ppid=4438 pid=5600 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 key=(null) Aug 13 00:04:36.040000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:04:36.089230 kernel: audit: type=1327 audit(1755043476.040:1651): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:04:36.148000 audit[6248]: USER_ACCT pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.150685 sshd[6248]: Accepted publickey for core from 139.178.89.65 port 56818 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:36.154527 sshd[6248]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:36.152000 audit[6248]: CRED_ACQ pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.173584 kernel: audit: type=1101 audit(1755043476.148:1652): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.173765 kernel: audit: type=1103 audit(1755043476.152:1653): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.182172 kernel: audit: type=1006 audit(1755043476.152:1654): pid=6248 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Aug 13 00:04:36.152000 audit[6248]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc453bf0 a2=3 a3=1 items=0 ppid=1 pid=6248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:36.194764 kernel: audit: type=1300 audit(1755043476.152:1654): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc453bf0 a2=3 a3=1 items=0 ppid=1 pid=6248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:36.197849 systemd-logind[1812]: New session 25 of user core. Aug 13 00:04:36.197999 systemd[1]: Started session-25.scope. Aug 13 00:04:36.152000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:36.205522 kernel: audit: type=1327 audit(1755043476.152:1654): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:36.216000 audit[6248]: USER_START pid=6248 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.220000 audit[6250]: CRED_ACQ pid=6250 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.231467 kernel: audit: type=1105 audit(1755043476.216:1655): pid=6248 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.539986 sshd[6248]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:36.541000 audit[6248]: USER_END pid=6248 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.542000 audit[6248]: CRED_DISP pid=6248 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:36.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.40:22-139.178.89.65:56818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:36.546578 systemd-logind[1812]: Session 25 logged out. Waiting for processes to exit. Aug 13 00:04:36.547184 systemd[1]: sshd@24-172.31.17.40:22-139.178.89.65:56818.service: Deactivated successfully. Aug 13 00:04:36.550461 systemd[1]: session-25.scope: Deactivated successfully. Aug 13 00:04:36.554427 systemd-logind[1812]: Removed session 25. Aug 13 00:04:41.571953 systemd[1]: Started sshd@25-172.31.17.40:22-139.178.89.65:43380.service. Aug 13 00:04:41.585756 kernel: kauditd_printk_skb: 4 callbacks suppressed Aug 13 00:04:41.585970 kernel: audit: type=1130 audit(1755043481.573:1660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.40:22-139.178.89.65:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:41.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.40:22-139.178.89.65:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:41.776000 audit[6259]: USER_ACCT pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:41.789043 sshd[6259]: Accepted publickey for core from 139.178.89.65 port 43380 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:41.801823 kernel: audit: type=1101 audit(1755043481.776:1661): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:41.801997 kernel: audit: type=1103 audit(1755043481.790:1662): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:41.790000 audit[6259]: CRED_ACQ pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:41.792881 sshd[6259]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:41.811661 kernel: audit: type=1006 audit(1755043481.790:1663): pid=6259 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Aug 13 00:04:41.790000 audit[6259]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe16b190 a2=3 a3=1 items=0 ppid=1 pid=6259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.829424 systemd-logind[1812]: New session 26 of user core. Aug 13 00:04:41.831313 systemd[1]: Started session-26.scope. Aug 13 00:04:41.790000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:41.833509 kernel: audit: type=1300 audit(1755043481.790:1663): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe16b190 a2=3 a3=1 items=0 ppid=1 pid=6259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.838522 kernel: audit: type=1327 audit(1755043481.790:1663): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:41.847000 audit[6259]: USER_START pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:41.861000 audit[6261]: CRED_ACQ pid=6261 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:41.873784 kernel: audit: type=1105 audit(1755043481.847:1664): pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:41.873969 kernel: audit: type=1103 audit(1755043481.861:1665): pid=6261 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:42.218977 sshd[6259]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:42.221000 audit[6259]: USER_END pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:42.236390 systemd[1]: sshd@25-172.31.17.40:22-139.178.89.65:43380.service: Deactivated successfully. Aug 13 00:04:42.238600 systemd[1]: session-26.scope: Deactivated successfully. Aug 13 00:04:42.241210 systemd-logind[1812]: Session 26 logged out. Waiting for processes to exit. Aug 13 00:04:42.221000 audit[6259]: CRED_DISP pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:42.251042 kernel: audit: type=1106 audit(1755043482.221:1666): pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:42.251288 kernel: audit: type=1104 audit(1755043482.221:1667): pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:42.255184 systemd-logind[1812]: Removed session 26. Aug 13 00:04:42.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.40:22-139.178.89.65:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:44.119473 systemd[1]: run-containerd-runc-k8s.io-2138229e15dabbeec5991af98a9b5e3bd70057757ad9c948d532a13781581f33-runc.soPuTX.mount: Deactivated successfully. Aug 13 00:04:46.817000 audit[5732]: AVC avc: denied { watch } for pid=5732 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3687102684/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c194,c690 tclass=file permissive=0 Aug 13 00:04:46.820755 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:46.820938 kernel: audit: type=1400 audit(1755043486.817:1669): avc: denied { watch } for pid=5732 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3687102684/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c194,c690 tclass=file permissive=0 Aug 13 00:04:46.817000 audit[5732]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c970c0 a2=fc6 a3=0 items=0 ppid=4687 pid=5732 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 key=(null) Aug 13 00:04:46.849668 kernel: audit: type=1300 audit(1755043486.817:1669): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c970c0 a2=fc6 a3=0 items=0 ppid=4687 pid=5732 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 key=(null) Aug 13 00:04:46.817000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:04:46.863414 kernel: audit: type=1327 audit(1755043486.817:1669): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:04:47.224605 systemd[1]: Started sshd@26-172.31.17.40:22-139.178.89.65:43382.service. Aug 13 00:04:47.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.17.40:22-139.178.89.65:43382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:47.237408 kernel: audit: type=1130 audit(1755043487.224:1670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.17.40:22-139.178.89.65:43382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:47.435470 sshd[6292]: Accepted publickey for core from 139.178.89.65 port 43382 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:47.433000 audit[6292]: USER_ACCT pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.449472 sshd[6292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:47.445000 audit[6292]: CRED_ACQ pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.462864 kernel: audit: type=1101 audit(1755043487.433:1671): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.463081 kernel: audit: type=1103 audit(1755043487.445:1672): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.470466 kernel: audit: type=1006 audit(1755043487.445:1673): pid=6292 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Aug 13 00:04:47.445000 audit[6292]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2c51e30 a2=3 a3=1 items=0 ppid=1 pid=6292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:47.479230 systemd-logind[1812]: New session 27 of user core. Aug 13 00:04:47.488838 kernel: audit: type=1300 audit(1755043487.445:1673): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2c51e30 a2=3 a3=1 items=0 ppid=1 pid=6292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:47.488906 kernel: audit: type=1327 audit(1755043487.445:1673): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:47.445000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:47.489894 systemd[1]: Started session-27.scope. Aug 13 00:04:47.507000 audit[6292]: USER_START pid=6292 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.523729 kernel: audit: type=1105 audit(1755043487.507:1674): pid=6292 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.521000 audit[6294]: CRED_ACQ pid=6294 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.853656 sshd[6292]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:47.854000 audit[6292]: USER_END pid=6292 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.854000 audit[6292]: CRED_DISP pid=6292 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:47.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.17.40:22-139.178.89.65:43382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:47.859179 systemd[1]: sshd@26-172.31.17.40:22-139.178.89.65:43382.service: Deactivated successfully. Aug 13 00:04:47.861900 systemd[1]: session-27.scope: Deactivated successfully. Aug 13 00:04:47.864645 systemd-logind[1812]: Session 27 logged out. Waiting for processes to exit. Aug 13 00:04:47.867039 systemd-logind[1812]: Removed session 27. Aug 13 00:04:48.604080 systemd[1]: run-containerd-runc-k8s.io-56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f-runc.vzf2F7.mount: Deactivated successfully. Aug 13 00:04:54.819326 systemd[1]: run-containerd-runc-k8s.io-d35634b184746e84b3ad8f1b1ef11be9f87bff2f7a5577f36b180614dd267f47-runc.Khj3bs.mount: Deactivated successfully. Aug 13 00:04:58.979962 systemd[1]: run-containerd-runc-k8s.io-56f7b6edf0da5244b40548dcc99c84203a90d78e391de38953ec0173798a356f-runc.Ximo0y.mount: Deactivated successfully. Aug 13 00:05:01.654008 systemd[1]: cri-containerd-504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285.scope: Deactivated successfully. Aug 13 00:05:01.654593 systemd[1]: cri-containerd-504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285.scope: Consumed 7.546s CPU time. Aug 13 00:05:01.660000 audit: BPF prog-id=87 op=UNLOAD Aug 13 00:05:01.663118 kernel: kauditd_printk_skb: 4 callbacks suppressed Aug 13 00:05:01.663290 kernel: audit: type=1334 audit(1755043501.660:1679): prog-id=87 op=UNLOAD Aug 13 00:05:01.660000 audit: BPF prog-id=100 op=UNLOAD Aug 13 00:05:01.671212 kernel: audit: type=1334 audit(1755043501.660:1680): prog-id=100 op=UNLOAD Aug 13 00:05:01.716521 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285-rootfs.mount: Deactivated successfully. Aug 13 00:05:01.720002 env[1823]: time="2025-08-13T00:05:01.719929902Z" level=info msg="shim disconnected" id=504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285 Aug 13 00:05:01.721089 env[1823]: time="2025-08-13T00:05:01.721017097Z" level=warning msg="cleaning up after shim disconnected" id=504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285 namespace=k8s.io Aug 13 00:05:01.721501 env[1823]: time="2025-08-13T00:05:01.721421841Z" level=info msg="cleaning up dead shim" Aug 13 00:05:01.736223 env[1823]: time="2025-08-13T00:05:01.736163708Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:05:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6389 runtime=io.containerd.runc.v2\n" Aug 13 00:05:02.351255 kubelet[2838]: I0813 00:05:02.351182 2838 scope.go:117] "RemoveContainer" containerID="504aff065608b7b1418af55057015f24595599700716b10b94e47881168ca285" Aug 13 00:05:02.356352 env[1823]: time="2025-08-13T00:05:02.356295897Z" level=info msg="CreateContainer within sandbox \"c5f8f7a6dc467f01746dfd167818c0cf7221486b108e74a0b209ff5b2e124fe1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Aug 13 00:05:02.398201 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount85289089.mount: Deactivated successfully. Aug 13 00:05:02.404587 env[1823]: time="2025-08-13T00:05:02.404522740Z" level=info msg="CreateContainer within sandbox \"c5f8f7a6dc467f01746dfd167818c0cf7221486b108e74a0b209ff5b2e124fe1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"b21069fbef2e9202b65be43cc60c64df1297f4c9ffebd020307ed824744f127d\"" Aug 13 00:05:02.405631 env[1823]: time="2025-08-13T00:05:02.405586799Z" level=info msg="StartContainer for \"b21069fbef2e9202b65be43cc60c64df1297f4c9ffebd020307ed824744f127d\"" Aug 13 00:05:02.458695 systemd[1]: Started cri-containerd-b21069fbef2e9202b65be43cc60c64df1297f4c9ffebd020307ed824744f127d.scope. Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.515150 kernel: audit: type=1400 audit(1755043502.498:1681): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.515303 kernel: audit: type=1400 audit(1755043502.498:1682): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.515450 kernel: audit: type=1400 audit(1755043502.498:1683): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.523008 kernel: audit: type=1400 audit(1755043502.498:1684): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.541941 kernel: audit: type=1400 audit(1755043502.498:1685): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.563320 kernel: audit: type=1400 audit(1755043502.498:1686): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.563516 kernel: audit: type=1400 audit(1755043502.498:1687): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.572243 kernel: audit: type=1400 audit(1755043502.498:1688): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit: BPF prog-id=237 op=LOAD Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2454 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:02.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232313036396662656632653932303262363562653433636336306336 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2454 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:02.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232313036396662656632653932303262363562653433636336306336 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.506000 audit: BPF prog-id=238 op=LOAD Aug 13 00:05:02.506000 audit[6413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2454 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:02.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232313036396662656632653932303262363562653433636336306336 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.514000 audit: BPF prog-id=239 op=LOAD Aug 13 00:05:02.514000 audit[6413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2454 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:02.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232313036396662656632653932303262363562653433636336306336 Aug 13 00:05:02.522000 audit: BPF prog-id=239 op=UNLOAD Aug 13 00:05:02.522000 audit: BPF prog-id=238 op=UNLOAD Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { perfmon } for pid=6413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit[6413]: AVC avc: denied { bpf } for pid=6413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:02.522000 audit: BPF prog-id=240 op=LOAD Aug 13 00:05:02.522000 audit[6413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2454 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:02.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232313036396662656632653932303262363562653433636336306336