Aug 13 00:01:26.994390 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Aug 13 00:01:26.994429 kernel: Linux version 5.15.189-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Tue Aug 12 22:50:30 -00 2025 Aug 13 00:01:26.994453 kernel: efi: EFI v2.70 by EDK II Aug 13 00:01:26.994468 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Aug 13 00:01:26.994482 kernel: ACPI: Early table checksum verification disabled Aug 13 00:01:26.994495 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Aug 13 00:01:26.994512 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Aug 13 00:01:26.994526 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Aug 13 00:01:26.994540 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Aug 13 00:01:26.994554 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Aug 13 00:01:26.994573 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Aug 13 00:01:26.994587 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Aug 13 00:01:26.994602 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Aug 13 00:01:26.994616 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Aug 13 00:01:26.994633 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Aug 13 00:01:26.994652 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Aug 13 00:01:26.994666 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Aug 13 00:01:26.994681 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Aug 13 00:01:26.994696 kernel: printk: bootconsole [uart0] enabled Aug 13 00:01:26.994710 kernel: NUMA: Failed to initialise from firmware Aug 13 00:01:26.994725 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Aug 13 00:01:26.994740 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Aug 13 00:01:26.994755 kernel: Zone ranges: Aug 13 00:01:26.994770 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Aug 13 00:01:26.994784 kernel: DMA32 empty Aug 13 00:01:26.994799 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Aug 13 00:01:26.994818 kernel: Movable zone start for each node Aug 13 00:01:26.994832 kernel: Early memory node ranges Aug 13 00:01:26.994847 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Aug 13 00:01:26.994862 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Aug 13 00:01:26.994877 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Aug 13 00:01:26.994891 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Aug 13 00:01:26.994907 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Aug 13 00:01:26.994922 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Aug 13 00:01:26.994936 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Aug 13 00:01:26.994951 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Aug 13 00:01:26.994966 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Aug 13 00:01:26.994981 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Aug 13 00:01:26.994999 kernel: psci: probing for conduit method from ACPI. Aug 13 00:01:26.995014 kernel: psci: PSCIv1.0 detected in firmware. Aug 13 00:01:26.995036 kernel: psci: Using standard PSCI v0.2 function IDs Aug 13 00:01:26.995051 kernel: psci: Trusted OS migration not required Aug 13 00:01:26.995067 kernel: psci: SMC Calling Convention v1.1 Aug 13 00:01:26.995087 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Aug 13 00:01:26.995102 kernel: ACPI: SRAT not present Aug 13 00:01:26.995118 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Aug 13 00:01:26.995134 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Aug 13 00:01:26.995150 kernel: pcpu-alloc: [0] 0 [0] 1 Aug 13 00:01:26.995165 kernel: Detected PIPT I-cache on CPU0 Aug 13 00:01:26.995180 kernel: CPU features: detected: GIC system register CPU interface Aug 13 00:01:26.995196 kernel: CPU features: detected: Spectre-v2 Aug 13 00:01:26.995211 kernel: CPU features: detected: Spectre-v3a Aug 13 00:01:26.995229 kernel: CPU features: detected: Spectre-BHB Aug 13 00:01:26.995263 kernel: CPU features: kernel page table isolation forced ON by KASLR Aug 13 00:01:26.995296 kernel: CPU features: detected: Kernel page table isolation (KPTI) Aug 13 00:01:26.995330 kernel: CPU features: detected: ARM erratum 1742098 Aug 13 00:01:26.995351 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Aug 13 00:01:26.995368 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Aug 13 00:01:27.003444 kernel: Policy zone: Normal Aug 13 00:01:27.003465 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=32404c0887e5b8a80b0f069916a8040bfd969c7a8f47a2db1168b24bc04220cc Aug 13 00:01:27.003484 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Aug 13 00:01:27.003500 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Aug 13 00:01:27.003516 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Aug 13 00:01:27.003532 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Aug 13 00:01:27.003559 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Aug 13 00:01:27.003576 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Aug 13 00:01:27.003592 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Aug 13 00:01:27.003608 kernel: trace event string verifier disabled Aug 13 00:01:27.003623 kernel: rcu: Preemptible hierarchical RCU implementation. Aug 13 00:01:27.003640 kernel: rcu: RCU event tracing is enabled. Aug 13 00:01:27.003656 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Aug 13 00:01:27.003671 kernel: Trampoline variant of Tasks RCU enabled. Aug 13 00:01:27.003687 kernel: Tracing variant of Tasks RCU enabled. Aug 13 00:01:27.003703 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Aug 13 00:01:27.003718 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Aug 13 00:01:27.003733 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Aug 13 00:01:27.003753 kernel: GICv3: 96 SPIs implemented Aug 13 00:01:27.003769 kernel: GICv3: 0 Extended SPIs implemented Aug 13 00:01:27.003784 kernel: GICv3: Distributor has no Range Selector support Aug 13 00:01:27.003800 kernel: Root IRQ handler: gic_handle_irq Aug 13 00:01:27.003815 kernel: GICv3: 16 PPIs implemented Aug 13 00:01:27.003831 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Aug 13 00:01:27.003847 kernel: ACPI: SRAT not present Aug 13 00:01:27.003861 kernel: ITS [mem 0x10080000-0x1009ffff] Aug 13 00:01:27.003877 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Aug 13 00:01:27.003893 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Aug 13 00:01:27.003909 kernel: GICv3: using LPI property table @0x00000004000b0000 Aug 13 00:01:27.003928 kernel: ITS: Using hypervisor restricted LPI range [128] Aug 13 00:01:27.003944 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Aug 13 00:01:27.003960 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Aug 13 00:01:27.003976 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Aug 13 00:01:27.003991 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Aug 13 00:01:27.004007 kernel: Console: colour dummy device 80x25 Aug 13 00:01:27.004024 kernel: printk: console [tty1] enabled Aug 13 00:01:27.004039 kernel: ACPI: Core revision 20210730 Aug 13 00:01:27.004056 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Aug 13 00:01:27.004072 kernel: pid_max: default: 32768 minimum: 301 Aug 13 00:01:27.004092 kernel: LSM: Security Framework initializing Aug 13 00:01:27.004108 kernel: SELinux: Initializing. Aug 13 00:01:27.004124 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Aug 13 00:01:27.004140 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Aug 13 00:01:27.004155 kernel: rcu: Hierarchical SRCU implementation. Aug 13 00:01:27.004171 kernel: Platform MSI: ITS@0x10080000 domain created Aug 13 00:01:27.004187 kernel: PCI/MSI: ITS@0x10080000 domain created Aug 13 00:01:27.004202 kernel: Remapping and enabling EFI services. Aug 13 00:01:27.004217 kernel: smp: Bringing up secondary CPUs ... Aug 13 00:01:27.004233 kernel: Detected PIPT I-cache on CPU1 Aug 13 00:01:27.004253 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Aug 13 00:01:27.004269 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Aug 13 00:01:27.004285 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Aug 13 00:01:27.004300 kernel: smp: Brought up 1 node, 2 CPUs Aug 13 00:01:27.004316 kernel: SMP: Total of 2 processors activated. Aug 13 00:01:27.004332 kernel: CPU features: detected: 32-bit EL0 Support Aug 13 00:01:27.004348 kernel: CPU features: detected: 32-bit EL1 Support Aug 13 00:01:27.004363 kernel: CPU features: detected: CRC32 instructions Aug 13 00:01:27.004399 kernel: CPU: All CPU(s) started at EL1 Aug 13 00:01:27.004423 kernel: alternatives: patching kernel code Aug 13 00:01:27.004439 kernel: devtmpfs: initialized Aug 13 00:01:27.004466 kernel: KASLR disabled due to lack of seed Aug 13 00:01:27.004487 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Aug 13 00:01:27.004504 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Aug 13 00:01:27.004520 kernel: pinctrl core: initialized pinctrl subsystem Aug 13 00:01:27.004536 kernel: SMBIOS 3.0.0 present. Aug 13 00:01:27.004553 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Aug 13 00:01:27.004569 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Aug 13 00:01:27.004586 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Aug 13 00:01:27.004602 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Aug 13 00:01:27.004623 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Aug 13 00:01:27.004640 kernel: audit: initializing netlink subsys (disabled) Aug 13 00:01:27.004657 kernel: audit: type=2000 audit(0.296:1): state=initialized audit_enabled=0 res=1 Aug 13 00:01:27.004674 kernel: thermal_sys: Registered thermal governor 'step_wise' Aug 13 00:01:27.004690 kernel: cpuidle: using governor menu Aug 13 00:01:27.004711 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Aug 13 00:01:27.004728 kernel: ASID allocator initialised with 32768 entries Aug 13 00:01:27.004744 kernel: ACPI: bus type PCI registered Aug 13 00:01:27.004760 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Aug 13 00:01:27.004776 kernel: Serial: AMBA PL011 UART driver Aug 13 00:01:27.004793 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Aug 13 00:01:27.004810 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Aug 13 00:01:27.004826 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Aug 13 00:01:27.004843 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Aug 13 00:01:27.004863 kernel: cryptd: max_cpu_qlen set to 1000 Aug 13 00:01:27.004880 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Aug 13 00:01:27.004896 kernel: ACPI: Added _OSI(Module Device) Aug 13 00:01:27.004913 kernel: ACPI: Added _OSI(Processor Device) Aug 13 00:01:27.004930 kernel: ACPI: Added _OSI(Processor Aggregator Device) Aug 13 00:01:27.004947 kernel: ACPI: Added _OSI(Linux-Dell-Video) Aug 13 00:01:27.004963 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Aug 13 00:01:27.004980 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Aug 13 00:01:27.004996 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Aug 13 00:01:27.005013 kernel: ACPI: Interpreter enabled Aug 13 00:01:27.005034 kernel: ACPI: Using GIC for interrupt routing Aug 13 00:01:27.005050 kernel: ACPI: MCFG table detected, 1 entries Aug 13 00:01:27.005066 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Aug 13 00:01:27.005357 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Aug 13 00:01:27.005572 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Aug 13 00:01:27.005759 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Aug 13 00:01:27.005951 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Aug 13 00:01:27.006175 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Aug 13 00:01:27.006201 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Aug 13 00:01:27.006218 kernel: acpiphp: Slot [1] registered Aug 13 00:01:27.006235 kernel: acpiphp: Slot [2] registered Aug 13 00:01:27.006251 kernel: acpiphp: Slot [3] registered Aug 13 00:01:27.006267 kernel: acpiphp: Slot [4] registered Aug 13 00:01:27.006284 kernel: acpiphp: Slot [5] registered Aug 13 00:01:27.006300 kernel: acpiphp: Slot [6] registered Aug 13 00:01:27.006317 kernel: acpiphp: Slot [7] registered Aug 13 00:01:27.006340 kernel: acpiphp: Slot [8] registered Aug 13 00:01:27.006356 kernel: acpiphp: Slot [9] registered Aug 13 00:01:27.006420 kernel: acpiphp: Slot [10] registered Aug 13 00:01:27.006442 kernel: acpiphp: Slot [11] registered Aug 13 00:01:27.006458 kernel: acpiphp: Slot [12] registered Aug 13 00:01:27.006475 kernel: acpiphp: Slot [13] registered Aug 13 00:01:27.006491 kernel: acpiphp: Slot [14] registered Aug 13 00:01:27.006508 kernel: acpiphp: Slot [15] registered Aug 13 00:01:27.006524 kernel: acpiphp: Slot [16] registered Aug 13 00:01:27.006546 kernel: acpiphp: Slot [17] registered Aug 13 00:01:27.006563 kernel: acpiphp: Slot [18] registered Aug 13 00:01:27.006580 kernel: acpiphp: Slot [19] registered Aug 13 00:01:27.006596 kernel: acpiphp: Slot [20] registered Aug 13 00:01:27.006612 kernel: acpiphp: Slot [21] registered Aug 13 00:01:27.006629 kernel: acpiphp: Slot [22] registered Aug 13 00:01:27.006646 kernel: acpiphp: Slot [23] registered Aug 13 00:01:27.006662 kernel: acpiphp: Slot [24] registered Aug 13 00:01:27.006678 kernel: acpiphp: Slot [25] registered Aug 13 00:01:27.006694 kernel: acpiphp: Slot [26] registered Aug 13 00:01:27.006714 kernel: acpiphp: Slot [27] registered Aug 13 00:01:27.006731 kernel: acpiphp: Slot [28] registered Aug 13 00:01:27.006748 kernel: acpiphp: Slot [29] registered Aug 13 00:01:27.006764 kernel: acpiphp: Slot [30] registered Aug 13 00:01:27.006780 kernel: acpiphp: Slot [31] registered Aug 13 00:01:27.006797 kernel: PCI host bridge to bus 0000:00 Aug 13 00:01:27.007011 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Aug 13 00:01:27.007182 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Aug 13 00:01:27.007362 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Aug 13 00:01:27.007568 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Aug 13 00:01:27.007785 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Aug 13 00:01:27.007990 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Aug 13 00:01:27.008188 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Aug 13 00:01:27.014240 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Aug 13 00:01:27.014553 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Aug 13 00:01:27.014751 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Aug 13 00:01:27.014953 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Aug 13 00:01:27.015140 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Aug 13 00:01:27.015328 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Aug 13 00:01:27.015544 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Aug 13 00:01:27.015735 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Aug 13 00:01:27.015929 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Aug 13 00:01:27.016118 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Aug 13 00:01:27.016304 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Aug 13 00:01:27.016531 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Aug 13 00:01:27.016732 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Aug 13 00:01:27.016919 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Aug 13 00:01:27.017087 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Aug 13 00:01:27.017268 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Aug 13 00:01:27.017292 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Aug 13 00:01:27.017310 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Aug 13 00:01:27.017352 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Aug 13 00:01:27.028494 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Aug 13 00:01:27.028533 kernel: iommu: Default domain type: Translated Aug 13 00:01:27.028551 kernel: iommu: DMA domain TLB invalidation policy: strict mode Aug 13 00:01:27.028569 kernel: vgaarb: loaded Aug 13 00:01:27.028585 kernel: pps_core: LinuxPPS API ver. 1 registered Aug 13 00:01:27.028611 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Aug 13 00:01:27.028628 kernel: PTP clock support registered Aug 13 00:01:27.028645 kernel: Registered efivars operations Aug 13 00:01:27.028661 kernel: clocksource: Switched to clocksource arch_sys_counter Aug 13 00:01:27.028677 kernel: VFS: Disk quotas dquot_6.6.0 Aug 13 00:01:27.028694 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Aug 13 00:01:27.028710 kernel: pnp: PnP ACPI init Aug 13 00:01:27.028957 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Aug 13 00:01:27.028987 kernel: pnp: PnP ACPI: found 1 devices Aug 13 00:01:27.029005 kernel: NET: Registered PF_INET protocol family Aug 13 00:01:27.029022 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Aug 13 00:01:27.029038 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Aug 13 00:01:27.029055 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Aug 13 00:01:27.029072 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Aug 13 00:01:27.029089 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Aug 13 00:01:27.029106 kernel: TCP: Hash tables configured (established 32768 bind 32768) Aug 13 00:01:27.029122 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Aug 13 00:01:27.029143 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Aug 13 00:01:27.029160 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Aug 13 00:01:27.029177 kernel: PCI: CLS 0 bytes, default 64 Aug 13 00:01:27.029193 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Aug 13 00:01:27.029210 kernel: kvm [1]: HYP mode not available Aug 13 00:01:27.029227 kernel: Initialise system trusted keyrings Aug 13 00:01:27.029244 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Aug 13 00:01:27.029260 kernel: Key type asymmetric registered Aug 13 00:01:27.029277 kernel: Asymmetric key parser 'x509' registered Aug 13 00:01:27.029297 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Aug 13 00:01:27.029314 kernel: io scheduler mq-deadline registered Aug 13 00:01:27.029330 kernel: io scheduler kyber registered Aug 13 00:01:27.029346 kernel: io scheduler bfq registered Aug 13 00:01:27.029581 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Aug 13 00:01:27.029609 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Aug 13 00:01:27.029626 kernel: ACPI: button: Power Button [PWRB] Aug 13 00:01:27.029643 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Aug 13 00:01:27.029659 kernel: ACPI: button: Sleep Button [SLPB] Aug 13 00:01:27.029682 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Aug 13 00:01:27.029699 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Aug 13 00:01:27.029891 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Aug 13 00:01:27.029916 kernel: printk: console [ttyS0] disabled Aug 13 00:01:27.029933 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Aug 13 00:01:27.029950 kernel: printk: console [ttyS0] enabled Aug 13 00:01:27.029967 kernel: printk: bootconsole [uart0] disabled Aug 13 00:01:27.029983 kernel: thunder_xcv, ver 1.0 Aug 13 00:01:27.029999 kernel: thunder_bgx, ver 1.0 Aug 13 00:01:27.030039 kernel: nicpf, ver 1.0 Aug 13 00:01:27.030058 kernel: nicvf, ver 1.0 Aug 13 00:01:27.030262 kernel: rtc-efi rtc-efi.0: registered as rtc0 Aug 13 00:01:27.030479 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-08-13T00:01:26 UTC (1755043286) Aug 13 00:01:27.030505 kernel: hid: raw HID events driver (C) Jiri Kosina Aug 13 00:01:27.030522 kernel: NET: Registered PF_INET6 protocol family Aug 13 00:01:27.030539 kernel: Segment Routing with IPv6 Aug 13 00:01:27.030556 kernel: In-situ OAM (IOAM) with IPv6 Aug 13 00:01:27.030580 kernel: NET: Registered PF_PACKET protocol family Aug 13 00:01:27.030596 kernel: Key type dns_resolver registered Aug 13 00:01:27.030613 kernel: registered taskstats version 1 Aug 13 00:01:27.030630 kernel: Loading compiled-in X.509 certificates Aug 13 00:01:27.030647 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.189-flatcar: 72b807ae6dac6ab18c2f4ab9460d3472cf28c19d' Aug 13 00:01:27.030663 kernel: Key type .fscrypt registered Aug 13 00:01:27.030679 kernel: Key type fscrypt-provisioning registered Aug 13 00:01:27.030696 kernel: ima: No TPM chip found, activating TPM-bypass! Aug 13 00:01:27.030713 kernel: ima: Allocated hash algorithm: sha1 Aug 13 00:01:27.030734 kernel: ima: No architecture policies found Aug 13 00:01:27.030750 kernel: clk: Disabling unused clocks Aug 13 00:01:27.030766 kernel: Freeing unused kernel memory: 36416K Aug 13 00:01:27.030783 kernel: Run /init as init process Aug 13 00:01:27.030800 kernel: with arguments: Aug 13 00:01:27.030816 kernel: /init Aug 13 00:01:27.030832 kernel: with environment: Aug 13 00:01:27.030848 kernel: HOME=/ Aug 13 00:01:27.030864 kernel: TERM=linux Aug 13 00:01:27.030884 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Aug 13 00:01:27.030906 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:01:27.030927 systemd[1]: Detected virtualization amazon. Aug 13 00:01:27.030945 systemd[1]: Detected architecture arm64. Aug 13 00:01:27.030963 systemd[1]: Running in initrd. Aug 13 00:01:27.030980 systemd[1]: No hostname configured, using default hostname. Aug 13 00:01:27.030997 systemd[1]: Hostname set to . Aug 13 00:01:27.031020 systemd[1]: Initializing machine ID from VM UUID. Aug 13 00:01:27.031038 systemd[1]: Queued start job for default target initrd.target. Aug 13 00:01:27.031056 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:01:27.031073 systemd[1]: Reached target cryptsetup.target. Aug 13 00:01:27.031091 systemd[1]: Reached target paths.target. Aug 13 00:01:27.031108 systemd[1]: Reached target slices.target. Aug 13 00:01:27.031126 systemd[1]: Reached target swap.target. Aug 13 00:01:27.031143 systemd[1]: Reached target timers.target. Aug 13 00:01:27.031166 systemd[1]: Listening on iscsid.socket. Aug 13 00:01:27.031185 systemd[1]: Listening on iscsiuio.socket. Aug 13 00:01:27.031202 systemd[1]: Listening on systemd-journald-audit.socket. Aug 13 00:01:27.031220 systemd[1]: Listening on systemd-journald-dev-log.socket. Aug 13 00:01:27.031238 systemd[1]: Listening on systemd-journald.socket. Aug 13 00:01:27.031256 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:01:27.031274 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:01:27.031291 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:01:27.031313 systemd[1]: Reached target sockets.target. Aug 13 00:01:27.031331 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:01:27.031349 systemd[1]: Finished network-cleanup.service. Aug 13 00:01:27.031367 systemd[1]: Starting systemd-fsck-usr.service... Aug 13 00:01:27.038123 systemd[1]: Starting systemd-journald.service... Aug 13 00:01:27.038156 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:01:27.038175 systemd[1]: Starting systemd-resolved.service... Aug 13 00:01:27.038194 systemd[1]: Starting systemd-vconsole-setup.service... Aug 13 00:01:27.038213 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:01:27.038241 kernel: audit: type=1130 audit(1755043286.996:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.038262 systemd[1]: Finished systemd-fsck-usr.service. Aug 13 00:01:27.038280 kernel: audit: type=1130 audit(1755043287.012:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.038298 systemd[1]: Finished systemd-vconsole-setup.service. Aug 13 00:01:27.038320 systemd-journald[310]: Journal started Aug 13 00:01:27.038477 systemd-journald[310]: Runtime Journal (/run/log/journal/ec2ad874ab58458d4885a71e6c5965b6) is 8.0M, max 75.4M, 67.4M free. Aug 13 00:01:26.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.008612 systemd-modules-load[311]: Inserted module 'overlay' Aug 13 00:01:27.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.056404 kernel: audit: type=1130 audit(1755043287.038:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.056476 systemd[1]: Started systemd-journald.service. Aug 13 00:01:27.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.060449 systemd[1]: Starting dracut-cmdline-ask.service... Aug 13 00:01:27.079682 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 00:01:27.093407 kernel: audit: type=1130 audit(1755043287.057:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.093480 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Aug 13 00:01:27.103455 systemd-resolved[312]: Positive Trust Anchors: Aug 13 00:01:27.105498 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 00:01:27.108653 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 00:01:27.123487 kernel: Bridge firewalling registered Aug 13 00:01:27.124500 systemd-modules-load[311]: Inserted module 'br_netfilter' Aug 13 00:01:27.128825 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 00:01:27.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.150400 kernel: audit: type=1130 audit(1755043287.127:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.152904 systemd[1]: Finished dracut-cmdline-ask.service. Aug 13 00:01:27.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.158105 systemd[1]: Starting dracut-cmdline.service... Aug 13 00:01:27.170400 kernel: audit: type=1130 audit(1755043287.153:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.175263 kernel: SCSI subsystem initialized Aug 13 00:01:27.195821 dracut-cmdline[327]: dracut-dracut-053 Aug 13 00:01:27.200308 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Aug 13 00:01:27.200410 kernel: device-mapper: uevent: version 1.0.3 Aug 13 00:01:27.205085 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Aug 13 00:01:27.205322 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=32404c0887e5b8a80b0f069916a8040bfd969c7a8f47a2db1168b24bc04220cc Aug 13 00:01:27.218775 systemd-modules-load[311]: Inserted module 'dm_multipath' Aug 13 00:01:27.234060 kernel: audit: type=1130 audit(1755043287.220:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.220129 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:01:27.225294 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:01:27.258964 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:01:27.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.271967 kernel: audit: type=1130 audit(1755043287.259:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.365415 kernel: Loading iSCSI transport class v2.0-870. Aug 13 00:01:27.386422 kernel: iscsi: registered transport (tcp) Aug 13 00:01:27.414552 kernel: iscsi: registered transport (qla4xxx) Aug 13 00:01:27.414633 kernel: QLogic iSCSI HBA Driver Aug 13 00:01:27.585408 kernel: random: crng init done Aug 13 00:01:27.585628 systemd-resolved[312]: Defaulting to hostname 'linux'. Aug 13 00:01:27.589648 systemd[1]: Started systemd-resolved.service. Aug 13 00:01:27.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.593338 systemd[1]: Reached target nss-lookup.target. Aug 13 00:01:27.604442 kernel: audit: type=1130 audit(1755043287.591:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.613108 systemd[1]: Finished dracut-cmdline.service. Aug 13 00:01:27.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:27.617084 systemd[1]: Starting dracut-pre-udev.service... Aug 13 00:01:27.683421 kernel: raid6: neonx8 gen() 6382 MB/s Aug 13 00:01:27.701408 kernel: raid6: neonx8 xor() 4647 MB/s Aug 13 00:01:27.719409 kernel: raid6: neonx4 gen() 6562 MB/s Aug 13 00:01:27.737406 kernel: raid6: neonx4 xor() 4839 MB/s Aug 13 00:01:27.755407 kernel: raid6: neonx2 gen() 5784 MB/s Aug 13 00:01:27.773405 kernel: raid6: neonx2 xor() 4430 MB/s Aug 13 00:01:27.791409 kernel: raid6: neonx1 gen() 4482 MB/s Aug 13 00:01:27.809407 kernel: raid6: neonx1 xor() 3610 MB/s Aug 13 00:01:27.827408 kernel: raid6: int64x8 gen() 3440 MB/s Aug 13 00:01:27.845409 kernel: raid6: int64x8 xor() 2061 MB/s Aug 13 00:01:27.863408 kernel: raid6: int64x4 gen() 3830 MB/s Aug 13 00:01:27.881412 kernel: raid6: int64x4 xor() 2172 MB/s Aug 13 00:01:27.899413 kernel: raid6: int64x2 gen() 3591 MB/s Aug 13 00:01:27.917412 kernel: raid6: int64x2 xor() 1926 MB/s Aug 13 00:01:27.935414 kernel: raid6: int64x1 gen() 2749 MB/s Aug 13 00:01:27.955126 kernel: raid6: int64x1 xor() 1411 MB/s Aug 13 00:01:27.955165 kernel: raid6: using algorithm neonx4 gen() 6562 MB/s Aug 13 00:01:27.955200 kernel: raid6: .... xor() 4839 MB/s, rmw enabled Aug 13 00:01:27.957058 kernel: raid6: using neon recovery algorithm Aug 13 00:01:27.978030 kernel: xor: measuring software checksum speed Aug 13 00:01:27.978097 kernel: 8regs : 9296 MB/sec Aug 13 00:01:27.980130 kernel: 32regs : 10714 MB/sec Aug 13 00:01:27.984151 kernel: arm64_neon : 9058 MB/sec Aug 13 00:01:27.984196 kernel: xor: using function: 32regs (10714 MB/sec) Aug 13 00:01:28.081431 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Aug 13 00:01:28.099599 systemd[1]: Finished dracut-pre-udev.service. Aug 13 00:01:28.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:28.107000 audit: BPF prog-id=7 op=LOAD Aug 13 00:01:28.107000 audit: BPF prog-id=8 op=LOAD Aug 13 00:01:28.109458 systemd[1]: Starting systemd-udevd.service... Aug 13 00:01:28.138414 systemd-udevd[509]: Using default interface naming scheme 'v252'. Aug 13 00:01:28.149349 systemd[1]: Started systemd-udevd.service. Aug 13 00:01:28.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:28.160163 systemd[1]: Starting dracut-pre-trigger.service... Aug 13 00:01:28.193976 dracut-pre-trigger[523]: rd.md=0: removing MD RAID activation Aug 13 00:01:28.261323 systemd[1]: Finished dracut-pre-trigger.service. Aug 13 00:01:28.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:28.265759 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:01:28.367359 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:01:28.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:28.495779 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Aug 13 00:01:28.495852 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Aug 13 00:01:28.516734 kernel: ena 0000:00:05.0: ENA device version: 0.10 Aug 13 00:01:28.517037 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Aug 13 00:01:28.517303 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Aug 13 00:01:28.517332 kernel: nvme nvme0: pci function 0000:00:04.0 Aug 13 00:01:28.517637 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:72:2d:e5:9b:af Aug 13 00:01:28.522457 kernel: nvme nvme0: 2/0/0 default/read/poll queues Aug 13 00:01:28.530028 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Aug 13 00:01:28.530096 kernel: GPT:9289727 != 16777215 Aug 13 00:01:28.530120 kernel: GPT:Alternate GPT header not at the end of the disk. Aug 13 00:01:28.532334 kernel: GPT:9289727 != 16777215 Aug 13 00:01:28.533736 kernel: GPT: Use GNU Parted to correct GPT errors. Aug 13 00:01:28.535682 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:01:28.544241 (udev-worker)[570]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:01:28.615414 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (565) Aug 13 00:01:28.659353 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Aug 13 00:01:28.722710 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:01:28.740187 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Aug 13 00:01:28.764713 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Aug 13 00:01:28.769168 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Aug 13 00:01:28.776172 systemd[1]: Starting disk-uuid.service... Aug 13 00:01:28.792411 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:01:28.792673 disk-uuid[671]: Primary Header is updated. Aug 13 00:01:28.792673 disk-uuid[671]: Secondary Entries is updated. Aug 13 00:01:28.792673 disk-uuid[671]: Secondary Header is updated. Aug 13 00:01:29.823456 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Aug 13 00:01:29.827593 disk-uuid[672]: The operation has completed successfully. Aug 13 00:01:29.991947 systemd[1]: disk-uuid.service: Deactivated successfully. Aug 13 00:01:29.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:29.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:29.992171 systemd[1]: Finished disk-uuid.service. Aug 13 00:01:30.025516 systemd[1]: Starting verity-setup.service... Aug 13 00:01:30.055446 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Aug 13 00:01:30.142305 systemd[1]: Found device dev-mapper-usr.device. Aug 13 00:01:30.149300 systemd[1]: Mounting sysusr-usr.mount... Aug 13 00:01:30.157870 systemd[1]: Finished verity-setup.service. Aug 13 00:01:30.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.255430 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Aug 13 00:01:30.256075 systemd[1]: Mounted sysusr-usr.mount. Aug 13 00:01:30.262325 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Aug 13 00:01:30.266824 systemd[1]: Starting ignition-setup.service... Aug 13 00:01:30.269841 systemd[1]: Starting parse-ip-for-networkd.service... Aug 13 00:01:30.302630 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:01:30.302722 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:01:30.305215 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:01:30.347409 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:01:30.367810 systemd[1]: mnt-oem.mount: Deactivated successfully. Aug 13 00:01:30.396589 systemd[1]: Finished ignition-setup.service. Aug 13 00:01:30.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.401476 systemd[1]: Starting ignition-fetch-offline.service... Aug 13 00:01:30.437982 systemd[1]: Finished parse-ip-for-networkd.service. Aug 13 00:01:30.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.441000 audit: BPF prog-id=9 op=LOAD Aug 13 00:01:30.443116 systemd[1]: Starting systemd-networkd.service... Aug 13 00:01:30.498276 systemd-networkd[1028]: lo: Link UP Aug 13 00:01:30.498299 systemd-networkd[1028]: lo: Gained carrier Aug 13 00:01:30.502758 systemd-networkd[1028]: Enumeration completed Aug 13 00:01:30.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.503268 systemd-networkd[1028]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:01:30.503518 systemd[1]: Started systemd-networkd.service. Aug 13 00:01:30.505561 systemd[1]: Reached target network.target. Aug 13 00:01:30.509498 systemd[1]: Starting iscsiuio.service... Aug 13 00:01:30.524464 systemd-networkd[1028]: eth0: Link UP Aug 13 00:01:30.526136 systemd-networkd[1028]: eth0: Gained carrier Aug 13 00:01:30.536347 systemd[1]: Started iscsiuio.service. Aug 13 00:01:30.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.544810 systemd[1]: Starting iscsid.service... Aug 13 00:01:30.551623 systemd-networkd[1028]: eth0: DHCPv4 address 172.31.18.163/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 00:01:30.558223 iscsid[1033]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:01:30.558223 iscsid[1033]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Aug 13 00:01:30.558223 iscsid[1033]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Aug 13 00:01:30.558223 iscsid[1033]: If using hardware iscsi like qla4xxx this message can be ignored. Aug 13 00:01:30.558223 iscsid[1033]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:01:30.558223 iscsid[1033]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Aug 13 00:01:30.576316 systemd[1]: Started iscsid.service. Aug 13 00:01:30.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.596402 systemd[1]: Starting dracut-initqueue.service... Aug 13 00:01:30.623699 systemd[1]: Finished dracut-initqueue.service. Aug 13 00:01:30.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:30.625925 systemd[1]: Reached target remote-fs-pre.target. Aug 13 00:01:30.630537 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:01:30.632653 systemd[1]: Reached target remote-fs.target. Aug 13 00:01:30.636257 systemd[1]: Starting dracut-pre-mount.service... Aug 13 00:01:30.659399 systemd[1]: Finished dracut-pre-mount.service. Aug 13 00:01:30.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.153142 ignition[1006]: Ignition 2.14.0 Aug 13 00:01:31.153172 ignition[1006]: Stage: fetch-offline Aug 13 00:01:31.155040 ignition[1006]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:31.155139 ignition[1006]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:31.182745 ignition[1006]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:31.183891 ignition[1006]: Ignition finished successfully Aug 13 00:01:31.189293 systemd[1]: Finished ignition-fetch-offline.service. Aug 13 00:01:31.203108 kernel: kauditd_printk_skb: 18 callbacks suppressed Aug 13 00:01:31.203851 kernel: audit: type=1130 audit(1755043291.190:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.193038 systemd[1]: Starting ignition-fetch.service... Aug 13 00:01:31.214587 ignition[1052]: Ignition 2.14.0 Aug 13 00:01:31.214616 ignition[1052]: Stage: fetch Aug 13 00:01:31.214931 ignition[1052]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:31.214990 ignition[1052]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:31.231644 ignition[1052]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:31.234109 ignition[1052]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:31.250319 ignition[1052]: INFO : PUT result: OK Aug 13 00:01:31.255801 ignition[1052]: DEBUG : parsed url from cmdline: "" Aug 13 00:01:31.257831 ignition[1052]: INFO : no config URL provided Aug 13 00:01:31.257831 ignition[1052]: INFO : reading system config file "/usr/lib/ignition/user.ign" Aug 13 00:01:31.257831 ignition[1052]: INFO : no config at "/usr/lib/ignition/user.ign" Aug 13 00:01:31.257831 ignition[1052]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:31.267796 ignition[1052]: INFO : PUT result: OK Aug 13 00:01:31.269504 ignition[1052]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Aug 13 00:01:31.272576 ignition[1052]: INFO : GET result: OK Aug 13 00:01:31.274280 ignition[1052]: DEBUG : parsing config with SHA512: 6485baac26e571614fd1a76cc16ba6e5366a02458a8283f6e7003ea8bef1fd84776508b4eec09664df87bd8f6834fd5db7704a4af08a99ee71d9c8b4652737a0 Aug 13 00:01:31.287805 unknown[1052]: fetched base config from "system" Aug 13 00:01:31.287835 unknown[1052]: fetched base config from "system" Aug 13 00:01:31.287851 unknown[1052]: fetched user config from "aws" Aug 13 00:01:31.294846 ignition[1052]: fetch: fetch complete Aug 13 00:01:31.294874 ignition[1052]: fetch: fetch passed Aug 13 00:01:31.295017 ignition[1052]: Ignition finished successfully Aug 13 00:01:31.300333 systemd[1]: Finished ignition-fetch.service. Aug 13 00:01:31.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.306842 systemd[1]: Starting ignition-kargs.service... Aug 13 00:01:31.316592 kernel: audit: type=1130 audit(1755043291.304:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.331856 ignition[1058]: Ignition 2.14.0 Aug 13 00:01:31.331885 ignition[1058]: Stage: kargs Aug 13 00:01:31.332212 ignition[1058]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:31.332271 ignition[1058]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:31.348424 ignition[1058]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:31.351006 ignition[1058]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:31.354921 ignition[1058]: INFO : PUT result: OK Aug 13 00:01:31.360167 ignition[1058]: kargs: kargs passed Aug 13 00:01:31.360285 ignition[1058]: Ignition finished successfully Aug 13 00:01:31.366800 systemd[1]: Finished ignition-kargs.service. Aug 13 00:01:31.383308 kernel: audit: type=1130 audit(1755043291.367:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.370759 systemd[1]: Starting ignition-disks.service... Aug 13 00:01:31.392951 ignition[1064]: Ignition 2.14.0 Aug 13 00:01:31.392979 ignition[1064]: Stage: disks Aug 13 00:01:31.393323 ignition[1064]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:31.393420 ignition[1064]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:31.409866 ignition[1064]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:31.412613 ignition[1064]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:31.416066 ignition[1064]: INFO : PUT result: OK Aug 13 00:01:31.422612 ignition[1064]: disks: disks passed Aug 13 00:01:31.422793 ignition[1064]: Ignition finished successfully Aug 13 00:01:31.427405 systemd[1]: Finished ignition-disks.service. Aug 13 00:01:31.439584 kernel: audit: type=1130 audit(1755043291.428:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.429976 systemd[1]: Reached target initrd-root-device.target. Aug 13 00:01:31.441623 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:01:31.445186 systemd[1]: Reached target local-fs.target. Aug 13 00:01:31.447016 systemd[1]: Reached target sysinit.target. Aug 13 00:01:31.450358 systemd[1]: Reached target basic.target. Aug 13 00:01:31.455175 systemd[1]: Starting systemd-fsck-root.service... Aug 13 00:01:31.504741 systemd-fsck[1072]: ROOT: clean, 629/553520 files, 56026/553472 blocks Aug 13 00:01:31.513504 systemd[1]: Finished systemd-fsck-root.service. Aug 13 00:01:31.525633 kernel: audit: type=1130 audit(1755043291.514:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.522906 systemd[1]: Mounting sysroot.mount... Aug 13 00:01:31.544443 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Aug 13 00:01:31.545815 systemd[1]: Mounted sysroot.mount. Aug 13 00:01:31.551749 systemd[1]: Reached target initrd-root-fs.target. Aug 13 00:01:31.562610 systemd[1]: Mounting sysroot-usr.mount... Aug 13 00:01:31.568194 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Aug 13 00:01:31.568281 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Aug 13 00:01:31.568341 systemd[1]: Reached target ignition-diskful.target. Aug 13 00:01:31.582666 systemd[1]: Mounted sysroot-usr.mount. Aug 13 00:01:31.601635 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 00:01:31.607308 systemd[1]: Starting initrd-setup-root.service... Aug 13 00:01:31.626362 initrd-setup-root[1094]: cut: /sysroot/etc/passwd: No such file or directory Aug 13 00:01:31.639435 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1089) Aug 13 00:01:31.646216 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:01:31.646285 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:01:31.646311 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:01:31.651546 initrd-setup-root[1108]: cut: /sysroot/etc/group: No such file or directory Aug 13 00:01:31.661617 initrd-setup-root[1126]: cut: /sysroot/etc/shadow: No such file or directory Aug 13 00:01:31.671137 initrd-setup-root[1134]: cut: /sysroot/etc/gshadow: No such file or directory Aug 13 00:01:31.718433 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:01:31.722873 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 00:01:31.882330 systemd[1]: Finished initrd-setup-root.service. Aug 13 00:01:31.882659 systemd-networkd[1028]: eth0: Gained IPv6LL Aug 13 00:01:31.904557 kernel: audit: type=1130 audit(1755043291.885:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.888632 systemd[1]: Starting ignition-mount.service... Aug 13 00:01:31.909084 systemd[1]: Starting sysroot-boot.service... Aug 13 00:01:31.921249 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Aug 13 00:01:31.923357 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Aug 13 00:01:31.955362 systemd[1]: Finished sysroot-boot.service. Aug 13 00:01:31.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:31.970449 kernel: audit: type=1130 audit(1755043291.960:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.011915 ignition[1157]: INFO : Ignition 2.14.0 Aug 13 00:01:32.014416 ignition[1157]: INFO : Stage: mount Aug 13 00:01:32.016647 ignition[1157]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:32.019694 ignition[1157]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:32.036932 ignition[1157]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:32.039910 ignition[1157]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:32.043526 ignition[1157]: INFO : PUT result: OK Aug 13 00:01:32.049648 ignition[1157]: INFO : mount: mount passed Aug 13 00:01:32.051679 ignition[1157]: INFO : Ignition finished successfully Aug 13 00:01:32.055173 systemd[1]: Finished ignition-mount.service. Aug 13 00:01:32.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.060726 systemd[1]: Starting ignition-files.service... Aug 13 00:01:32.072467 kernel: audit: type=1130 audit(1755043292.057:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:32.080470 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 00:01:32.104422 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1164) Aug 13 00:01:32.111098 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:01:32.111161 kernel: BTRFS info (device nvme0n1p6): using free space tree Aug 13 00:01:32.111187 kernel: BTRFS info (device nvme0n1p6): has skinny extents Aug 13 00:01:32.127415 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Aug 13 00:01:32.132236 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 00:01:32.153183 ignition[1183]: INFO : Ignition 2.14.0 Aug 13 00:01:32.155420 ignition[1183]: INFO : Stage: files Aug 13 00:01:32.157606 ignition[1183]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:32.160918 ignition[1183]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:32.177291 ignition[1183]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:32.180360 ignition[1183]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:32.183566 ignition[1183]: INFO : PUT result: OK Aug 13 00:01:32.189227 ignition[1183]: DEBUG : files: compiled without relabeling support, skipping Aug 13 00:01:32.194192 ignition[1183]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Aug 13 00:01:32.194192 ignition[1183]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Aug 13 00:01:32.251108 ignition[1183]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Aug 13 00:01:32.258502 ignition[1183]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Aug 13 00:01:32.264045 unknown[1183]: wrote ssh authorized keys file for user: core Aug 13 00:01:32.267218 ignition[1183]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Aug 13 00:01:32.267218 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Aug 13 00:01:32.274748 ignition[1183]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Aug 13 00:01:32.337892 ignition[1183]: INFO : GET result: OK Aug 13 00:01:32.706639 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Aug 13 00:01:32.710956 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 00:01:32.710956 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:32.728063 ignition[1183]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2541144967" Aug 13 00:01:32.731337 ignition[1183]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2541144967": device or resource busy Aug 13 00:01:32.731337 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2541144967", trying btrfs: device or resource busy Aug 13 00:01:32.731337 ignition[1183]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2541144967" Aug 13 00:01:32.749538 ignition[1183]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2541144967" Aug 13 00:01:32.754320 ignition[1183]: INFO : op(3): [started] unmounting "/mnt/oem2541144967" Aug 13 00:01:32.758198 ignition[1183]: INFO : op(3): [finished] unmounting "/mnt/oem2541144967" Aug 13 00:01:32.758198 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Aug 13 00:01:32.758198 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Aug 13 00:01:32.756912 systemd[1]: mnt-oem2541144967.mount: Deactivated successfully. Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Aug 13 00:01:32.776408 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 00:01:32.776408 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:32.837239 ignition[1183]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1666054788" Aug 13 00:01:32.837239 ignition[1183]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1666054788": device or resource busy Aug 13 00:01:32.837239 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1666054788", trying btrfs: device or resource busy Aug 13 00:01:32.837239 ignition[1183]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1666054788" Aug 13 00:01:32.837239 ignition[1183]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1666054788" Aug 13 00:01:32.837239 ignition[1183]: INFO : op(6): [started] unmounting "/mnt/oem1666054788" Aug 13 00:01:32.837239 ignition[1183]: INFO : op(6): [finished] unmounting "/mnt/oem1666054788" Aug 13 00:01:32.837239 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Aug 13 00:01:32.837239 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 00:01:32.837239 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:32.830857 systemd[1]: mnt-oem1666054788.mount: Deactivated successfully. Aug 13 00:01:32.884393 ignition[1183]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem683988958" Aug 13 00:01:32.884393 ignition[1183]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem683988958": device or resource busy Aug 13 00:01:32.884393 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem683988958", trying btrfs: device or resource busy Aug 13 00:01:32.884393 ignition[1183]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem683988958" Aug 13 00:01:32.906672 ignition[1183]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem683988958" Aug 13 00:01:32.906672 ignition[1183]: INFO : op(9): [started] unmounting "/mnt/oem683988958" Aug 13 00:01:32.906672 ignition[1183]: INFO : op(9): [finished] unmounting "/mnt/oem683988958" Aug 13 00:01:32.906672 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Aug 13 00:01:32.919084 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:01:32.919084 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:01:32.936871 ignition[1183]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem411082675" Aug 13 00:01:32.940106 ignition[1183]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem411082675": device or resource busy Aug 13 00:01:32.940106 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem411082675", trying btrfs: device or resource busy Aug 13 00:01:32.940106 ignition[1183]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem411082675" Aug 13 00:01:32.940106 ignition[1183]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem411082675" Aug 13 00:01:32.940106 ignition[1183]: INFO : op(c): [started] unmounting "/mnt/oem411082675" Aug 13 00:01:32.940106 ignition[1183]: INFO : op(c): [finished] unmounting "/mnt/oem411082675" Aug 13 00:01:32.960582 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:01:32.960582 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Aug 13 00:01:32.960582 ignition[1183]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Aug 13 00:01:33.301520 ignition[1183]: INFO : GET result: OK Aug 13 00:01:33.804278 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(12): [started] processing unit "nvidia.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(12): [finished] processing unit "nvidia.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Aug 13 00:01:33.809125 ignition[1183]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 00:01:33.856177 ignition[1183]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Aug 13 00:01:33.856177 ignition[1183]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 00:01:33.856177 ignition[1183]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Aug 13 00:01:33.856177 ignition[1183]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Aug 13 00:01:33.856177 ignition[1183]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Aug 13 00:01:33.856177 ignition[1183]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Aug 13 00:01:33.856177 ignition[1183]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Aug 13 00:01:33.856177 ignition[1183]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:01:33.856177 ignition[1183]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:01:33.909782 kernel: audit: type=1130 audit(1755043293.863:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.862776 systemd[1]: Finished ignition-files.service. Aug 13 00:01:33.913606 ignition[1183]: INFO : files: files passed Aug 13 00:01:33.913606 ignition[1183]: INFO : Ignition finished successfully Aug 13 00:01:33.928547 kernel: audit: type=1130 audit(1755043293.917:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.898225 systemd[1]: Starting initrd-setup-root-after-ignition.service... Aug 13 00:01:33.904874 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Aug 13 00:01:33.906736 systemd[1]: Starting ignition-quench.service... Aug 13 00:01:33.916476 systemd[1]: ignition-quench.service: Deactivated successfully. Aug 13 00:01:33.916685 systemd[1]: Finished ignition-quench.service. Aug 13 00:01:33.942436 initrd-setup-root-after-ignition[1208]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Aug 13 00:01:33.947147 systemd[1]: Finished initrd-setup-root-after-ignition.service. Aug 13 00:01:33.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.951675 systemd[1]: Reached target ignition-complete.target. Aug 13 00:01:33.957268 systemd[1]: Starting initrd-parse-etc.service... Aug 13 00:01:33.985667 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Aug 13 00:01:33.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:33.985893 systemd[1]: Finished initrd-parse-etc.service. Aug 13 00:01:33.993772 systemd[1]: Reached target initrd-fs.target. Aug 13 00:01:33.995797 systemd[1]: Reached target initrd.target. Aug 13 00:01:33.997781 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Aug 13 00:01:33.999971 systemd[1]: Starting dracut-pre-pivot.service... Aug 13 00:01:34.034583 systemd[1]: Finished dracut-pre-pivot.service. Aug 13 00:01:34.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.040104 systemd[1]: Starting initrd-cleanup.service... Aug 13 00:01:34.063997 systemd[1]: Stopped target nss-lookup.target. Aug 13 00:01:34.068052 systemd[1]: Stopped target remote-cryptsetup.target. Aug 13 00:01:34.072286 systemd[1]: Stopped target timers.target. Aug 13 00:01:34.075993 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Aug 13 00:01:34.078398 systemd[1]: Stopped dracut-pre-pivot.service. Aug 13 00:01:34.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.082565 systemd[1]: Stopped target initrd.target. Aug 13 00:01:34.086058 systemd[1]: Stopped target basic.target. Aug 13 00:01:34.089573 systemd[1]: Stopped target ignition-complete.target. Aug 13 00:01:34.093549 systemd[1]: Stopped target ignition-diskful.target. Aug 13 00:01:34.097747 systemd[1]: Stopped target initrd-root-device.target. Aug 13 00:01:34.102032 systemd[1]: Stopped target remote-fs.target. Aug 13 00:01:34.105815 systemd[1]: Stopped target remote-fs-pre.target. Aug 13 00:01:34.109678 systemd[1]: Stopped target sysinit.target. Aug 13 00:01:34.113460 systemd[1]: Stopped target local-fs.target. Aug 13 00:01:34.117282 systemd[1]: Stopped target local-fs-pre.target. Aug 13 00:01:34.121069 systemd[1]: Stopped target swap.target. Aug 13 00:01:34.124669 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Aug 13 00:01:34.124944 systemd[1]: Stopped dracut-pre-mount.service. Aug 13 00:01:34.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.131295 systemd[1]: Stopped target cryptsetup.target. Aug 13 00:01:34.133421 systemd[1]: dracut-initqueue.service: Deactivated successfully. Aug 13 00:01:34.135285 systemd[1]: Stopped dracut-initqueue.service. Aug 13 00:01:34.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.141280 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Aug 13 00:01:34.144018 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Aug 13 00:01:34.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.148536 systemd[1]: ignition-files.service: Deactivated successfully. Aug 13 00:01:34.148810 systemd[1]: Stopped ignition-files.service. Aug 13 00:01:34.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.156197 systemd[1]: Stopping ignition-mount.service... Aug 13 00:01:34.165588 systemd[1]: Stopping sysroot-boot.service... Aug 13 00:01:34.168996 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Aug 13 00:01:34.171809 systemd[1]: Stopped systemd-udev-trigger.service. Aug 13 00:01:34.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.178609 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Aug 13 00:01:34.181272 systemd[1]: Stopped dracut-pre-trigger.service. Aug 13 00:01:34.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.188169 ignition[1221]: INFO : Ignition 2.14.0 Aug 13 00:01:34.190441 ignition[1221]: INFO : Stage: umount Aug 13 00:01:34.192639 ignition[1221]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:01:34.195523 ignition[1221]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Aug 13 00:01:34.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.206577 systemd[1]: initrd-cleanup.service: Deactivated successfully. Aug 13 00:01:34.206849 systemd[1]: Finished initrd-cleanup.service. Aug 13 00:01:34.222783 ignition[1221]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Aug 13 00:01:34.226198 ignition[1221]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Aug 13 00:01:34.229896 ignition[1221]: INFO : PUT result: OK Aug 13 00:01:34.236039 ignition[1221]: INFO : umount: umount passed Aug 13 00:01:34.238227 ignition[1221]: INFO : Ignition finished successfully Aug 13 00:01:34.243601 systemd[1]: ignition-mount.service: Deactivated successfully. Aug 13 00:01:34.243863 systemd[1]: Stopped ignition-mount.service. Aug 13 00:01:34.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.251541 systemd[1]: ignition-disks.service: Deactivated successfully. Aug 13 00:01:34.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.251684 systemd[1]: Stopped ignition-disks.service. Aug 13 00:01:34.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.255768 systemd[1]: ignition-kargs.service: Deactivated successfully. Aug 13 00:01:34.255885 systemd[1]: Stopped ignition-kargs.service. Aug 13 00:01:34.258012 systemd[1]: ignition-fetch.service: Deactivated successfully. Aug 13 00:01:34.258122 systemd[1]: Stopped ignition-fetch.service. Aug 13 00:01:34.260357 systemd[1]: Stopped target network.target. Aug 13 00:01:34.262394 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Aug 13 00:01:34.262532 systemd[1]: Stopped ignition-fetch-offline.service. Aug 13 00:01:34.264816 systemd[1]: Stopped target paths.target. Aug 13 00:01:34.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.266605 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Aug 13 00:01:34.271772 systemd[1]: Stopped systemd-ask-password-console.path. Aug 13 00:01:34.278411 systemd[1]: Stopped target slices.target. Aug 13 00:01:34.280236 systemd[1]: Stopped target sockets.target. Aug 13 00:01:34.282173 systemd[1]: iscsid.socket: Deactivated successfully. Aug 13 00:01:34.282245 systemd[1]: Closed iscsid.socket. Aug 13 00:01:34.286534 systemd[1]: iscsiuio.socket: Deactivated successfully. Aug 13 00:01:34.286607 systemd[1]: Closed iscsiuio.socket. Aug 13 00:01:34.297913 systemd[1]: ignition-setup.service: Deactivated successfully. Aug 13 00:01:34.303502 systemd[1]: Stopped ignition-setup.service. Aug 13 00:01:34.307348 systemd[1]: Stopping systemd-networkd.service... Aug 13 00:01:34.309443 systemd[1]: Stopping systemd-resolved.service... Aug 13 00:01:34.312286 systemd-networkd[1028]: eth0: DHCPv6 lease lost Aug 13 00:01:34.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.338054 systemd[1]: sysroot-boot.mount: Deactivated successfully. Aug 13 00:01:34.339119 systemd[1]: systemd-resolved.service: Deactivated successfully. Aug 13 00:01:34.339391 systemd[1]: Stopped systemd-resolved.service. Aug 13 00:01:34.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.347428 systemd[1]: systemd-networkd.service: Deactivated successfully. Aug 13 00:01:34.359000 audit: BPF prog-id=9 op=UNLOAD Aug 13 00:01:34.360000 audit: BPF prog-id=6 op=UNLOAD Aug 13 00:01:34.347639 systemd[1]: Stopped systemd-networkd.service. Aug 13 00:01:34.361565 systemd[1]: systemd-networkd.socket: Deactivated successfully. Aug 13 00:01:34.363824 systemd[1]: Closed systemd-networkd.socket. Aug 13 00:01:34.378207 systemd[1]: Stopping network-cleanup.service... Aug 13 00:01:34.383335 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Aug 13 00:01:34.385363 systemd[1]: Stopped parse-ip-for-networkd.service. Aug 13 00:01:34.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.393368 systemd[1]: systemd-sysctl.service: Deactivated successfully. Aug 13 00:01:34.393518 systemd[1]: Stopped systemd-sysctl.service. Aug 13 00:01:34.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.397739 systemd[1]: systemd-modules-load.service: Deactivated successfully. Aug 13 00:01:34.397854 systemd[1]: Stopped systemd-modules-load.service. Aug 13 00:01:34.402615 systemd[1]: Stopping systemd-udevd.service... Aug 13 00:01:34.416883 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Aug 13 00:01:34.434268 systemd[1]: sysroot-boot.service: Deactivated successfully. Aug 13 00:01:34.437456 systemd[1]: Stopped sysroot-boot.service. Aug 13 00:01:34.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.445682 systemd[1]: network-cleanup.service: Deactivated successfully. Aug 13 00:01:34.446207 systemd[1]: Stopped network-cleanup.service. Aug 13 00:01:34.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.450345 systemd[1]: systemd-udevd.service: Deactivated successfully. Aug 13 00:01:34.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.450716 systemd[1]: Stopped systemd-udevd.service. Aug 13 00:01:34.458804 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Aug 13 00:01:34.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.458905 systemd[1]: Closed systemd-udevd-control.socket. Aug 13 00:01:34.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.463285 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Aug 13 00:01:34.463367 systemd[1]: Closed systemd-udevd-kernel.socket. Aug 13 00:01:34.463530 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Aug 13 00:01:34.463615 systemd[1]: Stopped dracut-pre-udev.service. Aug 13 00:01:34.464007 systemd[1]: dracut-cmdline.service: Deactivated successfully. Aug 13 00:01:34.464101 systemd[1]: Stopped dracut-cmdline.service. Aug 13 00:01:34.464345 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Aug 13 00:01:34.464471 systemd[1]: Stopped dracut-cmdline-ask.service. Aug 13 00:01:34.464742 systemd[1]: initrd-setup-root.service: Deactivated successfully. Aug 13 00:01:34.464842 systemd[1]: Stopped initrd-setup-root.service. Aug 13 00:01:34.466534 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Aug 13 00:01:34.467252 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Aug 13 00:01:34.467409 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Aug 13 00:01:34.480608 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Aug 13 00:01:34.480723 systemd[1]: Stopped kmod-static-nodes.service. Aug 13 00:01:34.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:34.495675 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Aug 13 00:01:34.495813 systemd[1]: Stopped systemd-vconsole-setup.service. Aug 13 00:01:34.519623 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Aug 13 00:01:34.528787 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Aug 13 00:01:34.531202 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Aug 13 00:01:34.538756 systemd[1]: Reached target initrd-switch-root.target. Aug 13 00:01:34.559434 systemd[1]: Starting initrd-switch-root.service... Aug 13 00:01:34.578485 systemd[1]: Switching root. Aug 13 00:01:34.609706 iscsid[1033]: iscsid shutting down. Aug 13 00:01:34.615728 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Aug 13 00:01:34.615850 systemd-journald[310]: Journal stopped Aug 13 00:01:40.241815 kernel: SELinux: Class mctp_socket not defined in policy. Aug 13 00:01:40.241955 kernel: SELinux: Class anon_inode not defined in policy. Aug 13 00:01:40.241995 kernel: SELinux: the above unknown classes and permissions will be allowed Aug 13 00:01:40.242028 kernel: SELinux: policy capability network_peer_controls=1 Aug 13 00:01:40.242065 kernel: SELinux: policy capability open_perms=1 Aug 13 00:01:40.242110 kernel: SELinux: policy capability extended_socket_class=1 Aug 13 00:01:40.242144 kernel: SELinux: policy capability always_check_network=0 Aug 13 00:01:40.242180 kernel: SELinux: policy capability cgroup_seclabel=1 Aug 13 00:01:40.242219 kernel: SELinux: policy capability nnp_nosuid_transition=1 Aug 13 00:01:40.242249 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Aug 13 00:01:40.242280 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Aug 13 00:01:40.251692 systemd[1]: Successfully loaded SELinux policy in 124.959ms. Aug 13 00:01:40.251804 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.169ms. Aug 13 00:01:40.251844 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:01:40.251879 systemd[1]: Detected virtualization amazon. Aug 13 00:01:40.251912 systemd[1]: Detected architecture arm64. Aug 13 00:01:40.251950 systemd[1]: Detected first boot. Aug 13 00:01:40.251983 systemd[1]: Initializing machine ID from VM UUID. Aug 13 00:01:40.252015 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Aug 13 00:01:40.252049 systemd[1]: Populated /etc with preset unit settings. Aug 13 00:01:40.252081 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:01:40.252115 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:01:40.252154 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:01:40.252193 kernel: kauditd_printk_skb: 55 callbacks suppressed Aug 13 00:01:40.252225 kernel: audit: type=1334 audit(1755043299.750:87): prog-id=12 op=LOAD Aug 13 00:01:40.252263 kernel: audit: type=1334 audit(1755043299.752:88): prog-id=3 op=UNLOAD Aug 13 00:01:40.252292 kernel: audit: type=1334 audit(1755043299.755:89): prog-id=13 op=LOAD Aug 13 00:01:40.252322 kernel: audit: type=1334 audit(1755043299.758:90): prog-id=14 op=LOAD Aug 13 00:01:40.252354 kernel: audit: type=1334 audit(1755043299.758:91): prog-id=4 op=UNLOAD Aug 13 00:01:40.252441 kernel: audit: type=1334 audit(1755043299.758:92): prog-id=5 op=UNLOAD Aug 13 00:01:40.252488 kernel: audit: type=1334 audit(1755043299.760:93): prog-id=15 op=LOAD Aug 13 00:01:40.252527 systemd[1]: iscsiuio.service: Deactivated successfully. Aug 13 00:01:40.252562 kernel: audit: type=1334 audit(1755043299.760:94): prog-id=12 op=UNLOAD Aug 13 00:01:40.252594 systemd[1]: Stopped iscsiuio.service. Aug 13 00:01:40.252629 kernel: audit: type=1334 audit(1755043299.763:95): prog-id=16 op=LOAD Aug 13 00:01:40.252659 kernel: audit: type=1334 audit(1755043299.766:96): prog-id=17 op=LOAD Aug 13 00:01:40.252691 systemd[1]: iscsid.service: Deactivated successfully. Aug 13 00:01:40.252722 systemd[1]: Stopped iscsid.service. Aug 13 00:01:40.252755 systemd[1]: initrd-switch-root.service: Deactivated successfully. Aug 13 00:01:40.252790 systemd[1]: Stopped initrd-switch-root.service. Aug 13 00:01:40.252821 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Aug 13 00:01:40.252853 systemd[1]: Created slice system-addon\x2dconfig.slice. Aug 13 00:01:40.252895 systemd[1]: Created slice system-addon\x2drun.slice. Aug 13 00:01:40.252929 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Aug 13 00:01:40.252961 systemd[1]: Created slice system-getty.slice. Aug 13 00:01:40.252991 systemd[1]: Created slice system-modprobe.slice. Aug 13 00:01:40.253021 systemd[1]: Created slice system-serial\x2dgetty.slice. Aug 13 00:01:40.253057 systemd[1]: Created slice system-system\x2dcloudinit.slice. Aug 13 00:01:40.253089 systemd[1]: Created slice system-systemd\x2dfsck.slice. Aug 13 00:01:40.253122 systemd[1]: Created slice user.slice. Aug 13 00:01:40.253154 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:01:40.253188 systemd[1]: Started systemd-ask-password-wall.path. Aug 13 00:01:40.253219 systemd[1]: Set up automount boot.automount. Aug 13 00:01:40.253252 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Aug 13 00:01:40.253284 systemd[1]: Stopped target initrd-switch-root.target. Aug 13 00:01:40.253315 systemd[1]: Stopped target initrd-fs.target. Aug 13 00:01:40.253353 systemd[1]: Stopped target initrd-root-fs.target. Aug 13 00:01:40.256007 systemd[1]: Reached target integritysetup.target. Aug 13 00:01:40.256057 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:01:40.256091 systemd[1]: Reached target remote-fs.target. Aug 13 00:01:40.256125 systemd[1]: Reached target slices.target. Aug 13 00:01:40.256158 systemd[1]: Reached target swap.target. Aug 13 00:01:40.256194 systemd[1]: Reached target torcx.target. Aug 13 00:01:40.256227 systemd[1]: Reached target veritysetup.target. Aug 13 00:01:40.256257 systemd[1]: Listening on systemd-coredump.socket. Aug 13 00:01:40.256295 systemd[1]: Listening on systemd-initctl.socket. Aug 13 00:01:40.256326 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:01:40.256356 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:01:40.256437 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:01:40.256472 systemd[1]: Listening on systemd-userdbd.socket. Aug 13 00:01:40.256503 systemd[1]: Mounting dev-hugepages.mount... Aug 13 00:01:40.256534 systemd[1]: Mounting dev-mqueue.mount... Aug 13 00:01:40.256569 systemd[1]: Mounting media.mount... Aug 13 00:01:40.256626 systemd[1]: Mounting sys-kernel-debug.mount... Aug 13 00:01:40.256658 systemd[1]: Mounting sys-kernel-tracing.mount... Aug 13 00:01:40.256696 systemd[1]: Mounting tmp.mount... Aug 13 00:01:40.256727 systemd[1]: Starting flatcar-tmpfiles.service... Aug 13 00:01:40.256762 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:40.256794 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:01:40.256826 systemd[1]: Starting modprobe@configfs.service... Aug 13 00:01:40.256857 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:40.256887 systemd[1]: Starting modprobe@drm.service... Aug 13 00:01:40.256918 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:01:40.256956 systemd[1]: Starting modprobe@fuse.service... Aug 13 00:01:40.256991 systemd[1]: Starting modprobe@loop.service... Aug 13 00:01:40.257023 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Aug 13 00:01:40.257054 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Aug 13 00:01:40.257084 systemd[1]: Stopped systemd-fsck-root.service. Aug 13 00:01:40.257116 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Aug 13 00:01:40.257148 systemd[1]: Stopped systemd-fsck-usr.service. Aug 13 00:01:40.257179 systemd[1]: Stopped systemd-journald.service. Aug 13 00:01:40.257211 systemd[1]: Starting systemd-journald.service... Aug 13 00:01:40.257241 kernel: fuse: init (API version 7.34) Aug 13 00:01:40.257278 kernel: loop: module loaded Aug 13 00:01:40.257310 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:01:40.257344 systemd[1]: Starting systemd-network-generator.service... Aug 13 00:01:40.257458 systemd[1]: Starting systemd-remount-fs.service... Aug 13 00:01:40.257500 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:01:40.257534 systemd[1]: verity-setup.service: Deactivated successfully. Aug 13 00:01:40.257566 systemd[1]: Stopped verity-setup.service. Aug 13 00:01:40.257597 systemd[1]: Mounted dev-hugepages.mount. Aug 13 00:01:40.257626 systemd[1]: Mounted dev-mqueue.mount. Aug 13 00:01:40.257666 systemd[1]: Mounted media.mount. Aug 13 00:01:40.257696 systemd[1]: Mounted sys-kernel-debug.mount. Aug 13 00:01:40.257740 systemd[1]: Mounted sys-kernel-tracing.mount. Aug 13 00:01:40.257770 systemd[1]: Mounted tmp.mount. Aug 13 00:01:40.257808 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:01:40.257840 systemd[1]: modprobe@configfs.service: Deactivated successfully. Aug 13 00:01:40.257871 systemd[1]: Finished modprobe@configfs.service. Aug 13 00:01:40.257902 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:40.257953 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:40.257989 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 00:01:40.258020 systemd[1]: Finished modprobe@drm.service. Aug 13 00:01:40.258050 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:01:40.258083 systemd-journald[1332]: Journal started Aug 13 00:01:40.258208 systemd-journald[1332]: Runtime Journal (/run/log/journal/ec2ad874ab58458d4885a71e6c5965b6) is 8.0M, max 75.4M, 67.4M free. Aug 13 00:01:35.314000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Aug 13 00:01:35.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:01:35.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:01:35.472000 audit: BPF prog-id=10 op=LOAD Aug 13 00:01:35.472000 audit: BPF prog-id=10 op=UNLOAD Aug 13 00:01:35.472000 audit: BPF prog-id=11 op=LOAD Aug 13 00:01:35.472000 audit: BPF prog-id=11 op=UNLOAD Aug 13 00:01:35.721000 audit[1254]: AVC avc: denied { associate } for pid=1254 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Aug 13 00:01:35.721000 audit[1254]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400002229c a1=40000283a8 a2=4000026800 a3=32 items=0 ppid=1237 pid=1254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:35.721000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:01:35.726000 audit[1254]: AVC avc: denied { associate } for pid=1254 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Aug 13 00:01:35.726000 audit[1254]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000022375 a2=1ed a3=0 items=2 ppid=1237 pid=1254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:35.726000 audit: CWD cwd="/" Aug 13 00:01:35.726000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:01:35.726000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:01:35.726000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:01:39.750000 audit: BPF prog-id=12 op=LOAD Aug 13 00:01:39.752000 audit: BPF prog-id=3 op=UNLOAD Aug 13 00:01:39.755000 audit: BPF prog-id=13 op=LOAD Aug 13 00:01:39.758000 audit: BPF prog-id=14 op=LOAD Aug 13 00:01:39.758000 audit: BPF prog-id=4 op=UNLOAD Aug 13 00:01:39.758000 audit: BPF prog-id=5 op=UNLOAD Aug 13 00:01:39.760000 audit: BPF prog-id=15 op=LOAD Aug 13 00:01:39.760000 audit: BPF prog-id=12 op=UNLOAD Aug 13 00:01:39.763000 audit: BPF prog-id=16 op=LOAD Aug 13 00:01:39.766000 audit: BPF prog-id=17 op=LOAD Aug 13 00:01:39.766000 audit: BPF prog-id=13 op=UNLOAD Aug 13 00:01:39.766000 audit: BPF prog-id=14 op=UNLOAD Aug 13 00:01:39.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:39.785000 audit: BPF prog-id=15 op=UNLOAD Aug 13 00:01:39.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:39.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:39.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:39.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.278327 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:01:40.278513 systemd[1]: Started systemd-journald.service. Aug 13 00:01:40.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.112000 audit: BPF prog-id=18 op=LOAD Aug 13 00:01:40.112000 audit: BPF prog-id=19 op=LOAD Aug 13 00:01:40.113000 audit: BPF prog-id=20 op=LOAD Aug 13 00:01:40.113000 audit: BPF prog-id=16 op=UNLOAD Aug 13 00:01:40.113000 audit: BPF prog-id=17 op=UNLOAD Aug 13 00:01:40.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.238000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Aug 13 00:01:40.238000 audit[1332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffe937e880 a2=4000 a3=1 items=0 ppid=1 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:40.238000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Aug 13 00:01:40.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:39.746043 systemd[1]: Queued start job for default target multi-user.target. Aug 13 00:01:35.701231 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:01:39.746071 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Aug 13 00:01:35.702946 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:01:39.769628 systemd[1]: systemd-journald.service: Deactivated successfully. Aug 13 00:01:35.703005 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:01:40.272463 systemd[1]: modprobe@fuse.service: Deactivated successfully. Aug 13 00:01:35.703082 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Aug 13 00:01:40.272765 systemd[1]: Finished modprobe@fuse.service. Aug 13 00:01:35.703112 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="skipped missing lower profile" missing profile=oem Aug 13 00:01:40.275569 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:01:35.703193 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Aug 13 00:01:40.275896 systemd[1]: Finished modprobe@loop.service. Aug 13 00:01:35.703227 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Aug 13 00:01:40.278676 systemd[1]: Finished systemd-network-generator.service. Aug 13 00:01:35.703815 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Aug 13 00:01:40.281962 systemd[1]: Finished systemd-remount-fs.service. Aug 13 00:01:35.703936 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:01:40.284903 systemd[1]: Reached target network-pre.target. Aug 13 00:01:35.703976 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:01:40.290743 systemd[1]: Mounting sys-fs-fuse-connections.mount... Aug 13 00:01:35.713089 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Aug 13 00:01:40.302481 systemd[1]: Mounting sys-kernel-config.mount... Aug 13 00:01:35.713215 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Aug 13 00:01:40.304309 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Aug 13 00:01:35.713299 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Aug 13 00:01:35.713346 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Aug 13 00:01:35.713439 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Aug 13 00:01:35.713480 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:35Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Aug 13 00:01:40.317730 systemd[1]: Starting systemd-hwdb-update.service... Aug 13 00:01:38.814123 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:38Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:40.322475 systemd[1]: Starting systemd-journal-flush.service... Aug 13 00:01:40.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:38.814665 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:38Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:40.325035 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:01:38.814907 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:38Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:40.328849 systemd[1]: Starting systemd-random-seed.service... Aug 13 00:01:38.815344 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:38Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:01:40.330885 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:01:38.815469 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:38Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Aug 13 00:01:40.334691 systemd[1]: Mounted sys-fs-fuse-connections.mount. Aug 13 00:01:38.815604 /usr/lib/systemd/system-generators/torcx-generator[1254]: time="2025-08-13T00:01:38Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Aug 13 00:01:40.337695 systemd[1]: Mounted sys-kernel-config.mount. Aug 13 00:01:40.341018 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:01:40.345661 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:01:40.367449 systemd-journald[1332]: Time spent on flushing to /var/log/journal/ec2ad874ab58458d4885a71e6c5965b6 is 84.311ms for 1135 entries. Aug 13 00:01:40.367449 systemd-journald[1332]: System Journal (/var/log/journal/ec2ad874ab58458d4885a71e6c5965b6) is 8.0M, max 195.6M, 187.6M free. Aug 13 00:01:40.471416 systemd-journald[1332]: Received client request to flush runtime journal. Aug 13 00:01:40.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.373048 systemd[1]: Finished systemd-random-seed.service. Aug 13 00:01:40.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.375367 systemd[1]: Reached target first-boot-complete.target. Aug 13 00:01:40.441083 systemd[1]: Finished flatcar-tmpfiles.service. Aug 13 00:01:40.445536 systemd[1]: Starting systemd-sysusers.service... Aug 13 00:01:40.448013 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:01:40.477012 systemd[1]: Finished systemd-journal-flush.service. Aug 13 00:01:40.492774 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:01:40.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.497027 systemd[1]: Starting systemd-udev-settle.service... Aug 13 00:01:40.512653 udevadm[1372]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Aug 13 00:01:40.675353 systemd[1]: Finished systemd-sysusers.service. Aug 13 00:01:40.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:40.679654 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 00:01:40.790827 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 00:01:40.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:41.244246 systemd[1]: Finished systemd-hwdb-update.service. Aug 13 00:01:41.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:41.248000 audit: BPF prog-id=21 op=LOAD Aug 13 00:01:41.248000 audit: BPF prog-id=22 op=LOAD Aug 13 00:01:41.248000 audit: BPF prog-id=7 op=UNLOAD Aug 13 00:01:41.248000 audit: BPF prog-id=8 op=UNLOAD Aug 13 00:01:41.251357 systemd[1]: Starting systemd-udevd.service... Aug 13 00:01:41.290256 systemd-udevd[1375]: Using default interface naming scheme 'v252'. Aug 13 00:01:41.343980 systemd[1]: Started systemd-udevd.service. Aug 13 00:01:41.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:41.346000 audit: BPF prog-id=23 op=LOAD Aug 13 00:01:41.349774 systemd[1]: Starting systemd-networkd.service... Aug 13 00:01:41.361000 audit: BPF prog-id=24 op=LOAD Aug 13 00:01:41.362000 audit: BPF prog-id=25 op=LOAD Aug 13 00:01:41.362000 audit: BPF prog-id=26 op=LOAD Aug 13 00:01:41.365315 systemd[1]: Starting systemd-userdbd.service... Aug 13 00:01:41.457782 systemd[1]: Started systemd-userdbd.service. Aug 13 00:01:41.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:41.466495 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Aug 13 00:01:41.473100 (udev-worker)[1385]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:01:41.660745 systemd-networkd[1381]: lo: Link UP Aug 13 00:01:41.661315 systemd-networkd[1381]: lo: Gained carrier Aug 13 00:01:41.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:41.662549 systemd-networkd[1381]: Enumeration completed Aug 13 00:01:41.662751 systemd[1]: Started systemd-networkd.service. Aug 13 00:01:41.667563 systemd[1]: Starting systemd-networkd-wait-online.service... Aug 13 00:01:41.670339 systemd-networkd[1381]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:01:41.678078 systemd-networkd[1381]: eth0: Link UP Aug 13 00:01:41.678420 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:01:41.678870 systemd-networkd[1381]: eth0: Gained carrier Aug 13 00:01:41.703761 systemd-networkd[1381]: eth0: DHCPv4 address 172.31.18.163/20, gateway 172.31.16.1 acquired from 172.31.16.1 Aug 13 00:01:41.878017 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:01:41.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:41.880904 systemd[1]: Finished systemd-udev-settle.service. Aug 13 00:01:41.885398 systemd[1]: Starting lvm2-activation-early.service... Aug 13 00:01:41.944336 lvm[1491]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:01:41.982141 systemd[1]: Finished lvm2-activation-early.service. Aug 13 00:01:41.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:41.984628 systemd[1]: Reached target cryptsetup.target. Aug 13 00:01:41.988782 systemd[1]: Starting lvm2-activation.service... Aug 13 00:01:41.998134 lvm[1492]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:01:42.033129 systemd[1]: Finished lvm2-activation.service. Aug 13 00:01:42.035295 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:01:42.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.037450 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Aug 13 00:01:42.037513 systemd[1]: Reached target local-fs.target. Aug 13 00:01:42.039557 systemd[1]: Reached target machines.target. Aug 13 00:01:42.043925 systemd[1]: Starting ldconfig.service... Aug 13 00:01:42.053794 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:42.054139 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:42.056507 systemd[1]: Starting systemd-boot-update.service... Aug 13 00:01:42.060986 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Aug 13 00:01:42.066288 systemd[1]: Starting systemd-machine-id-commit.service... Aug 13 00:01:42.075627 systemd[1]: Starting systemd-sysext.service... Aug 13 00:01:42.081727 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1494 (bootctl) Aug 13 00:01:42.084151 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Aug 13 00:01:42.108821 systemd[1]: Unmounting usr-share-oem.mount... Aug 13 00:01:42.120023 systemd[1]: usr-share-oem.mount: Deactivated successfully. Aug 13 00:01:42.120412 systemd[1]: Unmounted usr-share-oem.mount. Aug 13 00:01:42.145002 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Aug 13 00:01:42.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.154502 kernel: loop0: detected capacity change from 0 to 203944 Aug 13 00:01:42.256508 systemd-fsck[1505]: fsck.fat 4.2 (2021-01-31) Aug 13 00:01:42.256508 systemd-fsck[1505]: /dev/nvme0n1p1: 236 files, 117307/258078 clusters Aug 13 00:01:42.262765 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Aug 13 00:01:42.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.268220 systemd[1]: Mounting boot.mount... Aug 13 00:01:42.292477 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Aug 13 00:01:42.297056 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Aug 13 00:01:42.300669 systemd[1]: Finished systemd-machine-id-commit.service. Aug 13 00:01:42.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.313114 systemd[1]: Mounted boot.mount. Aug 13 00:01:42.334447 kernel: loop1: detected capacity change from 0 to 203944 Aug 13 00:01:42.348527 systemd[1]: Finished systemd-boot-update.service. Aug 13 00:01:42.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.358645 (sd-sysext)[1520]: Using extensions 'kubernetes'. Aug 13 00:01:42.359977 (sd-sysext)[1520]: Merged extensions into '/usr'. Aug 13 00:01:42.401566 systemd[1]: Mounting usr-share-oem.mount... Aug 13 00:01:42.403713 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:42.406795 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:42.414173 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:01:42.418574 systemd[1]: Starting modprobe@loop.service... Aug 13 00:01:42.420514 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:42.420853 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:42.429338 systemd[1]: Mounted usr-share-oem.mount. Aug 13 00:01:42.431976 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:42.432292 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:42.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.436221 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:01:42.436655 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:01:42.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.439653 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:01:42.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.439940 systemd[1]: Finished modprobe@loop.service. Aug 13 00:01:42.443268 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:01:42.443568 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:01:42.445976 systemd[1]: Finished systemd-sysext.service. Aug 13 00:01:42.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:42.450343 systemd[1]: Starting ensure-sysext.service... Aug 13 00:01:42.459681 systemd[1]: Starting systemd-tmpfiles-setup.service... Aug 13 00:01:42.468029 systemd[1]: Reloading. Aug 13 00:01:42.483462 systemd-tmpfiles[1527]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Aug 13 00:01:42.497202 systemd-tmpfiles[1527]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Aug 13 00:01:42.509184 systemd-tmpfiles[1527]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Aug 13 00:01:42.596653 /usr/lib/systemd/system-generators/torcx-generator[1546]: time="2025-08-13T00:01:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:01:42.596717 /usr/lib/systemd/system-generators/torcx-generator[1546]: time="2025-08-13T00:01:42Z" level=info msg="torcx already run" Aug 13 00:01:42.823641 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:01:42.823677 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:01:42.870580 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:01:43.012000 audit: BPF prog-id=27 op=LOAD Aug 13 00:01:43.012000 audit: BPF prog-id=24 op=UNLOAD Aug 13 00:01:43.012000 audit: BPF prog-id=28 op=LOAD Aug 13 00:01:43.013000 audit: BPF prog-id=29 op=LOAD Aug 13 00:01:43.013000 audit: BPF prog-id=25 op=UNLOAD Aug 13 00:01:43.013000 audit: BPF prog-id=26 op=UNLOAD Aug 13 00:01:43.014000 audit: BPF prog-id=30 op=LOAD Aug 13 00:01:43.015000 audit: BPF prog-id=18 op=UNLOAD Aug 13 00:01:43.015000 audit: BPF prog-id=31 op=LOAD Aug 13 00:01:43.015000 audit: BPF prog-id=32 op=LOAD Aug 13 00:01:43.015000 audit: BPF prog-id=19 op=UNLOAD Aug 13 00:01:43.015000 audit: BPF prog-id=20 op=UNLOAD Aug 13 00:01:43.016000 audit: BPF prog-id=33 op=LOAD Aug 13 00:01:43.016000 audit: BPF prog-id=23 op=UNLOAD Aug 13 00:01:43.019000 audit: BPF prog-id=34 op=LOAD Aug 13 00:01:43.019000 audit: BPF prog-id=35 op=LOAD Aug 13 00:01:43.019000 audit: BPF prog-id=21 op=UNLOAD Aug 13 00:01:43.019000 audit: BPF prog-id=22 op=UNLOAD Aug 13 00:01:43.033545 systemd[1]: Finished systemd-tmpfiles-setup.service. Aug 13 00:01:43.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.043961 systemd[1]: Starting audit-rules.service... Aug 13 00:01:43.050936 systemd[1]: Starting clean-ca-certificates.service... Aug 13 00:01:43.061000 audit: BPF prog-id=36 op=LOAD Aug 13 00:01:43.058602 systemd[1]: Starting systemd-journal-catalog-update.service... Aug 13 00:01:43.069000 audit: BPF prog-id=37 op=LOAD Aug 13 00:01:43.065256 systemd[1]: Starting systemd-resolved.service... Aug 13 00:01:43.072843 systemd[1]: Starting systemd-timesyncd.service... Aug 13 00:01:43.077585 systemd[1]: Starting systemd-update-utmp.service... Aug 13 00:01:43.092759 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.098660 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:43.107034 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:01:43.111712 systemd[1]: Starting modprobe@loop.service... Aug 13 00:01:43.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.114698 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.155000 audit[1609]: SYSTEM_BOOT pid=1609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.115003 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:43.117843 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:43.118309 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:43.127010 systemd[1]: Finished clean-ca-certificates.service. Aug 13 00:01:43.129709 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 00:01:43.133837 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.138819 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:01:43.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.140938 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.141233 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:43.141592 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 00:01:43.152763 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.157565 systemd[1]: Starting modprobe@drm.service... Aug 13 00:01:43.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.159751 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.160203 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:43.160554 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 00:01:43.173138 systemd[1]: Finished systemd-update-utmp.service. Aug 13 00:01:43.176179 systemd[1]: Finished ensure-sysext.service. Aug 13 00:01:43.178942 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:01:43.179256 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:01:43.183053 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:01:43.188838 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:01:43.189119 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:01:43.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.199581 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:01:43.199860 systemd[1]: Finished modprobe@loop.service. Aug 13 00:01:43.202079 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.211004 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 00:01:43.211308 systemd[1]: Finished modprobe@drm.service. Aug 13 00:01:43.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.233602 systemd[1]: Finished systemd-journal-catalog-update.service. Aug 13 00:01:43.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:43.294000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Aug 13 00:01:43.294000 audit[1628]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe7613c30 a2=420 a3=0 items=0 ppid=1603 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:43.294000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Aug 13 00:01:43.296620 augenrules[1628]: No rules Aug 13 00:01:43.297742 systemd[1]: Finished audit-rules.service. Aug 13 00:01:43.320997 systemd-resolved[1607]: Positive Trust Anchors: Aug 13 00:01:43.321620 systemd-resolved[1607]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 00:01:43.321791 systemd-resolved[1607]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 00:01:43.351285 systemd[1]: Started systemd-timesyncd.service. Aug 13 00:01:43.353811 systemd[1]: Reached target time-set.target. Aug 13 00:01:43.383807 systemd-resolved[1607]: Defaulting to hostname 'linux'. Aug 13 00:01:43.387204 systemd[1]: Started systemd-resolved.service. Aug 13 00:01:43.389678 systemd[1]: Reached target network.target. Aug 13 00:01:43.391532 systemd[1]: Reached target nss-lookup.target. Aug 13 00:01:42.936152 systemd-timesyncd[1608]: Contacted time server 44.190.5.123:123 (0.flatcar.pool.ntp.org). Aug 13 00:01:43.010638 systemd-journald[1332]: Time jumped backwards, rotating. Aug 13 00:01:43.010837 ldconfig[1493]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Aug 13 00:01:42.936438 systemd-timesyncd[1608]: Initial clock synchronization to Wed 2025-08-13 00:01:42.935842 UTC. Aug 13 00:01:42.936745 systemd-resolved[1607]: Clock change detected. Flushing caches. Aug 13 00:01:42.955334 systemd[1]: Finished ldconfig.service. Aug 13 00:01:42.959693 systemd[1]: Starting systemd-update-done.service... Aug 13 00:01:42.976238 systemd[1]: Finished systemd-update-done.service. Aug 13 00:01:42.978606 systemd[1]: Reached target sysinit.target. Aug 13 00:01:42.980743 systemd[1]: Started motdgen.path. Aug 13 00:01:42.982620 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Aug 13 00:01:42.985465 systemd[1]: Started logrotate.timer. Aug 13 00:01:42.987512 systemd[1]: Started mdadm.timer. Aug 13 00:01:42.989161 systemd[1]: Started systemd-tmpfiles-clean.timer. Aug 13 00:01:42.991113 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Aug 13 00:01:42.991169 systemd[1]: Reached target paths.target. Aug 13 00:01:42.992851 systemd[1]: Reached target timers.target. Aug 13 00:01:42.996966 systemd[1]: Listening on dbus.socket. Aug 13 00:01:43.000801 systemd[1]: Starting docker.socket... Aug 13 00:01:43.008886 systemd[1]: Listening on sshd.socket. Aug 13 00:01:43.010927 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:43.011993 systemd[1]: Listening on docker.socket. Aug 13 00:01:43.014021 systemd[1]: Reached target sockets.target. Aug 13 00:01:43.015979 systemd[1]: Reached target basic.target. Aug 13 00:01:43.017916 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.017971 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 00:01:43.020241 systemd[1]: Starting containerd.service... Aug 13 00:01:43.024094 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Aug 13 00:01:43.030015 systemd[1]: Starting dbus.service... Aug 13 00:01:43.034251 systemd[1]: Starting enable-oem-cloudinit.service... Aug 13 00:01:43.038679 systemd[1]: Starting extend-filesystems.service... Aug 13 00:01:43.042624 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Aug 13 00:01:43.046912 systemd[1]: Starting motdgen.service... Aug 13 00:01:43.067173 jq[1641]: false Aug 13 00:01:43.052496 systemd[1]: Starting prepare-helm.service... Aug 13 00:01:43.057116 systemd[1]: Starting ssh-key-proc-cmdline.service... Aug 13 00:01:43.061853 systemd[1]: Starting sshd-keygen.service... Aug 13 00:01:43.068231 systemd-networkd[1381]: eth0: Gained IPv6LL Aug 13 00:01:43.070983 systemd[1]: Starting systemd-logind.service... Aug 13 00:01:43.073001 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:01:43.073180 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Aug 13 00:01:43.074121 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Aug 13 00:01:43.076646 systemd[1]: Starting update-engine.service... Aug 13 00:01:43.083186 systemd[1]: Starting update-ssh-keys-after-ignition.service... Aug 13 00:01:43.087653 systemd[1]: Finished systemd-networkd-wait-online.service. Aug 13 00:01:43.092038 systemd[1]: Reached target network-online.target. Aug 13 00:01:43.097185 systemd[1]: Started amazon-ssm-agent.service. Aug 13 00:01:43.103421 systemd[1]: Starting kubelet.service... Aug 13 00:01:43.110615 systemd[1]: Started nvidia.service. Aug 13 00:01:43.113969 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Aug 13 00:01:43.114421 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Aug 13 00:01:43.229174 jq[1649]: true Aug 13 00:01:43.238929 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Aug 13 00:01:43.239338 systemd[1]: Finished ssh-key-proc-cmdline.service. Aug 13 00:01:43.275327 tar[1657]: linux-arm64/helm Aug 13 00:01:43.284286 jq[1674]: true Aug 13 00:01:43.323252 dbus-daemon[1640]: [system] SELinux support is enabled Aug 13 00:01:43.327107 systemd[1]: Started dbus.service. Aug 13 00:01:43.332573 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Aug 13 00:01:43.332626 systemd[1]: Reached target system-config.target. Aug 13 00:01:43.335043 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Aug 13 00:01:43.335103 systemd[1]: Reached target user-config.target. Aug 13 00:01:43.341344 systemd[1]: motdgen.service: Deactivated successfully. Aug 13 00:01:43.341725 systemd[1]: Finished motdgen.service. Aug 13 00:01:43.354744 dbus-daemon[1640]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1381 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Aug 13 00:01:43.361232 systemd[1]: Starting systemd-hostnamed.service... Aug 13 00:01:43.429006 extend-filesystems[1642]: Found loop1 Aug 13 00:01:43.431594 extend-filesystems[1642]: Found nvme0n1 Aug 13 00:01:43.433298 extend-filesystems[1642]: Found nvme0n1p1 Aug 13 00:01:43.433298 extend-filesystems[1642]: Found nvme0n1p2 Aug 13 00:01:43.433298 extend-filesystems[1642]: Found nvme0n1p3 Aug 13 00:01:43.433298 extend-filesystems[1642]: Found usr Aug 13 00:01:43.440404 extend-filesystems[1642]: Found nvme0n1p4 Aug 13 00:01:43.440404 extend-filesystems[1642]: Found nvme0n1p6 Aug 13 00:01:43.446541 extend-filesystems[1642]: Found nvme0n1p7 Aug 13 00:01:43.446541 extend-filesystems[1642]: Found nvme0n1p9 Aug 13 00:01:43.446541 extend-filesystems[1642]: Checking size of /dev/nvme0n1p9 Aug 13 00:01:43.542645 extend-filesystems[1642]: Resized partition /dev/nvme0n1p9 Aug 13 00:01:43.570603 update_engine[1648]: I0813 00:01:43.569988 1648 main.cc:92] Flatcar Update Engine starting Aug 13 00:01:43.576824 extend-filesystems[1710]: resize2fs 1.46.5 (30-Dec-2021) Aug 13 00:01:43.590533 systemd[1]: Started update-engine.service. Aug 13 00:01:43.590886 update_engine[1648]: I0813 00:01:43.590605 1648 update_check_scheduler.cc:74] Next update check in 11m55s Aug 13 00:01:43.596104 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Aug 13 00:01:43.595866 systemd[1]: Started locksmithd.service. Aug 13 00:01:43.605038 systemd-logind[1647]: Watching system buttons on /dev/input/event0 (Power Button) Aug 13 00:01:43.605095 systemd-logind[1647]: Watching system buttons on /dev/input/event1 (Sleep Button) Aug 13 00:01:43.606412 systemd-logind[1647]: New seat seat0. Aug 13 00:01:43.609101 systemd[1]: nvidia.service: Deactivated successfully. Aug 13 00:01:43.619840 systemd[1]: Started systemd-logind.service. Aug 13 00:01:43.681905 amazon-ssm-agent[1652]: 2025/08/13 00:01:43 Failed to load instance info from vault. RegistrationKey does not exist. Aug 13 00:01:43.687306 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Aug 13 00:01:43.701485 amazon-ssm-agent[1652]: Initializing new seelog logger Aug 13 00:01:43.701485 amazon-ssm-agent[1652]: New Seelog Logger Creation Complete Aug 13 00:01:43.701485 amazon-ssm-agent[1652]: 2025/08/13 00:01:43 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 00:01:43.701485 amazon-ssm-agent[1652]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Aug 13 00:01:43.701767 amazon-ssm-agent[1652]: 2025/08/13 00:01:43 processing appconfig overrides Aug 13 00:01:43.704240 extend-filesystems[1710]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Aug 13 00:01:43.704240 extend-filesystems[1710]: old_desc_blocks = 1, new_desc_blocks = 1 Aug 13 00:01:43.704240 extend-filesystems[1710]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Aug 13 00:01:43.727731 extend-filesystems[1642]: Resized filesystem in /dev/nvme0n1p9 Aug 13 00:01:43.710366 systemd[1]: Finished update-ssh-keys-after-ignition.service. Aug 13 00:01:43.730588 bash[1711]: Updated "/home/core/.ssh/authorized_keys" Aug 13 00:01:43.720087 systemd[1]: extend-filesystems.service: Deactivated successfully. Aug 13 00:01:43.720449 systemd[1]: Finished extend-filesystems.service. Aug 13 00:01:43.940839 env[1658]: time="2025-08-13T00:01:43.940657913Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Aug 13 00:01:43.948065 dbus-daemon[1640]: [system] Successfully activated service 'org.freedesktop.hostname1' Aug 13 00:01:43.948351 systemd[1]: Started systemd-hostnamed.service. Aug 13 00:01:43.951241 dbus-daemon[1640]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1680 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Aug 13 00:01:43.956362 systemd[1]: Starting polkit.service... Aug 13 00:01:44.019560 polkitd[1727]: Started polkitd version 121 Aug 13 00:01:44.073678 polkitd[1727]: Loading rules from directory /etc/polkit-1/rules.d Aug 13 00:01:44.080455 polkitd[1727]: Loading rules from directory /usr/share/polkit-1/rules.d Aug 13 00:01:44.086533 polkitd[1727]: Finished loading, compiling and executing 2 rules Aug 13 00:01:44.087491 dbus-daemon[1640]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Aug 13 00:01:44.087775 systemd[1]: Started polkit.service. Aug 13 00:01:44.090634 polkitd[1727]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Aug 13 00:01:44.123745 env[1658]: time="2025-08-13T00:01:44.123412166Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Aug 13 00:01:44.124398 env[1658]: time="2025-08-13T00:01:44.124336490Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:44.135457 env[1658]: time="2025-08-13T00:01:44.135365654Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.189-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:01:44.135457 env[1658]: time="2025-08-13T00:01:44.135442682Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:44.136562 env[1658]: time="2025-08-13T00:01:44.136465754Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:01:44.136562 env[1658]: time="2025-08-13T00:01:44.136551350Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:44.136760 env[1658]: time="2025-08-13T00:01:44.136588226Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Aug 13 00:01:44.136760 env[1658]: time="2025-08-13T00:01:44.136641506Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:44.137032 env[1658]: time="2025-08-13T00:01:44.136979102Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:44.144207 env[1658]: time="2025-08-13T00:01:44.143385386Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:01:44.144786 env[1658]: time="2025-08-13T00:01:44.144713162Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:01:44.144888 env[1658]: time="2025-08-13T00:01:44.144797282Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Aug 13 00:01:44.145084 env[1658]: time="2025-08-13T00:01:44.145010414Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Aug 13 00:01:44.145185 env[1658]: time="2025-08-13T00:01:44.145077470Z" level=info msg="metadata content store policy set" policy=shared Aug 13 00:01:44.151120 systemd-hostnamed[1680]: Hostname set to (transient) Aug 13 00:01:44.151319 systemd-resolved[1607]: System hostname changed to 'ip-172-31-18-163'. Aug 13 00:01:44.157863 env[1658]: time="2025-08-13T00:01:44.157789251Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Aug 13 00:01:44.158003 env[1658]: time="2025-08-13T00:01:44.157868103Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Aug 13 00:01:44.158003 env[1658]: time="2025-08-13T00:01:44.157905663Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Aug 13 00:01:44.158003 env[1658]: time="2025-08-13T00:01:44.157992939Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.158177 env[1658]: time="2025-08-13T00:01:44.158132499Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.158238 env[1658]: time="2025-08-13T00:01:44.158173875Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.158238 env[1658]: time="2025-08-13T00:01:44.158213799Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.158864 env[1658]: time="2025-08-13T00:01:44.158779599Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.158864 env[1658]: time="2025-08-13T00:01:44.158858079Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.159028 env[1658]: time="2025-08-13T00:01:44.158893875Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.159028 env[1658]: time="2025-08-13T00:01:44.158927931Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.159028 env[1658]: time="2025-08-13T00:01:44.158967147Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Aug 13 00:01:44.159260 env[1658]: time="2025-08-13T00:01:44.159210627Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Aug 13 00:01:44.159682 env[1658]: time="2025-08-13T00:01:44.159618807Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Aug 13 00:01:44.165942 env[1658]: time="2025-08-13T00:01:44.165856323Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Aug 13 00:01:44.166078 env[1658]: time="2025-08-13T00:01:44.165949971Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166078 env[1658]: time="2025-08-13T00:01:44.165985719Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Aug 13 00:01:44.166338 env[1658]: time="2025-08-13T00:01:44.166207611Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166410 env[1658]: time="2025-08-13T00:01:44.166344411Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166410 env[1658]: time="2025-08-13T00:01:44.166382811Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166507 env[1658]: time="2025-08-13T00:01:44.166413303Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166507 env[1658]: time="2025-08-13T00:01:44.166443843Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166507 env[1658]: time="2025-08-13T00:01:44.166475499Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166657 env[1658]: time="2025-08-13T00:01:44.166504899Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166657 env[1658]: time="2025-08-13T00:01:44.166534251Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.166657 env[1658]: time="2025-08-13T00:01:44.166567815Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Aug 13 00:01:44.166930 env[1658]: time="2025-08-13T00:01:44.166885899Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.167004 env[1658]: time="2025-08-13T00:01:44.166934919Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.167004 env[1658]: time="2025-08-13T00:01:44.166967175Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.167101 env[1658]: time="2025-08-13T00:01:44.166997739Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Aug 13 00:01:44.167101 env[1658]: time="2025-08-13T00:01:44.167031615Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Aug 13 00:01:44.167101 env[1658]: time="2025-08-13T00:01:44.167070123Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Aug 13 00:01:44.167239 env[1658]: time="2025-08-13T00:01:44.167107311Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Aug 13 00:01:44.167239 env[1658]: time="2025-08-13T00:01:44.167171319Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Aug 13 00:01:44.168115 env[1658]: time="2025-08-13T00:01:44.167990763Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Aug 13 00:01:44.170053 env[1658]: time="2025-08-13T00:01:44.168114111Z" level=info msg="Connect containerd service" Aug 13 00:01:44.170053 env[1658]: time="2025-08-13T00:01:44.168186543Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Aug 13 00:01:44.171318 env[1658]: time="2025-08-13T00:01:44.171233043Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 00:01:44.171931 env[1658]: time="2025-08-13T00:01:44.171867075Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Aug 13 00:01:44.172041 env[1658]: time="2025-08-13T00:01:44.172003059Z" level=info msg=serving... address=/run/containerd/containerd.sock Aug 13 00:01:44.174469 env[1658]: time="2025-08-13T00:01:44.172103667Z" level=info msg="containerd successfully booted in 0.237691s" Aug 13 00:01:44.172225 systemd[1]: Started containerd.service. Aug 13 00:01:44.183592 env[1658]: time="2025-08-13T00:01:44.183494823Z" level=info msg="Start subscribing containerd event" Aug 13 00:01:44.183877 env[1658]: time="2025-08-13T00:01:44.183828795Z" level=info msg="Start recovering state" Aug 13 00:01:44.184028 env[1658]: time="2025-08-13T00:01:44.183986403Z" level=info msg="Start event monitor" Aug 13 00:01:44.184135 env[1658]: time="2025-08-13T00:01:44.184087755Z" level=info msg="Start snapshots syncer" Aug 13 00:01:44.184198 env[1658]: time="2025-08-13T00:01:44.184136523Z" level=info msg="Start cni network conf syncer for default" Aug 13 00:01:44.184198 env[1658]: time="2025-08-13T00:01:44.184160163Z" level=info msg="Start streaming server" Aug 13 00:01:44.415480 coreos-metadata[1639]: Aug 13 00:01:44.415 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Aug 13 00:01:44.424913 coreos-metadata[1639]: Aug 13 00:01:44.424 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Aug 13 00:01:44.425754 coreos-metadata[1639]: Aug 13 00:01:44.425 INFO Fetch successful Aug 13 00:01:44.426062 coreos-metadata[1639]: Aug 13 00:01:44.425 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Aug 13 00:01:44.426777 coreos-metadata[1639]: Aug 13 00:01:44.426 INFO Fetch successful Aug 13 00:01:44.431399 unknown[1639]: wrote ssh authorized keys file for user: core Aug 13 00:01:44.457793 update-ssh-keys[1790]: Updated "/home/core/.ssh/authorized_keys" Aug 13 00:01:44.458535 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Aug 13 00:01:44.621015 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Create new startup processor Aug 13 00:01:44.623296 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [LongRunningPluginsManager] registered plugins: {} Aug 13 00:01:44.625766 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing bookkeeping folders Aug 13 00:01:44.635110 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO removing the completed state files Aug 13 00:01:44.635329 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing bookkeeping folders for long running plugins Aug 13 00:01:44.635457 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Aug 13 00:01:44.635572 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing healthcheck folders for long running plugins Aug 13 00:01:44.637365 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing locations for inventory plugin Aug 13 00:01:44.637572 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing default location for custom inventory Aug 13 00:01:44.637696 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing default location for file inventory Aug 13 00:01:44.637843 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Initializing default location for role inventory Aug 13 00:01:44.637962 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Init the cloudwatchlogs publisher Aug 13 00:01:44.638077 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:softwareInventory Aug 13 00:01:44.638191 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:runDockerAction Aug 13 00:01:44.638330 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:downloadContent Aug 13 00:01:44.638446 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:runDocument Aug 13 00:01:44.638557 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:configurePackage Aug 13 00:01:44.638702 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:runPowerShellScript Aug 13 00:01:44.638820 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:updateSsmAgent Aug 13 00:01:44.638933 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:configureDocker Aug 13 00:01:44.639044 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform independent plugin aws:refreshAssociation Aug 13 00:01:44.639166 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Successfully loaded platform dependent plugin aws:runShellScript Aug 13 00:01:44.639307 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Aug 13 00:01:44.640390 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO OS: linux, Arch: arm64 Aug 13 00:01:44.644766 amazon-ssm-agent[1652]: datastore file /var/lib/amazon/ssm/i-0b14df2668c855572/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Aug 13 00:01:44.646073 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [HealthCheck] HealthCheck reporting agent health. Aug 13 00:01:44.748240 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] Starting document processing engine... Aug 13 00:01:44.843111 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] [EngineProcessor] Starting Aug 13 00:01:44.938153 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Aug 13 00:01:45.032480 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] Starting message polling Aug 13 00:01:45.128093 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] Starting send replies to MDS Aug 13 00:01:45.222534 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [instanceID=i-0b14df2668c855572] Starting association polling Aug 13 00:01:45.315311 tar[1657]: linux-arm64/LICENSE Aug 13 00:01:45.316005 tar[1657]: linux-arm64/README.md Aug 13 00:01:45.318858 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Aug 13 00:01:45.324554 systemd[1]: Finished prepare-helm.service. Aug 13 00:01:45.413437 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] [Association] Launching response handler Aug 13 00:01:45.459944 locksmithd[1713]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Aug 13 00:01:45.509210 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Aug 13 00:01:45.605333 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Aug 13 00:01:45.701366 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Aug 13 00:01:45.797750 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] Starting session document processing engine... Aug 13 00:01:45.894335 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] [EngineProcessor] Starting Aug 13 00:01:45.991063 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Aug 13 00:01:46.088035 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0b14df2668c855572, requestId: 79bfe3d2-8576-4bd2-9bbb-c0d12ab0a53c Aug 13 00:01:46.185291 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [OfflineService] Starting document processing engine... Aug 13 00:01:46.282449 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [OfflineService] [EngineProcessor] Starting Aug 13 00:01:46.380020 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [OfflineService] [EngineProcessor] Initial processing Aug 13 00:01:46.477735 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [OfflineService] Starting message polling Aug 13 00:01:46.575647 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [OfflineService] Starting send replies to MDS Aug 13 00:01:46.673718 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [LongRunningPluginsManager] starting long running plugin manager Aug 13 00:01:46.772137 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Aug 13 00:01:46.870522 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] listening reply. Aug 13 00:01:46.910873 systemd[1]: Started kubelet.service. Aug 13 00:01:46.969290 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Aug 13 00:01:46.989210 sshd_keygen[1679]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Aug 13 00:01:47.032539 systemd[1]: Finished sshd-keygen.service. Aug 13 00:01:47.038479 systemd[1]: Starting issuegen.service... Aug 13 00:01:47.052124 systemd[1]: issuegen.service: Deactivated successfully. Aug 13 00:01:47.052588 systemd[1]: Finished issuegen.service. Aug 13 00:01:47.058251 systemd[1]: Starting systemd-user-sessions.service... Aug 13 00:01:47.068306 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [StartupProcessor] Executing startup processor tasks Aug 13 00:01:47.083252 systemd[1]: Finished systemd-user-sessions.service. Aug 13 00:01:47.089210 systemd[1]: Started getty@tty1.service. Aug 13 00:01:47.094643 systemd[1]: Started serial-getty@ttyS0.service. Aug 13 00:01:47.097400 systemd[1]: Reached target getty.target. Aug 13 00:01:47.099739 systemd[1]: Reached target multi-user.target. Aug 13 00:01:47.105971 systemd[1]: Starting systemd-update-utmp-runlevel.service... Aug 13 00:01:47.125552 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Aug 13 00:01:47.125988 systemd[1]: Finished systemd-update-utmp-runlevel.service. Aug 13 00:01:47.128635 systemd[1]: Startup finished in 1.218s (kernel) + 8.572s (initrd) + 12.413s (userspace) = 22.204s. Aug 13 00:01:47.167528 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Aug 13 00:01:47.266861 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Aug 13 00:01:47.368382 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Aug 13 00:01:47.466671 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0b14df2668c855572?role=subscribe&stream=input Aug 13 00:01:47.566791 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0b14df2668c855572?role=subscribe&stream=input Aug 13 00:01:47.667212 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] Starting receiving message from control channel Aug 13 00:01:47.767714 amazon-ssm-agent[1652]: 2025-08-13 00:01:44 INFO [MessageGatewayService] [EngineProcessor] Initial processing Aug 13 00:01:48.465781 kubelet[1842]: E0813 00:01:48.465666 1842 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:01:48.470777 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:01:48.471111 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:01:48.471738 systemd[1]: kubelet.service: Consumed 1.680s CPU time. Aug 13 00:01:51.610239 systemd[1]: Created slice system-sshd.slice. Aug 13 00:01:51.612805 systemd[1]: Started sshd@0-172.31.18.163:22-139.178.89.65:37656.service. Aug 13 00:01:51.971545 sshd[1862]: Accepted publickey for core from 139.178.89.65 port 37656 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:51.977063 sshd[1862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:51.999503 systemd[1]: Created slice user-500.slice. Aug 13 00:01:52.002001 systemd[1]: Starting user-runtime-dir@500.service... Aug 13 00:01:52.011430 systemd-logind[1647]: New session 1 of user core. Aug 13 00:01:52.022947 systemd[1]: Finished user-runtime-dir@500.service. Aug 13 00:01:52.026132 systemd[1]: Starting user@500.service... Aug 13 00:01:52.033236 (systemd)[1865]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:52.221978 systemd[1865]: Queued start job for default target default.target. Aug 13 00:01:52.223053 systemd[1865]: Reached target paths.target. Aug 13 00:01:52.223107 systemd[1865]: Reached target sockets.target. Aug 13 00:01:52.223141 systemd[1865]: Reached target timers.target. Aug 13 00:01:52.223172 systemd[1865]: Reached target basic.target. Aug 13 00:01:52.223326 systemd[1865]: Reached target default.target. Aug 13 00:01:52.223399 systemd[1865]: Startup finished in 177ms. Aug 13 00:01:52.224395 systemd[1]: Started user@500.service. Aug 13 00:01:52.226305 systemd[1]: Started session-1.scope. Aug 13 00:01:52.376034 systemd[1]: Started sshd@1-172.31.18.163:22-139.178.89.65:37658.service. Aug 13 00:01:52.553500 sshd[1874]: Accepted publickey for core from 139.178.89.65 port 37658 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:52.556016 sshd[1874]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:52.564462 systemd-logind[1647]: New session 2 of user core. Aug 13 00:01:52.565405 systemd[1]: Started session-2.scope. Aug 13 00:01:52.698594 sshd[1874]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:52.704169 systemd-logind[1647]: Session 2 logged out. Waiting for processes to exit. Aug 13 00:01:52.705320 systemd[1]: sshd@1-172.31.18.163:22-139.178.89.65:37658.service: Deactivated successfully. Aug 13 00:01:52.706604 systemd[1]: session-2.scope: Deactivated successfully. Aug 13 00:01:52.708129 systemd-logind[1647]: Removed session 2. Aug 13 00:01:52.725250 systemd[1]: Started sshd@2-172.31.18.163:22-139.178.89.65:37668.service. Aug 13 00:01:52.894434 sshd[1880]: Accepted publickey for core from 139.178.89.65 port 37668 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:52.897452 sshd[1880]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:52.906374 systemd-logind[1647]: New session 3 of user core. Aug 13 00:01:52.907496 systemd[1]: Started session-3.scope. Aug 13 00:01:53.030413 sshd[1880]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:53.036679 systemd-logind[1647]: Session 3 logged out. Waiting for processes to exit. Aug 13 00:01:53.038145 systemd[1]: sshd@2-172.31.18.163:22-139.178.89.65:37668.service: Deactivated successfully. Aug 13 00:01:53.039617 systemd[1]: session-3.scope: Deactivated successfully. Aug 13 00:01:53.041099 systemd-logind[1647]: Removed session 3. Aug 13 00:01:53.058967 systemd[1]: Started sshd@3-172.31.18.163:22-139.178.89.65:37676.service. Aug 13 00:01:53.229511 sshd[1887]: Accepted publickey for core from 139.178.89.65 port 37676 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:53.232121 sshd[1887]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:53.241122 systemd[1]: Started session-4.scope. Aug 13 00:01:53.242061 systemd-logind[1647]: New session 4 of user core. Aug 13 00:01:53.373346 sshd[1887]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:53.379832 systemd[1]: sshd@3-172.31.18.163:22-139.178.89.65:37676.service: Deactivated successfully. Aug 13 00:01:53.380951 systemd-logind[1647]: Session 4 logged out. Waiting for processes to exit. Aug 13 00:01:53.381127 systemd[1]: session-4.scope: Deactivated successfully. Aug 13 00:01:53.383478 systemd-logind[1647]: Removed session 4. Aug 13 00:01:53.401901 systemd[1]: Started sshd@4-172.31.18.163:22-139.178.89.65:37688.service. Aug 13 00:01:53.574453 sshd[1893]: Accepted publickey for core from 139.178.89.65 port 37688 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:53.577674 sshd[1893]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:53.590582 systemd[1]: Started session-5.scope. Aug 13 00:01:53.592069 systemd-logind[1647]: New session 5 of user core. Aug 13 00:01:53.751130 sudo[1896]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Aug 13 00:01:53.751761 sudo[1896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:53.765584 dbus-daemon[1640]: avc: received setenforce notice (enforcing=1) Aug 13 00:01:53.768311 sudo[1896]: pam_unix(sudo:session): session closed for user root Aug 13 00:01:53.793486 sshd[1893]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:53.799299 systemd[1]: sshd@4-172.31.18.163:22-139.178.89.65:37688.service: Deactivated successfully. Aug 13 00:01:53.800764 systemd[1]: session-5.scope: Deactivated successfully. Aug 13 00:01:53.802092 systemd-logind[1647]: Session 5 logged out. Waiting for processes to exit. Aug 13 00:01:53.804443 systemd-logind[1647]: Removed session 5. Aug 13 00:01:53.822895 systemd[1]: Started sshd@5-172.31.18.163:22-139.178.89.65:37696.service. Aug 13 00:01:53.997090 sshd[1900]: Accepted publickey for core from 139.178.89.65 port 37696 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:54.000413 sshd[1900]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:54.009202 systemd[1]: Started session-6.scope. Aug 13 00:01:54.010381 systemd-logind[1647]: New session 6 of user core. Aug 13 00:01:54.119992 sudo[1904]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Aug 13 00:01:54.121062 sudo[1904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:54.126909 sudo[1904]: pam_unix(sudo:session): session closed for user root Aug 13 00:01:54.136672 sudo[1903]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Aug 13 00:01:54.137745 sudo[1903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:54.155952 systemd[1]: Stopping audit-rules.service... Aug 13 00:01:54.156000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 00:01:54.160284 kernel: kauditd_printk_skb: 110 callbacks suppressed Aug 13 00:01:54.160358 kernel: audit: type=1305 audit(1755043314.156:203): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 00:01:54.160754 auditctl[1907]: No rules Aug 13 00:01:54.161710 systemd[1]: audit-rules.service: Deactivated successfully. Aug 13 00:01:54.162063 systemd[1]: Stopped audit-rules.service. Aug 13 00:01:54.166586 systemd[1]: Starting audit-rules.service... Aug 13 00:01:54.156000 audit[1907]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd2f38430 a2=420 a3=0 items=0 ppid=1 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:54.180569 kernel: audit: type=1300 audit(1755043314.156:203): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd2f38430 a2=420 a3=0 items=0 ppid=1 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:54.156000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Aug 13 00:01:54.184691 kernel: audit: type=1327 audit(1755043314.156:203): proctitle=2F7362696E2F617564697463746C002D44 Aug 13 00:01:54.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.193107 kernel: audit: type=1131 audit(1755043314.159:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.211728 augenrules[1924]: No rules Aug 13 00:01:54.213399 systemd[1]: Finished audit-rules.service. Aug 13 00:01:54.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.222000 audit[1903]: USER_END pid=1903 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.223851 sudo[1903]: pam_unix(sudo:session): session closed for user root Aug 13 00:01:54.233603 kernel: audit: type=1130 audit(1755043314.212:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.233734 kernel: audit: type=1106 audit(1755043314.222:206): pid=1903 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.222000 audit[1903]: CRED_DISP pid=1903 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.242532 kernel: audit: type=1104 audit(1755043314.222:207): pid=1903 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.247847 sshd[1900]: pam_unix(sshd:session): session closed for user core Aug 13 00:01:54.249000 audit[1900]: USER_END pid=1900 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.264093 systemd[1]: sshd@5-172.31.18.163:22-139.178.89.65:37696.service: Deactivated successfully. Aug 13 00:01:54.250000 audit[1900]: CRED_DISP pid=1900 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.274027 kernel: audit: type=1106 audit(1755043314.249:208): pid=1900 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.274140 kernel: audit: type=1104 audit(1755043314.250:209): pid=1900 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.265403 systemd[1]: session-6.scope: Deactivated successfully. Aug 13 00:01:54.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.18.163:22-139.178.89.65:37696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.285001 kernel: audit: type=1131 audit(1755043314.263:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.18.163:22-139.178.89.65:37696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.284119 systemd-logind[1647]: Session 6 logged out. Waiting for processes to exit. Aug 13 00:01:54.287923 systemd[1]: Started sshd@6-172.31.18.163:22-139.178.89.65:37698.service. Aug 13 00:01:54.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.18.163:22-139.178.89.65:37698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.291018 systemd-logind[1647]: Removed session 6. Aug 13 00:01:54.454000 audit[1930]: USER_ACCT pid=1930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.455516 sshd[1930]: Accepted publickey for core from 139.178.89.65 port 37698 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:01:54.455000 audit[1930]: CRED_ACQ pid=1930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.456000 audit[1930]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4727b20 a2=3 a3=1 items=0 ppid=1 pid=1930 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:54.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:01:54.458457 sshd[1930]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:01:54.467015 systemd[1]: Started session-7.scope. Aug 13 00:01:54.467942 systemd-logind[1647]: New session 7 of user core. Aug 13 00:01:54.475000 audit[1930]: USER_START pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.478000 audit[1932]: CRED_ACQ pid=1932 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:01:54.574000 audit[1933]: USER_ACCT pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.576130 sudo[1933]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Aug 13 00:01:54.576000 audit[1933]: CRED_REFR pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.577894 sudo[1933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:01:54.579000 audit[1933]: USER_START pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:01:54.660111 systemd[1]: Starting docker.service... Aug 13 00:01:54.782975 env[1943]: time="2025-08-13T00:01:54.782851071Z" level=info msg="Starting up" Aug 13 00:01:54.786055 env[1943]: time="2025-08-13T00:01:54.786007623Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 00:01:54.786224 env[1943]: time="2025-08-13T00:01:54.786195387Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 00:01:54.786385 env[1943]: time="2025-08-13T00:01:54.786352059Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 00:01:54.786492 env[1943]: time="2025-08-13T00:01:54.786463371Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 00:01:54.791246 env[1943]: time="2025-08-13T00:01:54.791177151Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 00:01:54.791246 env[1943]: time="2025-08-13T00:01:54.791223519Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 00:01:54.791246 env[1943]: time="2025-08-13T00:01:54.791258775Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 00:01:54.791562 env[1943]: time="2025-08-13T00:01:54.791310231Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 00:01:54.842112 env[1943]: time="2025-08-13T00:01:54.841406764Z" level=info msg="Loading containers: start." Aug 13 00:01:54.993000 audit[1974]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:54.993000 audit[1974]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffed956750 a2=0 a3=1 items=0 ppid=1943 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:54.993000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Aug 13 00:01:54.997000 audit[1976]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:54.997000 audit[1976]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff80407b0 a2=0 a3=1 items=0 ppid=1943 pid=1976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:54.997000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Aug 13 00:01:55.001000 audit[1978]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.001000 audit[1978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffce47d840 a2=0 a3=1 items=0 ppid=1943 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.001000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 00:01:55.006000 audit[1980]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.006000 audit[1980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc801b100 a2=0 a3=1 items=0 ppid=1943 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.006000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 00:01:55.028000 audit[1982]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.028000 audit[1982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe46bc720 a2=0 a3=1 items=0 ppid=1943 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.028000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Aug 13 00:01:55.059000 audit[1987]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.059000 audit[1987]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc67ffed0 a2=0 a3=1 items=0 ppid=1943 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.059000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Aug 13 00:01:55.077000 audit[1989]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.077000 audit[1989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe5488670 a2=0 a3=1 items=0 ppid=1943 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.077000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Aug 13 00:01:55.081000 audit[1991]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.081000 audit[1991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe63def90 a2=0 a3=1 items=0 ppid=1943 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.081000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Aug 13 00:01:55.084000 audit[1993]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.084000 audit[1993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff433f170 a2=0 a3=1 items=0 ppid=1943 pid=1993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:55.104000 audit[1997]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.104000 audit[1997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd91ff680 a2=0 a3=1 items=0 ppid=1943 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.104000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:55.111000 audit[1998]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.111000 audit[1998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffde85a870 a2=0 a3=1 items=0 ppid=1943 pid=1998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.111000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:55.142307 kernel: Initializing XFRM netlink socket Aug 13 00:01:55.210910 env[1943]: time="2025-08-13T00:01:55.210840961Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Aug 13 00:01:55.214021 (udev-worker)[1954]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:01:55.252000 audit[2006]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2006 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.252000 audit[2006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffdd86e800 a2=0 a3=1 items=0 ppid=1943 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.252000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Aug 13 00:01:55.266000 audit[2009]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2009 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.266000 audit[2009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc7b12f50 a2=0 a3=1 items=0 ppid=1943 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.266000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Aug 13 00:01:55.272000 audit[2012]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2012 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.272000 audit[2012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd436c450 a2=0 a3=1 items=0 ppid=1943 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.272000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Aug 13 00:01:55.276000 audit[2014]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.276000 audit[2014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd26f58f0 a2=0 a3=1 items=0 ppid=1943 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.276000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Aug 13 00:01:55.280000 audit[2016]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2016 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.280000 audit[2016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffffea9f620 a2=0 a3=1 items=0 ppid=1943 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.280000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Aug 13 00:01:55.285000 audit[2018]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.285000 audit[2018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffffc4c360 a2=0 a3=1 items=0 ppid=1943 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.285000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Aug 13 00:01:55.289000 audit[2020]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2020 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.289000 audit[2020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc259da70 a2=0 a3=1 items=0 ppid=1943 pid=2020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.289000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Aug 13 00:01:55.317000 audit[2023]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.317000 audit[2023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffee3fc540 a2=0 a3=1 items=0 ppid=1943 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.317000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Aug 13 00:01:55.322000 audit[2025]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.322000 audit[2025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffff6ba8a30 a2=0 a3=1 items=0 ppid=1943 pid=2025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 00:01:55.326000 audit[2027]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.326000 audit[2027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffcd270d20 a2=0 a3=1 items=0 ppid=1943 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 00:01:55.330000 audit[2029]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2029 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.330000 audit[2029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff4c759c0 a2=0 a3=1 items=0 ppid=1943 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.330000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Aug 13 00:01:55.332825 systemd-networkd[1381]: docker0: Link UP Aug 13 00:01:55.354000 audit[2033]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.354000 audit[2033]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc8f1bb40 a2=0 a3=1 items=0 ppid=1943 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:55.358000 audit[2034]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:01:55.358000 audit[2034]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdf990740 a2=0 a3=1 items=0 ppid=1943 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:01:55.358000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:01:55.362527 env[1943]: time="2025-08-13T00:01:55.362487626Z" level=info msg="Loading containers: done." Aug 13 00:01:55.395085 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3409300096-merged.mount: Deactivated successfully. Aug 13 00:01:55.408568 env[1943]: time="2025-08-13T00:01:55.408495590Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Aug 13 00:01:55.409234 env[1943]: time="2025-08-13T00:01:55.409202258Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Aug 13 00:01:55.409653 env[1943]: time="2025-08-13T00:01:55.409614866Z" level=info msg="Daemon has completed initialization" Aug 13 00:01:55.443430 systemd[1]: Started docker.service. Aug 13 00:01:55.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:55.454308 env[1943]: time="2025-08-13T00:01:55.454208991Z" level=info msg="API listen on /run/docker.sock" Aug 13 00:01:56.860955 env[1658]: time="2025-08-13T00:01:56.860851590Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.11\"" Aug 13 00:01:57.558708 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount571414328.mount: Deactivated successfully. Aug 13 00:01:58.488419 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Aug 13 00:01:58.488806 systemd[1]: Stopped kubelet.service. Aug 13 00:01:58.488909 systemd[1]: kubelet.service: Consumed 1.680s CPU time. Aug 13 00:01:58.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:58.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:58.491835 systemd[1]: Starting kubelet.service... Aug 13 00:01:58.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:01:58.821192 systemd[1]: Started kubelet.service. Aug 13 00:01:58.927158 kubelet[2069]: E0813 00:01:58.927089 2069 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:01:58.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:01:58.934464 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:01:58.934767 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:01:59.464119 env[1658]: time="2025-08-13T00:01:59.464058871Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.468733 env[1658]: time="2025-08-13T00:01:59.468666463Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:00a68b619a4bfa14c989a2181a7aa0726a5cb1272a7f65394e6a594ad6eade27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.474437 env[1658]: time="2025-08-13T00:01:59.474376231Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.477642 env[1658]: time="2025-08-13T00:01:59.477581251Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:a3d1c4440817725a1b503a7ccce94f3dce2b208ebf257b405dc2d97817df3dde,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:01:59.479195 env[1658]: time="2025-08-13T00:01:59.479148583Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.11\" returns image reference \"sha256:00a68b619a4bfa14c989a2181a7aa0726a5cb1272a7f65394e6a594ad6eade27\"" Aug 13 00:01:59.482869 env[1658]: time="2025-08-13T00:01:59.482818831Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.11\"" Aug 13 00:02:01.320238 env[1658]: time="2025-08-13T00:02:01.320178404Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:01.324404 env[1658]: time="2025-08-13T00:02:01.324350528Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5c5dc52b837451e0fe6108fdfb9cfa431191ce227ce71d103dec8a8c655c4e71,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:01.328136 env[1658]: time="2025-08-13T00:02:01.328066652Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:01.332361 env[1658]: time="2025-08-13T00:02:01.332260376Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:0f19de157f3d251f5ddeb6e9d026895bc55cb02592874b326fa345c57e5e2848,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:01.334040 env[1658]: time="2025-08-13T00:02:01.333950096Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.11\" returns image reference \"sha256:5c5dc52b837451e0fe6108fdfb9cfa431191ce227ce71d103dec8a8c655c4e71\"" Aug 13 00:02:01.334998 env[1658]: time="2025-08-13T00:02:01.334948028Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.11\"" Aug 13 00:02:02.864457 env[1658]: time="2025-08-13T00:02:02.864395975Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:02.869375 env[1658]: time="2025-08-13T00:02:02.869299151Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89be0efdc4ab1793b9b1b05e836e33dc50f5b2911b57609b315b58608b2d3746,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:02.875010 env[1658]: time="2025-08-13T00:02:02.874941695Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:02.880771 env[1658]: time="2025-08-13T00:02:02.880701312Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:1a9b59b3bfa6c1f1911f6f865a795620c461d079e413061bb71981cadd67f39d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:02.884376 env[1658]: time="2025-08-13T00:02:02.883526364Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.11\" returns image reference \"sha256:89be0efdc4ab1793b9b1b05e836e33dc50f5b2911b57609b315b58608b2d3746\"" Aug 13 00:02:02.885148 env[1658]: time="2025-08-13T00:02:02.885074892Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.11\"" Aug 13 00:02:04.303931 amazon-ssm-agent[1652]: 2025-08-13 00:02:04 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Aug 13 00:02:04.334445 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount736147395.mount: Deactivated successfully. Aug 13 00:02:05.236951 env[1658]: time="2025-08-13T00:02:05.236876783Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:05.241935 env[1658]: time="2025-08-13T00:02:05.241867043Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d1e7db6660181423f98acbe3a495b3fe5cec9b85cdef245540cc2cb3b180ab0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:05.245251 env[1658]: time="2025-08-13T00:02:05.245190923Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:05.248612 env[1658]: time="2025-08-13T00:02:05.248551763Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:a31da847792c5e7e92e91b78da1ad21d693e4b2b48d0e9f4610c8764dc2a5d79,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:05.249716 env[1658]: time="2025-08-13T00:02:05.249664295Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.11\" returns image reference \"sha256:7d1e7db6660181423f98acbe3a495b3fe5cec9b85cdef245540cc2cb3b180ab0\"" Aug 13 00:02:05.250561 env[1658]: time="2025-08-13T00:02:05.250517255Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Aug 13 00:02:05.812549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount380625364.mount: Deactivated successfully. Aug 13 00:02:07.338994 env[1658]: time="2025-08-13T00:02:07.338926586Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.343736 env[1658]: time="2025-08-13T00:02:07.343652402Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.348524 env[1658]: time="2025-08-13T00:02:07.348453698Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.354791 env[1658]: time="2025-08-13T00:02:07.354727310Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.356633 env[1658]: time="2025-08-13T00:02:07.356574818Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Aug 13 00:02:07.357995 env[1658]: time="2025-08-13T00:02:07.357940514Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Aug 13 00:02:07.858237 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4110037005.mount: Deactivated successfully. Aug 13 00:02:07.873261 env[1658]: time="2025-08-13T00:02:07.873200104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.877689 env[1658]: time="2025-08-13T00:02:07.877636012Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.881235 env[1658]: time="2025-08-13T00:02:07.881146960Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.885067 env[1658]: time="2025-08-13T00:02:07.885012484Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:07.886767 env[1658]: time="2025-08-13T00:02:07.886704172Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Aug 13 00:02:07.887710 env[1658]: time="2025-08-13T00:02:07.887636908Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Aug 13 00:02:08.437627 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2345998711.mount: Deactivated successfully. Aug 13 00:02:08.988296 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Aug 13 00:02:08.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:08.988631 systemd[1]: Stopped kubelet.service. Aug 13 00:02:08.992347 kernel: kauditd_printk_skb: 88 callbacks suppressed Aug 13 00:02:08.992500 kernel: audit: type=1130 audit(1755043328.987:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:09.002905 systemd[1]: Starting kubelet.service... Aug 13 00:02:08.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:09.017179 kernel: audit: type=1131 audit(1755043328.987:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:09.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:09.435640 systemd[1]: Started kubelet.service. Aug 13 00:02:09.445478 kernel: audit: type=1130 audit(1755043329.434:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:09.535419 kubelet[2080]: E0813 00:02:09.535357 2080 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:02:09.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:09.539564 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:02:09.539909 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:02:09.549328 kernel: audit: type=1131 audit(1755043329.539:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:11.383283 env[1658]: time="2025-08-13T00:02:11.383157594Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:11.389169 env[1658]: time="2025-08-13T00:02:11.389090070Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:11.393746 env[1658]: time="2025-08-13T00:02:11.393683646Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:11.397914 env[1658]: time="2025-08-13T00:02:11.397853898Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:11.400099 env[1658]: time="2025-08-13T00:02:11.400000182Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Aug 13 00:02:14.184728 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Aug 13 00:02:14.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:14.195318 kernel: audit: type=1131 audit(1755043334.183:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:14.209000 audit: BPF prog-id=43 op=UNLOAD Aug 13 00:02:14.209000 audit: BPF prog-id=42 op=UNLOAD Aug 13 00:02:14.213309 kernel: audit: type=1334 audit(1755043334.209:254): prog-id=43 op=UNLOAD Aug 13 00:02:14.209000 audit: BPF prog-id=41 op=UNLOAD Aug 13 00:02:14.218708 kernel: audit: type=1334 audit(1755043334.209:255): prog-id=42 op=UNLOAD Aug 13 00:02:14.218770 kernel: audit: type=1334 audit(1755043334.209:256): prog-id=41 op=UNLOAD Aug 13 00:02:19.738338 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Aug 13 00:02:19.738705 systemd[1]: Stopped kubelet.service. Aug 13 00:02:19.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:19.741592 systemd[1]: Starting kubelet.service... Aug 13 00:02:19.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:19.759142 kernel: audit: type=1130 audit(1755043339.737:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:19.759284 kernel: audit: type=1131 audit(1755043339.737:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:20.074602 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Aug 13 00:02:20.074791 systemd[1]: kubelet.service: Failed with result 'signal'. Aug 13 00:02:20.075237 systemd[1]: Stopped kubelet.service. Aug 13 00:02:20.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:20.079660 systemd[1]: Starting kubelet.service... Aug 13 00:02:20.086371 kernel: audit: type=1130 audit(1755043340.074:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:02:20.140442 systemd[1]: Reloading. Aug 13 00:02:20.326357 /usr/lib/systemd/system-generators/torcx-generator[2137]: time="2025-08-13T00:02:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:02:20.329337 /usr/lib/systemd/system-generators/torcx-generator[2137]: time="2025-08-13T00:02:20Z" level=info msg="torcx already run" Aug 13 00:02:20.489471 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:02:20.489514 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:02:20.528877 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.712490 kernel: audit: type=1400 audit(1755043340.689:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.712630 kernel: audit: type=1400 audit(1755043340.689:261): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.717725 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 00:02:20.717882 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Aug 13 00:02:20.719544 kernel: audit: backlog limit exceeded Aug 13 00:02:20.719676 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 00:02:20.730754 kernel: audit: type=1400 audit(1755043340.689:262): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.698000 audit: BPF prog-id=46 op=LOAD Aug 13 00:02:20.698000 audit: BPF prog-id=37 op=UNLOAD Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit: BPF prog-id=47 op=LOAD Aug 13 00:02:20.701000 audit: BPF prog-id=27 op=UNLOAD Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit: BPF prog-id=48 op=LOAD Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.701000 audit: BPF prog-id=49 op=LOAD Aug 13 00:02:20.701000 audit: BPF prog-id=28 op=UNLOAD Aug 13 00:02:20.701000 audit: BPF prog-id=29 op=UNLOAD Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit: BPF prog-id=50 op=LOAD Aug 13 00:02:20.711000 audit: BPF prog-id=30 op=UNLOAD Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.736000 audit: BPF prog-id=34 op=UNLOAD Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:20.743000 audit: BPF prog-id=60 op=LOAD Aug 13 00:02:20.743000 audit: BPF prog-id=36 op=UNLOAD Aug 13 00:02:20.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:20.799878 systemd[1]: Stopping kubelet.service... Aug 13 00:02:20.802179 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 00:02:20.802679 systemd[1]: Stopped kubelet.service. Aug 13 00:02:20.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:20.806074 systemd[1]: Starting kubelet.service... Aug 13 00:02:21.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:21.510999 systemd[1]: Started kubelet.service. Aug 13 00:02:21.589434 kubelet[2197]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:21.589964 kubelet[2197]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Aug 13 00:02:21.590075 kubelet[2197]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:21.590358 kubelet[2197]: I0813 00:02:21.590312 2197 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 00:02:23.289008 kubelet[2197]: I0813 00:02:23.288958 2197 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Aug 13 00:02:23.289738 kubelet[2197]: I0813 00:02:23.289710 2197 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 00:02:23.290372 kubelet[2197]: I0813 00:02:23.290345 2197 server.go:934] "Client rotation is on, will bootstrap in background" Aug 13 00:02:23.342677 kubelet[2197]: E0813 00:02:23.342627 2197 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.18.163:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:23.343923 kubelet[2197]: I0813 00:02:23.343864 2197 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 00:02:23.357619 kubelet[2197]: E0813 00:02:23.357519 2197 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 00:02:23.357619 kubelet[2197]: I0813 00:02:23.357606 2197 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 00:02:23.365542 kubelet[2197]: I0813 00:02:23.365479 2197 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 00:02:23.367568 kubelet[2197]: I0813 00:02:23.367516 2197 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Aug 13 00:02:23.368006 kubelet[2197]: I0813 00:02:23.367939 2197 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 00:02:23.368326 kubelet[2197]: I0813 00:02:23.367996 2197 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-18-163","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 00:02:23.368508 kubelet[2197]: I0813 00:02:23.368467 2197 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 00:02:23.368508 kubelet[2197]: I0813 00:02:23.368489 2197 container_manager_linux.go:300] "Creating device plugin manager" Aug 13 00:02:23.368979 kubelet[2197]: I0813 00:02:23.368935 2197 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:23.377891 kubelet[2197]: I0813 00:02:23.377842 2197 kubelet.go:408] "Attempting to sync node with API server" Aug 13 00:02:23.378040 kubelet[2197]: I0813 00:02:23.377898 2197 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 00:02:23.378040 kubelet[2197]: I0813 00:02:23.377939 2197 kubelet.go:314] "Adding apiserver pod source" Aug 13 00:02:23.378241 kubelet[2197]: I0813 00:02:23.378097 2197 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 00:02:23.380437 kubelet[2197]: W0813 00:02:23.380206 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.18.163:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-163&limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:23.380671 kubelet[2197]: E0813 00:02:23.380640 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.18.163:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-163&limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:23.386502 kubelet[2197]: I0813 00:02:23.386452 2197 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 00:02:23.387702 kubelet[2197]: I0813 00:02:23.387657 2197 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Aug 13 00:02:23.387813 kubelet[2197]: W0813 00:02:23.387751 2197 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Aug 13 00:02:23.388724 kubelet[2197]: W0813 00:02:23.388637 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.18.163:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:23.388878 kubelet[2197]: E0813 00:02:23.388749 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.18.163:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:23.395332 kubelet[2197]: I0813 00:02:23.395260 2197 server.go:1274] "Started kubelet" Aug 13 00:02:23.399626 kubelet[2197]: I0813 00:02:23.399522 2197 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 00:02:23.403099 kubelet[2197]: I0813 00:02:23.403020 2197 server.go:449] "Adding debug handlers to kubelet server" Aug 13 00:02:23.404406 kubelet[2197]: I0813 00:02:23.404323 2197 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 00:02:23.405109 kubelet[2197]: I0813 00:02:23.405071 2197 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 00:02:23.406000 audit[2197]: AVC avc: denied { mac_admin } for pid=2197 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:23.406000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:23.406000 audit[2197]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009259b0 a1=4000c45518 a2=4000925980 a3=25 items=0 ppid=1 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.406000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:23.408482 kubelet[2197]: I0813 00:02:23.408438 2197 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 00:02:23.408681 kubelet[2197]: I0813 00:02:23.408651 2197 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Aug 13 00:02:23.407000 audit[2197]: AVC avc: denied { mac_admin } for pid=2197 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:23.407000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:23.407000 audit[2197]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c55860 a1=4000c45530 a2=4000925a40 a3=25 items=0 ppid=1 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.407000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:23.409339 kubelet[2197]: I0813 00:02:23.409312 2197 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 00:02:23.412955 kubelet[2197]: E0813 00:02:23.410802 2197 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.18.163:6443/api/v1/namespaces/default/events\": dial tcp 172.31.18.163:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-18-163.185b2a9f487c69ae default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-18-163,UID:ip-172-31-18-163,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-18-163,},FirstTimestamp:2025-08-13 00:02:23.395219886 +0000 UTC m=+1.873482806,LastTimestamp:2025-08-13 00:02:23.395219886 +0000 UTC m=+1.873482806,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-18-163,}" Aug 13 00:02:23.415532 kubelet[2197]: I0813 00:02:23.415446 2197 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 00:02:23.416000 audit[2209]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.416000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff2a7ead0 a2=0 a3=1 items=0 ppid=2197 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.416000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 00:02:23.419038 kubelet[2197]: I0813 00:02:23.418967 2197 volume_manager.go:289] "Starting Kubelet Volume Manager" Aug 13 00:02:23.419558 kubelet[2197]: E0813 00:02:23.419508 2197 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ip-172-31-18-163\" not found" Aug 13 00:02:23.420163 kubelet[2197]: I0813 00:02:23.420116 2197 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Aug 13 00:02:23.420254 kubelet[2197]: I0813 00:02:23.420220 2197 reconciler.go:26] "Reconciler: start to sync state" Aug 13 00:02:23.423887 kubelet[2197]: E0813 00:02:23.423831 2197 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 00:02:23.424144 kubelet[2197]: W0813 00:02:23.424056 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.18.163:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:23.424225 kubelet[2197]: E0813 00:02:23.424190 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.18.163:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:23.424406 kubelet[2197]: E0813 00:02:23.424335 2197 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.18.163:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-163?timeout=10s\": dial tcp 172.31.18.163:6443: connect: connection refused" interval="200ms" Aug 13 00:02:23.425739 kubelet[2197]: I0813 00:02:23.425681 2197 factory.go:221] Registration of the systemd container factory successfully Aug 13 00:02:23.425896 kubelet[2197]: I0813 00:02:23.425859 2197 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 00:02:23.428080 kubelet[2197]: I0813 00:02:23.428038 2197 factory.go:221] Registration of the containerd container factory successfully Aug 13 00:02:23.428000 audit[2210]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.428000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfb34d90 a2=0 a3=1 items=0 ppid=2197 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 00:02:23.443000 audit[2213]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.443000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffefed31f0 a2=0 a3=1 items=0 ppid=2197 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:23.448000 audit[2216]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.448000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc3338bf0 a2=0 a3=1 items=0 ppid=2197 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:23.458737 kubelet[2197]: I0813 00:02:23.458706 2197 cpu_manager.go:214] "Starting CPU manager" policy="none" Aug 13 00:02:23.458953 kubelet[2197]: I0813 00:02:23.458929 2197 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Aug 13 00:02:23.459071 kubelet[2197]: I0813 00:02:23.459051 2197 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:23.466677 kubelet[2197]: I0813 00:02:23.466637 2197 policy_none.go:49] "None policy: Start" Aug 13 00:02:23.469202 kubelet[2197]: I0813 00:02:23.469169 2197 memory_manager.go:170] "Starting memorymanager" policy="None" Aug 13 00:02:23.469508 kubelet[2197]: I0813 00:02:23.469486 2197 state_mem.go:35] "Initializing new in-memory state store" Aug 13 00:02:23.468000 audit[2219]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.468000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe533ef10 a2=0 a3=1 items=0 ppid=2197 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.468000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Aug 13 00:02:23.471346 kubelet[2197]: I0813 00:02:23.471259 2197 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Aug 13 00:02:23.471000 audit[2221]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:23.471000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdea5dd40 a2=0 a3=1 items=0 ppid=2197 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.471000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 00:02:23.474881 kubelet[2197]: I0813 00:02:23.474783 2197 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Aug 13 00:02:23.475240 kubelet[2197]: I0813 00:02:23.474831 2197 status_manager.go:217] "Starting to sync pod status with apiserver" Aug 13 00:02:23.475457 kubelet[2197]: I0813 00:02:23.475252 2197 kubelet.go:2321] "Starting kubelet main sync loop" Aug 13 00:02:23.475457 kubelet[2197]: E0813 00:02:23.475399 2197 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 00:02:23.476000 audit[2222]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.476000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc37195b0 a2=0 a3=1 items=0 ppid=2197 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 00:02:23.479000 audit[2223]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.479000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffecc0d270 a2=0 a3=1 items=0 ppid=2197 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.479000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 00:02:23.481823 systemd[1]: Created slice kubepods.slice. Aug 13 00:02:23.483000 audit[2224]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:23.483000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff723ff20 a2=0 a3=1 items=0 ppid=2197 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.483000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 00:02:23.484000 audit[2225]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:23.484000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1c5dcf0 a2=0 a3=1 items=0 ppid=2197 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.484000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 00:02:23.486000 audit[2226]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:23.486000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffea3e7be0 a2=0 a3=1 items=0 ppid=2197 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.486000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 00:02:23.488000 audit[2227]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:23.488000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffffd0b880 a2=0 a3=1 items=0 ppid=2197 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.488000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 00:02:23.491212 kubelet[2197]: W0813 00:02:23.491118 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.18.163:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:23.491389 kubelet[2197]: E0813 00:02:23.491219 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.18.163:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:23.501123 systemd[1]: Created slice kubepods-burstable.slice. Aug 13 00:02:23.507071 systemd[1]: Created slice kubepods-besteffort.slice. Aug 13 00:02:23.517359 kubelet[2197]: I0813 00:02:23.517322 2197 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Aug 13 00:02:23.516000 audit[2197]: AVC avc: denied { mac_admin } for pid=2197 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:23.516000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:23.516000 audit[2197]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e00870 a1=4000e30d20 a2=4000e00840 a3=25 items=0 ppid=1 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:23.516000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:23.518004 kubelet[2197]: I0813 00:02:23.517972 2197 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Aug 13 00:02:23.518346 kubelet[2197]: I0813 00:02:23.518322 2197 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 00:02:23.518505 kubelet[2197]: I0813 00:02:23.518453 2197 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 00:02:23.519462 kubelet[2197]: I0813 00:02:23.519430 2197 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 00:02:23.523828 kubelet[2197]: E0813 00:02:23.523782 2197 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-18-163\" not found" Aug 13 00:02:23.595128 systemd[1]: Created slice kubepods-burstable-pod64ae758db4d50867fec16ac5755f6204.slice. Aug 13 00:02:23.612947 systemd[1]: Created slice kubepods-burstable-podf07df222220d003a9c4d3cfd397f6f6b.slice. Aug 13 00:02:23.622001 systemd[1]: Created slice kubepods-burstable-pod4a678f701837549c0d2df0d4f7276d64.slice. Aug 13 00:02:23.625112 kubelet[2197]: E0813 00:02:23.625061 2197 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.18.163:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-163?timeout=10s\": dial tcp 172.31.18.163:6443: connect: connection refused" interval="400ms" Aug 13 00:02:23.625611 kubelet[2197]: I0813 00:02:23.625503 2197 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-18-163" Aug 13 00:02:23.626638 kubelet[2197]: E0813 00:02:23.626592 2197 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.18.163:6443/api/v1/nodes\": dial tcp 172.31.18.163:6443: connect: connection refused" node="ip-172-31-18-163" Aug 13 00:02:23.721457 kubelet[2197]: I0813 00:02:23.721403 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/64ae758db4d50867fec16ac5755f6204-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-18-163\" (UID: \"64ae758db4d50867fec16ac5755f6204\") " pod="kube-system/kube-apiserver-ip-172-31-18-163" Aug 13 00:02:23.721697 kubelet[2197]: I0813 00:02:23.721667 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:23.721881 kubelet[2197]: I0813 00:02:23.721851 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:23.722023 kubelet[2197]: I0813 00:02:23.721998 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4a678f701837549c0d2df0d4f7276d64-kubeconfig\") pod \"kube-scheduler-ip-172-31-18-163\" (UID: \"4a678f701837549c0d2df0d4f7276d64\") " pod="kube-system/kube-scheduler-ip-172-31-18-163" Aug 13 00:02:23.722173 kubelet[2197]: I0813 00:02:23.722148 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/64ae758db4d50867fec16ac5755f6204-ca-certs\") pod \"kube-apiserver-ip-172-31-18-163\" (UID: \"64ae758db4d50867fec16ac5755f6204\") " pod="kube-system/kube-apiserver-ip-172-31-18-163" Aug 13 00:02:23.722346 kubelet[2197]: I0813 00:02:23.722321 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/64ae758db4d50867fec16ac5755f6204-k8s-certs\") pod \"kube-apiserver-ip-172-31-18-163\" (UID: \"64ae758db4d50867fec16ac5755f6204\") " pod="kube-system/kube-apiserver-ip-172-31-18-163" Aug 13 00:02:23.722506 kubelet[2197]: I0813 00:02:23.722480 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-ca-certs\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:23.722651 kubelet[2197]: I0813 00:02:23.722626 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-k8s-certs\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:23.722821 kubelet[2197]: I0813 00:02:23.722793 2197 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-kubeconfig\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:23.829890 kubelet[2197]: I0813 00:02:23.829854 2197 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-18-163" Aug 13 00:02:23.830577 kubelet[2197]: E0813 00:02:23.830538 2197 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.18.163:6443/api/v1/nodes\": dial tcp 172.31.18.163:6443: connect: connection refused" node="ip-172-31-18-163" Aug 13 00:02:23.912855 env[1658]: time="2025-08-13T00:02:23.912686816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-18-163,Uid:64ae758db4d50867fec16ac5755f6204,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:23.925924 env[1658]: time="2025-08-13T00:02:23.925505520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-18-163,Uid:f07df222220d003a9c4d3cfd397f6f6b,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:23.931799 env[1658]: time="2025-08-13T00:02:23.931724072Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-18-163,Uid:4a678f701837549c0d2df0d4f7276d64,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:24.026938 kubelet[2197]: E0813 00:02:24.026837 2197 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.18.163:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-163?timeout=10s\": dial tcp 172.31.18.163:6443: connect: connection refused" interval="800ms" Aug 13 00:02:24.194940 kubelet[2197]: W0813 00:02:24.194438 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.18.163:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:24.194940 kubelet[2197]: E0813 00:02:24.194569 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.18.163:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:24.230944 kubelet[2197]: W0813 00:02:24.230859 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.18.163:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-163&limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:24.231726 kubelet[2197]: E0813 00:02:24.231684 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.18.163:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-163&limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:24.232877 kubelet[2197]: I0813 00:02:24.232840 2197 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-18-163" Aug 13 00:02:24.233633 kubelet[2197]: E0813 00:02:24.233586 2197 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.18.163:6443/api/v1/nodes\": dial tcp 172.31.18.163:6443: connect: connection refused" node="ip-172-31-18-163" Aug 13 00:02:24.420296 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3754141583.mount: Deactivated successfully. Aug 13 00:02:24.438820 env[1658]: time="2025-08-13T00:02:24.438745460Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.441163 env[1658]: time="2025-08-13T00:02:24.441102087Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.447530 env[1658]: time="2025-08-13T00:02:24.447390645Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.450621 env[1658]: time="2025-08-13T00:02:24.450546283Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.452607 env[1658]: time="2025-08-13T00:02:24.452539860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.456673 env[1658]: time="2025-08-13T00:02:24.456604020Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.460438 env[1658]: time="2025-08-13T00:02:24.460386144Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.462621 env[1658]: time="2025-08-13T00:02:24.462573198Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.465853 env[1658]: time="2025-08-13T00:02:24.465761007Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.475500 env[1658]: time="2025-08-13T00:02:24.475417652Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.479409 env[1658]: time="2025-08-13T00:02:24.479349859Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.500294 env[1658]: time="2025-08-13T00:02:24.500207085Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:24.567783 env[1658]: time="2025-08-13T00:02:24.562609368Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:24.568080 env[1658]: time="2025-08-13T00:02:24.567982960Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:24.568080 env[1658]: time="2025-08-13T00:02:24.568034692Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:24.569035 env[1658]: time="2025-08-13T00:02:24.568907634Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dd48dd949cb635fa3a8848917ce174342ec562554c6a626665a714a9d8d66b78 pid=2242 runtime=io.containerd.runc.v2 Aug 13 00:02:24.577673 env[1658]: time="2025-08-13T00:02:24.577527428Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:24.577909 env[1658]: time="2025-08-13T00:02:24.577699460Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:24.577909 env[1658]: time="2025-08-13T00:02:24.577787193Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:24.578233 env[1658]: time="2025-08-13T00:02:24.578096674Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cefd200b8ffe6d84931fae686d9d43ffd56cb92cf37b71d4571525bd1e0ff16d pid=2254 runtime=io.containerd.runc.v2 Aug 13 00:02:24.597865 env[1658]: time="2025-08-13T00:02:24.597712699Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:24.597865 env[1658]: time="2025-08-13T00:02:24.597792931Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:24.597865 env[1658]: time="2025-08-13T00:02:24.597821179Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:24.601058 env[1658]: time="2025-08-13T00:02:24.600844036Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e9fc21c2054e81ebe2826393d31bead254fa3dce11b68d03355f77446ee02528 pid=2277 runtime=io.containerd.runc.v2 Aug 13 00:02:24.611181 systemd[1]: Started cri-containerd-dd48dd949cb635fa3a8848917ce174342ec562554c6a626665a714a9d8d66b78.scope. Aug 13 00:02:24.635505 kubelet[2197]: W0813 00:02:24.635390 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.18.163:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:24.636181 kubelet[2197]: E0813 00:02:24.636139 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.18.163:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:24.636461 systemd[1]: Started cri-containerd-cefd200b8ffe6d84931fae686d9d43ffd56cb92cf37b71d4571525bd1e0ff16d.scope. Aug 13 00:02:24.659774 systemd[1]: Started cri-containerd-e9fc21c2054e81ebe2826393d31bead254fa3dce11b68d03355f77446ee02528.scope. Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.695000 audit: BPF prog-id=61 op=LOAD Aug 13 00:02:24.697000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.697000 audit[2273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2242 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464343864643934396362363335666133613838343839313763653137 Aug 13 00:02:24.697000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.697000 audit[2273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2242 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464343864643934396362363335666133613838343839313763653137 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit: BPF prog-id=62 op=LOAD Aug 13 00:02:24.698000 audit[2273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2242 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464343864643934396362363335666133613838343839313763653137 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.698000 audit: BPF prog-id=63 op=LOAD Aug 13 00:02:24.698000 audit[2273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2242 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464343864643934396362363335666133613838343839313763653137 Aug 13 00:02:24.698000 audit: BPF prog-id=63 op=UNLOAD Aug 13 00:02:24.698000 audit: BPF prog-id=62 op=UNLOAD Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.699000 audit: BPF prog-id=64 op=LOAD Aug 13 00:02:24.699000 audit[2273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2242 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464343864643934396362363335666133613838343839313763653137 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.715000 audit: BPF prog-id=65 op=LOAD Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2254 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365666432303062386666653664383439333166616536383664396434 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2254 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365666432303062386666653664383439333166616536383664396434 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.716000 audit: BPF prog-id=66 op=LOAD Aug 13 00:02:24.716000 audit[2276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2254 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365666432303062386666653664383439333166616536383664396434 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit: BPF prog-id=67 op=LOAD Aug 13 00:02:24.717000 audit[2276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2254 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365666432303062386666653664383439333166616536383664396434 Aug 13 00:02:24.717000 audit: BPF prog-id=67 op=UNLOAD Aug 13 00:02:24.717000 audit: BPF prog-id=66 op=UNLOAD Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.717000 audit: BPF prog-id=68 op=LOAD Aug 13 00:02:24.717000 audit[2276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2254 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365666432303062386666653664383439333166616536383664396434 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.733000 audit: BPF prog-id=69 op=LOAD Aug 13 00:02:24.734000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.734000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2277 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666332316332303534653831656265323832363339336433316265 Aug 13 00:02:24.734000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.734000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2277 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666332316332303534653831656265323832363339336433316265 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit: BPF prog-id=70 op=LOAD Aug 13 00:02:24.735000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2277 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666332316332303534653831656265323832363339336433316265 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit: BPF prog-id=71 op=LOAD Aug 13 00:02:24.735000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2277 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666332316332303534653831656265323832363339336433316265 Aug 13 00:02:24.735000 audit: BPF prog-id=71 op=UNLOAD Aug 13 00:02:24.735000 audit: BPF prog-id=70 op=UNLOAD Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.735000 audit: BPF prog-id=72 op=LOAD Aug 13 00:02:24.735000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2277 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666332316332303534653831656265323832363339336433316265 Aug 13 00:02:24.810893 env[1658]: time="2025-08-13T00:02:24.807417312Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-18-163,Uid:4a678f701837549c0d2df0d4f7276d64,Namespace:kube-system,Attempt:0,} returns sandbox id \"e9fc21c2054e81ebe2826393d31bead254fa3dce11b68d03355f77446ee02528\"" Aug 13 00:02:24.817854 env[1658]: time="2025-08-13T00:02:24.817787046Z" level=info msg="CreateContainer within sandbox \"e9fc21c2054e81ebe2826393d31bead254fa3dce11b68d03355f77446ee02528\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Aug 13 00:02:24.818176 env[1658]: time="2025-08-13T00:02:24.818114443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-18-163,Uid:f07df222220d003a9c4d3cfd397f6f6b,Namespace:kube-system,Attempt:0,} returns sandbox id \"dd48dd949cb635fa3a8848917ce174342ec562554c6a626665a714a9d8d66b78\"" Aug 13 00:02:24.827737 kubelet[2197]: E0813 00:02:24.827661 2197 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.18.163:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-163?timeout=10s\": dial tcp 172.31.18.163:6443: connect: connection refused" interval="1.6s" Aug 13 00:02:24.828759 env[1658]: time="2025-08-13T00:02:24.828692210Z" level=info msg="CreateContainer within sandbox \"dd48dd949cb635fa3a8848917ce174342ec562554c6a626665a714a9d8d66b78\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Aug 13 00:02:24.833146 env[1658]: time="2025-08-13T00:02:24.833080179Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-18-163,Uid:64ae758db4d50867fec16ac5755f6204,Namespace:kube-system,Attempt:0,} returns sandbox id \"cefd200b8ffe6d84931fae686d9d43ffd56cb92cf37b71d4571525bd1e0ff16d\"" Aug 13 00:02:24.840302 env[1658]: time="2025-08-13T00:02:24.840157704Z" level=info msg="CreateContainer within sandbox \"cefd200b8ffe6d84931fae686d9d43ffd56cb92cf37b71d4571525bd1e0ff16d\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Aug 13 00:02:24.862041 env[1658]: time="2025-08-13T00:02:24.861972832Z" level=info msg="CreateContainer within sandbox \"e9fc21c2054e81ebe2826393d31bead254fa3dce11b68d03355f77446ee02528\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52\"" Aug 13 00:02:24.863381 env[1658]: time="2025-08-13T00:02:24.863331188Z" level=info msg="StartContainer for \"6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52\"" Aug 13 00:02:24.885673 env[1658]: time="2025-08-13T00:02:24.885596401Z" level=info msg="CreateContainer within sandbox \"dd48dd949cb635fa3a8848917ce174342ec562554c6a626665a714a9d8d66b78\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62\"" Aug 13 00:02:24.886681 env[1658]: time="2025-08-13T00:02:24.886612732Z" level=info msg="StartContainer for \"5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62\"" Aug 13 00:02:24.894862 env[1658]: time="2025-08-13T00:02:24.894780304Z" level=info msg="CreateContainer within sandbox \"cefd200b8ffe6d84931fae686d9d43ffd56cb92cf37b71d4571525bd1e0ff16d\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"5d48ace89bce3caf10f611455e11fd8326f5a023df29ec4494638ebe15a15e09\"" Aug 13 00:02:24.895795 env[1658]: time="2025-08-13T00:02:24.895745719Z" level=info msg="StartContainer for \"5d48ace89bce3caf10f611455e11fd8326f5a023df29ec4494638ebe15a15e09\"" Aug 13 00:02:24.913537 systemd[1]: Started cri-containerd-6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52.scope. Aug 13 00:02:24.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.963961 kernel: kauditd_printk_skb: 555 callbacks suppressed Aug 13 00:02:24.964081 kernel: audit: type=1400 audit(1755043344.960:420): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.981845 systemd[1]: Started cri-containerd-5d48ace89bce3caf10f611455e11fd8326f5a023df29ec4494638ebe15a15e09.scope. Aug 13 00:02:24.992459 kernel: audit: type=1400 audit(1755043344.965:421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.997324 kubelet[2197]: W0813 00:02:24.995084 2197 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.18.163:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.18.163:6443: connect: connection refused Aug 13 00:02:24.997324 kubelet[2197]: E0813 00:02:24.995239 2197 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.18.163:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.18.163:6443: connect: connection refused" logger="UnhandledError" Aug 13 00:02:25.010370 kernel: audit: type=1400 audit(1755043344.965:422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.012859 systemd[1]: Started cri-containerd-5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62.scope. Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.022052 kernel: audit: type=1400 audit(1755043344.965:423): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.036804 kubelet[2197]: I0813 00:02:25.036711 2197 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-18-163" Aug 13 00:02:25.037745 kubelet[2197]: E0813 00:02:25.037646 2197 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.18.163:6443/api/v1/nodes\": dial tcp 172.31.18.163:6443: connect: connection refused" node="ip-172-31-18-163" Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.046025 kernel: audit: type=1400 audit(1755043344.965:424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.046149 kernel: audit: type=1400 audit(1755043344.965:425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.057856 kernel: audit: type=1400 audit(1755043344.965:426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.068681 kernel: audit: type=1400 audit(1755043344.965:427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.084362 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 00:02:25.084459 kernel: audit: type=1400 audit(1755043344.965:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.970000 audit: BPF prog-id=73 op=LOAD Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2277 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333832323831353761393665656130653666623434383764393935 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2277 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333832323831353761393665656130653666623434383764393935 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit: BPF prog-id=74 op=LOAD Aug 13 00:02:24.977000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2277 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333832323831353761393665656130653666623434383764393935 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit: BPF prog-id=75 op=LOAD Aug 13 00:02:24.977000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2277 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333832323831353761393665656130653666623434383764393935 Aug 13 00:02:24.977000 audit: BPF prog-id=75 op=UNLOAD Aug 13 00:02:24.977000 audit: BPF prog-id=74 op=UNLOAD Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:24.977000 audit: BPF prog-id=76 op=LOAD Aug 13 00:02:24.977000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2277 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:24.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333832323831353761393665656130653666623434383764393935 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.071000 audit: BPF prog-id=77 op=LOAD Aug 13 00:02:25.082000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.082000 audit[2396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2254 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564343861636538396263653363616631306636313134353565313166 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.096000 audit: BPF prog-id=78 op=LOAD Aug 13 00:02:25.096000 audit[2396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2254 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564343861636538396263653363616631306636313134353565313166 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit: BPF prog-id=79 op=LOAD Aug 13 00:02:25.097000 audit[2396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2254 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564343861636538396263653363616631306636313134353565313166 Aug 13 00:02:25.097000 audit: BPF prog-id=79 op=UNLOAD Aug 13 00:02:25.097000 audit: BPF prog-id=78 op=UNLOAD Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { perfmon } for pid=2396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit[2396]: AVC avc: denied { bpf } for pid=2396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.097000 audit: BPF prog-id=80 op=LOAD Aug 13 00:02:25.097000 audit[2396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2254 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564343861636538396263653363616631306636313134353565313166 Aug 13 00:02:25.121639 env[1658]: time="2025-08-13T00:02:25.121546965Z" level=info msg="StartContainer for \"6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52\" returns successfully" Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.165000 audit: BPF prog-id=81 op=LOAD Aug 13 00:02:25.169049 env[1658]: time="2025-08-13T00:02:25.168966115Z" level=info msg="StartContainer for \"5d48ace89bce3caf10f611455e11fd8326f5a023df29ec4494638ebe15a15e09\" returns successfully" Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2242 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562303532393062326366623630313032383931363438356335383930 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2242 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562303532393062326366623630313032383931363438356335383930 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit: BPF prog-id=82 op=LOAD Aug 13 00:02:25.166000 audit[2384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2242 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562303532393062326366623630313032383931363438356335383930 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit: BPF prog-id=83 op=LOAD Aug 13 00:02:25.166000 audit[2384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2242 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562303532393062326366623630313032383931363438356335383930 Aug 13 00:02:25.166000 audit: BPF prog-id=83 op=UNLOAD Aug 13 00:02:25.166000 audit: BPF prog-id=82 op=UNLOAD Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { perfmon } for pid=2384 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit[2384]: AVC avc: denied { bpf } for pid=2384 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:25.166000 audit: BPF prog-id=84 op=LOAD Aug 13 00:02:25.166000 audit[2384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2242 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:25.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562303532393062326366623630313032383931363438356335383930 Aug 13 00:02:25.236174 env[1658]: time="2025-08-13T00:02:25.236039868Z" level=info msg="StartContainer for \"5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62\" returns successfully" Aug 13 00:02:26.639786 kubelet[2197]: I0813 00:02:26.639740 2197 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-18-163" Aug 13 00:02:28.929184 update_engine[1648]: I0813 00:02:28.928342 1648 update_attempter.cc:509] Updating boot flags... Aug 13 00:02:28.992000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:28.992000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4006a47320 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:02:28.992000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:02:28.993000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:28.993000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4004a83b60 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:02:28.993000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:02:28.997000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7347 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:28.997000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=4003e856b0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:02:28.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:02:28.999000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:28.999000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=4003e857d0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:02:28.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:02:29.007000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:29.007000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4002367640 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:02:29.007000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:02:29.014000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:29.014000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4003e85ce0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:02:29.014000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:02:29.391528 kubelet[2197]: I0813 00:02:29.391450 2197 apiserver.go:52] "Watching apiserver" Aug 13 00:02:29.741343 kubelet[2197]: I0813 00:02:29.740491 2197 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Aug 13 00:02:29.917739 kubelet[2197]: E0813 00:02:29.917668 2197 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-18-163\" not found" node="ip-172-31-18-163" Aug 13 00:02:30.073220 kubelet[2197]: I0813 00:02:30.073073 2197 kubelet_node_status.go:75] "Successfully registered node" node="ip-172-31-18-163" Aug 13 00:02:30.073511 kubelet[2197]: E0813 00:02:30.073472 2197 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"ip-172-31-18-163\": node \"ip-172-31-18-163\" not found" Aug 13 00:02:30.606000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:30.610003 kernel: kauditd_printk_skb: 179 callbacks suppressed Aug 13 00:02:30.610162 kernel: audit: type=1400 audit(1755043350.606:479): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:30.606000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007f8300 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:30.638538 kernel: audit: type=1300 audit(1755043350.606:479): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007f8300 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:30.638717 kernel: audit: type=1327 audit(1755043350.606:479): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:30.606000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:30.619000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:30.664287 kernel: audit: type=1400 audit(1755043350.619:480): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:30.619000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400073b080 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:30.682038 kernel: audit: type=1300 audit(1755043350.619:480): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400073b080 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:30.619000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:30.694154 kernel: audit: type=1327 audit(1755043350.619:480): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:32.546989 systemd[1]: Reloading. Aug 13 00:02:32.697558 /usr/lib/systemd/system-generators/torcx-generator[2679]: time="2025-08-13T00:02:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:02:32.697631 /usr/lib/systemd/system-generators/torcx-generator[2679]: time="2025-08-13T00:02:32Z" level=info msg="torcx already run" Aug 13 00:02:32.905949 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:02:32.906320 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:02:32.939000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:32.939000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a5c6e0 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:32.958684 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:02:32.969503 kernel: audit: type=1400 audit(1755043352.939:481): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:32.969657 kernel: audit: type=1300 audit(1755043352.939:481): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a5c6e0 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:32.939000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:32.987837 kernel: audit: type=1327 audit(1755043352.939:481): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:32.952000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:33.001395 kernel: audit: type=1400 audit(1755043352.952:482): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:32.952000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a5c8a0 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:32.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:32.970000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:32.970000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000b410e0 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:32.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:32.972000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:02:32.972000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000b41120 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:32.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:33.076000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Aug 13 00:02:33.076000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400098a100 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:02:33.076000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:02:33.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.182000 audit: BPF prog-id=85 op=LOAD Aug 13 00:02:33.183000 audit: BPF prog-id=46 op=UNLOAD Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.185000 audit: BPF prog-id=86 op=LOAD Aug 13 00:02:33.185000 audit: BPF prog-id=73 op=UNLOAD Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.191000 audit: BPF prog-id=87 op=LOAD Aug 13 00:02:33.191000 audit: BPF prog-id=47 op=UNLOAD Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit: BPF prog-id=88 op=LOAD Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.194000 audit: BPF prog-id=89 op=LOAD Aug 13 00:02:33.194000 audit: BPF prog-id=48 op=UNLOAD Aug 13 00:02:33.194000 audit: BPF prog-id=49 op=UNLOAD Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.198000 audit: BPF prog-id=90 op=LOAD Aug 13 00:02:33.199000 audit: BPF prog-id=50 op=UNLOAD Aug 13 00:02:33.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit: BPF prog-id=91 op=LOAD Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.202000 audit: BPF prog-id=92 op=LOAD Aug 13 00:02:33.202000 audit: BPF prog-id=51 op=UNLOAD Aug 13 00:02:33.202000 audit: BPF prog-id=52 op=UNLOAD Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit: BPF prog-id=93 op=LOAD Aug 13 00:02:33.205000 audit: BPF prog-id=53 op=UNLOAD Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit: BPF prog-id=94 op=LOAD Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.205000 audit: BPF prog-id=95 op=LOAD Aug 13 00:02:33.205000 audit: BPF prog-id=54 op=UNLOAD Aug 13 00:02:33.205000 audit: BPF prog-id=55 op=UNLOAD Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.207000 audit: BPF prog-id=96 op=LOAD Aug 13 00:02:33.207000 audit: BPF prog-id=56 op=UNLOAD Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.210000 audit: BPF prog-id=97 op=LOAD Aug 13 00:02:33.210000 audit: BPF prog-id=81 op=UNLOAD Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit: BPF prog-id=98 op=LOAD Aug 13 00:02:33.212000 audit: BPF prog-id=57 op=UNLOAD Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit: BPF prog-id=99 op=LOAD Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.213000 audit: BPF prog-id=100 op=LOAD Aug 13 00:02:33.213000 audit: BPF prog-id=58 op=UNLOAD Aug 13 00:02:33.213000 audit: BPF prog-id=59 op=UNLOAD Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.217000 audit: BPF prog-id=101 op=LOAD Aug 13 00:02:33.217000 audit: BPF prog-id=61 op=UNLOAD Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.222000 audit: BPF prog-id=102 op=LOAD Aug 13 00:02:33.222000 audit: BPF prog-id=60 op=UNLOAD Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.225000 audit: BPF prog-id=103 op=LOAD Aug 13 00:02:33.225000 audit: BPF prog-id=65 op=UNLOAD Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.230000 audit: BPF prog-id=104 op=LOAD Aug 13 00:02:33.230000 audit: BPF prog-id=77 op=UNLOAD Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.231000 audit: BPF prog-id=105 op=LOAD Aug 13 00:02:33.231000 audit: BPF prog-id=69 op=UNLOAD Aug 13 00:02:33.283898 systemd[1]: Stopping kubelet.service... Aug 13 00:02:33.312993 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 00:02:33.313468 systemd[1]: Stopped kubelet.service. Aug 13 00:02:33.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:33.313581 systemd[1]: kubelet.service: Consumed 2.689s CPU time. Aug 13 00:02:33.319216 systemd[1]: Starting kubelet.service... Aug 13 00:02:33.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:33.685727 systemd[1]: Started kubelet.service. Aug 13 00:02:33.803779 kubelet[2737]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:33.803779 kubelet[2737]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Aug 13 00:02:33.803779 kubelet[2737]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:02:33.804487 kubelet[2737]: I0813 00:02:33.803975 2737 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 00:02:33.826315 kubelet[2737]: I0813 00:02:33.826234 2737 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Aug 13 00:02:33.833094 kubelet[2737]: I0813 00:02:33.830737 2737 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 00:02:33.833094 kubelet[2737]: I0813 00:02:33.832078 2737 server.go:934] "Client rotation is on, will bootstrap in background" Aug 13 00:02:33.842563 kubelet[2737]: I0813 00:02:33.842518 2737 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Aug 13 00:02:33.852505 kubelet[2737]: I0813 00:02:33.852450 2737 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 00:02:33.861360 kubelet[2737]: E0813 00:02:33.861147 2737 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 00:02:33.861598 kubelet[2737]: I0813 00:02:33.861366 2737 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 00:02:33.871535 kubelet[2737]: I0813 00:02:33.871491 2737 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 00:02:33.872027 kubelet[2737]: I0813 00:02:33.872002 2737 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Aug 13 00:02:33.872526 kubelet[2737]: I0813 00:02:33.872476 2737 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 00:02:33.872992 kubelet[2737]: I0813 00:02:33.872660 2737 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-18-163","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 00:02:33.873218 kubelet[2737]: I0813 00:02:33.873194 2737 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 00:02:33.873371 kubelet[2737]: I0813 00:02:33.873350 2737 container_manager_linux.go:300] "Creating device plugin manager" Aug 13 00:02:33.873594 kubelet[2737]: I0813 00:02:33.873526 2737 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:33.873962 kubelet[2737]: I0813 00:02:33.873938 2737 kubelet.go:408] "Attempting to sync node with API server" Aug 13 00:02:33.875439 kubelet[2737]: I0813 00:02:33.875389 2737 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 00:02:33.875609 kubelet[2737]: I0813 00:02:33.875450 2737 kubelet.go:314] "Adding apiserver pod source" Aug 13 00:02:33.875609 kubelet[2737]: I0813 00:02:33.875486 2737 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 00:02:33.883670 kubelet[2737]: I0813 00:02:33.883623 2737 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 00:02:33.884806 kubelet[2737]: I0813 00:02:33.884769 2737 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Aug 13 00:02:33.885802 kubelet[2737]: I0813 00:02:33.885757 2737 server.go:1274] "Started kubelet" Aug 13 00:02:33.890000 audit[2737]: AVC avc: denied { mac_admin } for pid=2737 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.890000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:33.890000 audit[2737]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008f18c0 a1=4000593098 a2=40008f1890 a3=25 items=0 ppid=1 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:33.890000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:33.892774 kubelet[2737]: I0813 00:02:33.892726 2737 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 00:02:33.892980 kubelet[2737]: I0813 00:02:33.892950 2737 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Aug 13 00:02:33.893124 kubelet[2737]: I0813 00:02:33.893100 2737 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 00:02:33.891000 audit[2737]: AVC avc: denied { mac_admin } for pid=2737 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:33.891000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:33.891000 audit[2737]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000921aa0 a1=40005930b0 a2=40008f1950 a3=25 items=0 ppid=1 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:33.891000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:33.903673 kubelet[2737]: I0813 00:02:33.903616 2737 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 00:02:33.905605 kubelet[2737]: I0813 00:02:33.905539 2737 server.go:449] "Adding debug handlers to kubelet server" Aug 13 00:02:33.909127 kubelet[2737]: I0813 00:02:33.909004 2737 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 00:02:33.909913 kubelet[2737]: I0813 00:02:33.909859 2737 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 00:02:33.933262 kubelet[2737]: I0813 00:02:33.910463 2737 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 00:02:33.947637 kubelet[2737]: I0813 00:02:33.914520 2737 volume_manager.go:289] "Starting Kubelet Volume Manager" Aug 13 00:02:33.950041 kubelet[2737]: I0813 00:02:33.914544 2737 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Aug 13 00:02:33.978502 kubelet[2737]: E0813 00:02:33.915388 2737 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ip-172-31-18-163\" not found" Aug 13 00:02:33.978698 kubelet[2737]: I0813 00:02:33.950676 2737 reconciler.go:26] "Reconciler: start to sync state" Aug 13 00:02:33.978807 kubelet[2737]: I0813 00:02:33.953405 2737 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 00:02:33.999534 kubelet[2737]: I0813 00:02:33.999474 2737 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Aug 13 00:02:34.008379 kubelet[2737]: I0813 00:02:34.008332 2737 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Aug 13 00:02:34.008576 kubelet[2737]: I0813 00:02:34.008554 2737 status_manager.go:217] "Starting to sync pod status with apiserver" Aug 13 00:02:34.008714 kubelet[2737]: I0813 00:02:34.008692 2737 kubelet.go:2321] "Starting kubelet main sync loop" Aug 13 00:02:34.008896 kubelet[2737]: E0813 00:02:34.008863 2737 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 00:02:34.051149 kubelet[2737]: I0813 00:02:34.051106 2737 factory.go:221] Registration of the containerd container factory successfully Aug 13 00:02:34.051588 kubelet[2737]: I0813 00:02:34.051548 2737 factory.go:221] Registration of the systemd container factory successfully Aug 13 00:02:34.109566 kubelet[2737]: E0813 00:02:34.109514 2737 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Aug 13 00:02:34.207552 kubelet[2737]: I0813 00:02:34.207421 2737 cpu_manager.go:214] "Starting CPU manager" policy="none" Aug 13 00:02:34.208126 kubelet[2737]: I0813 00:02:34.207762 2737 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Aug 13 00:02:34.208515 kubelet[2737]: I0813 00:02:34.208476 2737 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:02:34.209130 kubelet[2737]: I0813 00:02:34.209090 2737 state_mem.go:88] "Updated default CPUSet" cpuSet="" Aug 13 00:02:34.209481 kubelet[2737]: I0813 00:02:34.209390 2737 state_mem.go:96] "Updated CPUSet assignments" assignments={} Aug 13 00:02:34.209712 kubelet[2737]: I0813 00:02:34.209685 2737 policy_none.go:49] "None policy: Start" Aug 13 00:02:34.212583 kubelet[2737]: I0813 00:02:34.212518 2737 memory_manager.go:170] "Starting memorymanager" policy="None" Aug 13 00:02:34.212583 kubelet[2737]: I0813 00:02:34.212578 2737 state_mem.go:35] "Initializing new in-memory state store" Aug 13 00:02:34.214595 kubelet[2737]: I0813 00:02:34.214548 2737 state_mem.go:75] "Updated machine memory state" Aug 13 00:02:34.224000 audit[2737]: AVC avc: denied { mac_admin } for pid=2737 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:34.224000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:02:34.224000 audit[2737]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40010814d0 a1=400105aff0 a2=40010814a0 a3=25 items=0 ppid=1 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:34.224000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:02:34.226365 kubelet[2737]: I0813 00:02:34.225394 2737 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Aug 13 00:02:34.226365 kubelet[2737]: I0813 00:02:34.225588 2737 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Aug 13 00:02:34.226365 kubelet[2737]: I0813 00:02:34.225939 2737 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 00:02:34.226365 kubelet[2737]: I0813 00:02:34.225969 2737 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 00:02:34.230500 kubelet[2737]: I0813 00:02:34.226808 2737 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 00:02:34.340247 amazon-ssm-agent[1652]: 2025-08-13 00:02:34 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Aug 13 00:02:34.357836 kubelet[2737]: I0813 00:02:34.357730 2737 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-18-163" Aug 13 00:02:34.380790 kubelet[2737]: I0813 00:02:34.380725 2737 kubelet_node_status.go:111] "Node was previously registered" node="ip-172-31-18-163" Aug 13 00:02:34.381215 kubelet[2737]: I0813 00:02:34.381161 2737 kubelet_node_status.go:75] "Successfully registered node" node="ip-172-31-18-163" Aug 13 00:02:34.396033 kubelet[2737]: I0813 00:02:34.395987 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/64ae758db4d50867fec16ac5755f6204-ca-certs\") pod \"kube-apiserver-ip-172-31-18-163\" (UID: \"64ae758db4d50867fec16ac5755f6204\") " pod="kube-system/kube-apiserver-ip-172-31-18-163" Aug 13 00:02:34.396438 kubelet[2737]: I0813 00:02:34.396406 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/64ae758db4d50867fec16ac5755f6204-k8s-certs\") pod \"kube-apiserver-ip-172-31-18-163\" (UID: \"64ae758db4d50867fec16ac5755f6204\") " pod="kube-system/kube-apiserver-ip-172-31-18-163" Aug 13 00:02:34.396608 kubelet[2737]: I0813 00:02:34.396581 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/64ae758db4d50867fec16ac5755f6204-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-18-163\" (UID: \"64ae758db4d50867fec16ac5755f6204\") " pod="kube-system/kube-apiserver-ip-172-31-18-163" Aug 13 00:02:34.396767 kubelet[2737]: I0813 00:02:34.396741 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-k8s-certs\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:34.396947 kubelet[2737]: I0813 00:02:34.396915 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:34.397098 kubelet[2737]: I0813 00:02:34.397072 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4a678f701837549c0d2df0d4f7276d64-kubeconfig\") pod \"kube-scheduler-ip-172-31-18-163\" (UID: \"4a678f701837549c0d2df0d4f7276d64\") " pod="kube-system/kube-scheduler-ip-172-31-18-163" Aug 13 00:02:34.397237 kubelet[2737]: I0813 00:02:34.397212 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-ca-certs\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:34.397398 kubelet[2737]: I0813 00:02:34.397373 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:34.397539 kubelet[2737]: I0813 00:02:34.397514 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f07df222220d003a9c4d3cfd397f6f6b-kubeconfig\") pod \"kube-controller-manager-ip-172-31-18-163\" (UID: \"f07df222220d003a9c4d3cfd397f6f6b\") " pod="kube-system/kube-controller-manager-ip-172-31-18-163" Aug 13 00:02:34.896945 kubelet[2737]: I0813 00:02:34.896895 2737 apiserver.go:52] "Watching apiserver" Aug 13 00:02:34.973815 kubelet[2737]: I0813 00:02:34.973752 2737 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Aug 13 00:02:35.107535 kubelet[2737]: I0813 00:02:35.106949 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-18-163" podStartSLOduration=1.106925327 podStartE2EDuration="1.106925327s" podCreationTimestamp="2025-08-13 00:02:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:35.074573376 +0000 UTC m=+1.374981840" watchObservedRunningTime="2025-08-13 00:02:35.106925327 +0000 UTC m=+1.407333803" Aug 13 00:02:35.135416 kubelet[2737]: I0813 00:02:35.135304 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-18-163" podStartSLOduration=1.135280372 podStartE2EDuration="1.135280372s" podCreationTimestamp="2025-08-13 00:02:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:35.133804778 +0000 UTC m=+1.434213278" watchObservedRunningTime="2025-08-13 00:02:35.135280372 +0000 UTC m=+1.435688860" Aug 13 00:02:35.135685 kubelet[2737]: I0813 00:02:35.135539 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-18-163" podStartSLOduration=1.13552726 podStartE2EDuration="1.13552726s" podCreationTimestamp="2025-08-13 00:02:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:35.111419441 +0000 UTC m=+1.411827941" watchObservedRunningTime="2025-08-13 00:02:35.13552726 +0000 UTC m=+1.435935724" Aug 13 00:02:37.537412 kubelet[2737]: I0813 00:02:37.537169 2737 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Aug 13 00:02:37.538589 env[1658]: time="2025-08-13T00:02:37.538508523Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Aug 13 00:02:37.540027 kubelet[2737]: I0813 00:02:37.539670 2737 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Aug 13 00:02:38.195593 systemd[1]: Created slice kubepods-besteffort-pode4e20f69_ea64_49bb_b45d_7f9d10bccf38.slice. Aug 13 00:02:38.221709 kubelet[2737]: I0813 00:02:38.221649 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e4e20f69-ea64-49bb-b45d-7f9d10bccf38-xtables-lock\") pod \"kube-proxy-tfkgd\" (UID: \"e4e20f69-ea64-49bb-b45d-7f9d10bccf38\") " pod="kube-system/kube-proxy-tfkgd" Aug 13 00:02:38.222036 kubelet[2737]: I0813 00:02:38.221992 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/e4e20f69-ea64-49bb-b45d-7f9d10bccf38-kube-proxy\") pod \"kube-proxy-tfkgd\" (UID: \"e4e20f69-ea64-49bb-b45d-7f9d10bccf38\") " pod="kube-system/kube-proxy-tfkgd" Aug 13 00:02:38.222300 kubelet[2737]: I0813 00:02:38.222233 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e4e20f69-ea64-49bb-b45d-7f9d10bccf38-lib-modules\") pod \"kube-proxy-tfkgd\" (UID: \"e4e20f69-ea64-49bb-b45d-7f9d10bccf38\") " pod="kube-system/kube-proxy-tfkgd" Aug 13 00:02:38.222550 kubelet[2737]: I0813 00:02:38.222505 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7cnb2\" (UniqueName: \"kubernetes.io/projected/e4e20f69-ea64-49bb-b45d-7f9d10bccf38-kube-api-access-7cnb2\") pod \"kube-proxy-tfkgd\" (UID: \"e4e20f69-ea64-49bb-b45d-7f9d10bccf38\") " pod="kube-system/kube-proxy-tfkgd" Aug 13 00:02:38.336363 kubelet[2737]: E0813 00:02:38.336299 2737 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Aug 13 00:02:38.336363 kubelet[2737]: E0813 00:02:38.336357 2737 projected.go:194] Error preparing data for projected volume kube-api-access-7cnb2 for pod kube-system/kube-proxy-tfkgd: configmap "kube-root-ca.crt" not found Aug 13 00:02:38.336665 kubelet[2737]: E0813 00:02:38.336471 2737 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/e4e20f69-ea64-49bb-b45d-7f9d10bccf38-kube-api-access-7cnb2 podName:e4e20f69-ea64-49bb-b45d-7f9d10bccf38 nodeName:}" failed. No retries permitted until 2025-08-13 00:02:38.836435868 +0000 UTC m=+5.136844320 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-7cnb2" (UniqueName: "kubernetes.io/projected/e4e20f69-ea64-49bb-b45d-7f9d10bccf38-kube-api-access-7cnb2") pod "kube-proxy-tfkgd" (UID: "e4e20f69-ea64-49bb-b45d-7f9d10bccf38") : configmap "kube-root-ca.crt" not found Aug 13 00:02:38.637947 systemd[1]: Created slice kubepods-besteffort-podb6a60ac4_f56d_47f1_afec_d80285eec45d.slice. Aug 13 00:02:38.726486 kubelet[2737]: I0813 00:02:38.726416 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b6a60ac4-f56d-47f1-afec-d80285eec45d-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-bpwfb\" (UID: \"b6a60ac4-f56d-47f1-afec-d80285eec45d\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-bpwfb" Aug 13 00:02:38.727112 kubelet[2737]: I0813 00:02:38.726530 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8xmnf\" (UniqueName: \"kubernetes.io/projected/b6a60ac4-f56d-47f1-afec-d80285eec45d-kube-api-access-8xmnf\") pod \"tigera-operator-5bf8dfcb4-bpwfb\" (UID: \"b6a60ac4-f56d-47f1-afec-d80285eec45d\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-bpwfb" Aug 13 00:02:38.839191 kubelet[2737]: I0813 00:02:38.839122 2737 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Aug 13 00:02:38.945338 env[1658]: time="2025-08-13T00:02:38.945131315Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-bpwfb,Uid:b6a60ac4-f56d-47f1-afec-d80285eec45d,Namespace:tigera-operator,Attempt:0,}" Aug 13 00:02:38.988456 env[1658]: time="2025-08-13T00:02:38.988194878Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:38.988691 env[1658]: time="2025-08-13T00:02:38.988399598Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:38.988691 env[1658]: time="2025-08-13T00:02:38.988452518Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:38.989115 env[1658]: time="2025-08-13T00:02:38.989041503Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d pid=2789 runtime=io.containerd.runc.v2 Aug 13 00:02:39.051061 systemd[1]: Started cri-containerd-9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d.scope. Aug 13 00:02:39.098316 kernel: kauditd_printk_skb: 269 callbacks suppressed Aug 13 00:02:39.098468 kernel: audit: type=1400 audit(1755043359.092:735): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.112192 kernel: audit: type=1400 audit(1755043359.092:736): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.112333 kernel: audit: type=1400 audit(1755043359.092:737): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.113554 env[1658]: time="2025-08-13T00:02:39.113497675Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-tfkgd,Uid:e4e20f69-ea64-49bb-b45d-7f9d10bccf38,Namespace:kube-system,Attempt:0,}" Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.134205 kernel: audit: type=1400 audit(1755043359.092:738): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.134534 kernel: audit: type=1400 audit(1755043359.092:739): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.152620 kernel: audit: type=1400 audit(1755043359.092:740): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.152754 kernel: audit: type=1400 audit(1755043359.092:741): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.172384 kernel: audit: type=1400 audit(1755043359.092:742): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.186025 kernel: audit: type=1400 audit(1755043359.092:743): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.186165 kernel: audit: type=1400 audit(1755043359.092:744): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.092000 audit: BPF prog-id=106 op=LOAD Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014fb38 a2=10 a3=0 items=0 ppid=2789 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333932386564653863363638653465333437373638333561336461 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014f5a0 a2=3c a3=0 items=0 ppid=2789 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333932386564653863363638653465333437373638333561336461 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.102000 audit: BPF prog-id=107 op=LOAD Aug 13 00:02:39.102000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014f8e0 a2=78 a3=0 items=0 ppid=2789 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333932386564653863363638653465333437373638333561336461 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.111000 audit: BPF prog-id=108 op=LOAD Aug 13 00:02:39.111000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014f670 a2=78 a3=0 items=0 ppid=2789 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333932386564653863363638653465333437373638333561336461 Aug 13 00:02:39.119000 audit: BPF prog-id=108 op=UNLOAD Aug 13 00:02:39.119000 audit: BPF prog-id=107 op=UNLOAD Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.120000 audit: BPF prog-id=109 op=LOAD Aug 13 00:02:39.120000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014fb40 a2=78 a3=0 items=0 ppid=2789 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333932386564653863363638653465333437373638333561336461 Aug 13 00:02:39.212150 env[1658]: time="2025-08-13T00:02:39.212029678Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:02:39.212462 env[1658]: time="2025-08-13T00:02:39.212396302Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:02:39.212765 env[1658]: time="2025-08-13T00:02:39.212676610Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:02:39.213662 env[1658]: time="2025-08-13T00:02:39.213576839Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f935f81440fd0c494ffc9e44a9a24653eeaa3c7c15840f583d46d076fb27dd33 pid=2825 runtime=io.containerd.runc.v2 Aug 13 00:02:39.222423 env[1658]: time="2025-08-13T00:02:39.222258861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-bpwfb,Uid:b6a60ac4-f56d-47f1-afec-d80285eec45d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d\"" Aug 13 00:02:39.227341 env[1658]: time="2025-08-13T00:02:39.227154987Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Aug 13 00:02:39.250625 systemd[1]: Started cri-containerd-f935f81440fd0c494ffc9e44a9a24653eeaa3c7c15840f583d46d076fb27dd33.scope. Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.287000 audit: BPF prog-id=110 op=LOAD Aug 13 00:02:39.288000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.288000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2825 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639333566383134343066643063343934666663396534346139613234 Aug 13 00:02:39.288000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.288000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2825 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639333566383134343066643063343934666663396534346139613234 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit: BPF prog-id=111 op=LOAD Aug 13 00:02:39.289000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2825 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639333566383134343066643063343934666663396534346139613234 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.289000 audit: BPF prog-id=112 op=LOAD Aug 13 00:02:39.289000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2825 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639333566383134343066643063343934666663396534346139613234 Aug 13 00:02:39.289000 audit: BPF prog-id=112 op=UNLOAD Aug 13 00:02:39.289000 audit: BPF prog-id=111 op=UNLOAD Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.290000 audit: BPF prog-id=113 op=LOAD Aug 13 00:02:39.290000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2825 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639333566383134343066643063343934666663396534346139613234 Aug 13 00:02:39.322448 env[1658]: time="2025-08-13T00:02:39.322372777Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-tfkgd,Uid:e4e20f69-ea64-49bb-b45d-7f9d10bccf38,Namespace:kube-system,Attempt:0,} returns sandbox id \"f935f81440fd0c494ffc9e44a9a24653eeaa3c7c15840f583d46d076fb27dd33\"" Aug 13 00:02:39.332921 env[1658]: time="2025-08-13T00:02:39.332793889Z" level=info msg="CreateContainer within sandbox \"f935f81440fd0c494ffc9e44a9a24653eeaa3c7c15840f583d46d076fb27dd33\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Aug 13 00:02:39.365287 env[1658]: time="2025-08-13T00:02:39.365168869Z" level=info msg="CreateContainer within sandbox \"f935f81440fd0c494ffc9e44a9a24653eeaa3c7c15840f583d46d076fb27dd33\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"c97cf9bd11bc5c1fe4c67efb1dc421cdf60175f4175a37df3dab08f85c39e3a4\"" Aug 13 00:02:39.366902 env[1658]: time="2025-08-13T00:02:39.366830223Z" level=info msg="StartContainer for \"c97cf9bd11bc5c1fe4c67efb1dc421cdf60175f4175a37df3dab08f85c39e3a4\"" Aug 13 00:02:39.401226 systemd[1]: Started cri-containerd-c97cf9bd11bc5c1fe4c67efb1dc421cdf60175f4175a37df3dab08f85c39e3a4.scope. Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2825 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339376366396264313162633563316665346336376566623164633432 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit: BPF prog-id=114 op=LOAD Aug 13 00:02:39.459000 audit[2873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2825 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339376366396264313162633563316665346336376566623164633432 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.459000 audit: BPF prog-id=115 op=LOAD Aug 13 00:02:39.459000 audit[2873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2825 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339376366396264313162633563316665346336376566623164633432 Aug 13 00:02:39.460000 audit: BPF prog-id=115 op=UNLOAD Aug 13 00:02:39.460000 audit: BPF prog-id=114 op=UNLOAD Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:39.460000 audit: BPF prog-id=116 op=LOAD Aug 13 00:02:39.460000 audit[2873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2825 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339376366396264313162633563316665346336376566623164633432 Aug 13 00:02:39.503162 env[1658]: time="2025-08-13T00:02:39.503032679Z" level=info msg="StartContainer for \"c97cf9bd11bc5c1fe4c67efb1dc421cdf60175f4175a37df3dab08f85c39e3a4\" returns successfully" Aug 13 00:02:39.768000 audit[2934]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.768000 audit[2934]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe4b72f50 a2=0 a3=1 items=0 ppid=2885 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.768000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 00:02:39.770000 audit[2935]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.770000 audit[2935]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfc9a850 a2=0 a3=1 items=0 ppid=2885 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 00:02:39.772000 audit[2936]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2936 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.772000 audit[2936]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4a602d0 a2=0 a3=1 items=0 ppid=2885 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.772000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 00:02:39.773000 audit[2937]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2937 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:39.773000 audit[2937]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec8b60f0 a2=0 a3=1 items=0 ppid=2885 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 00:02:39.786000 audit[2938]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2938 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:39.786000 audit[2938]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8c3d5f0 a2=0 a3=1 items=0 ppid=2885 pid=2938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.786000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 00:02:39.788000 audit[2939]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2939 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:39.788000 audit[2939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd53c0c90 a2=0 a3=1 items=0 ppid=2885 pid=2939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.788000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 00:02:39.854046 systemd[1]: run-containerd-runc-k8s.io-9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d-runc.mcxXjw.mount: Deactivated successfully. Aug 13 00:02:39.878000 audit[2940]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2940 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.878000 audit[2940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcf0a1f60 a2=0 a3=1 items=0 ppid=2885 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.878000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 00:02:39.885000 audit[2942]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.885000 audit[2942]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd7a95f40 a2=0 a3=1 items=0 ppid=2885 pid=2942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.885000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Aug 13 00:02:39.895000 audit[2945]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.895000 audit[2945]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc1658960 a2=0 a3=1 items=0 ppid=2885 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Aug 13 00:02:39.898000 audit[2946]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.898000 audit[2946]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd71769f0 a2=0 a3=1 items=0 ppid=2885 pid=2946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 00:02:39.904000 audit[2948]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.904000 audit[2948]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc3baffe0 a2=0 a3=1 items=0 ppid=2885 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 00:02:39.907000 audit[2949]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2949 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.907000 audit[2949]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff6a46f0 a2=0 a3=1 items=0 ppid=2885 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 00:02:39.913000 audit[2951]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2951 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.913000 audit[2951]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe0a864d0 a2=0 a3=1 items=0 ppid=2885 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.913000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 00:02:39.923000 audit[2954]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.923000 audit[2954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeca4eaf0 a2=0 a3=1 items=0 ppid=2885 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.923000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Aug 13 00:02:39.926000 audit[2955]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.926000 audit[2955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea7728e0 a2=0 a3=1 items=0 ppid=2885 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.926000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 00:02:39.933000 audit[2957]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.933000 audit[2957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffde8ebac0 a2=0 a3=1 items=0 ppid=2885 pid=2957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.933000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 00:02:39.936000 audit[2958]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2958 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.936000 audit[2958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0618040 a2=0 a3=1 items=0 ppid=2885 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.936000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 00:02:39.944000 audit[2960]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.944000 audit[2960]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe54ce100 a2=0 a3=1 items=0 ppid=2885 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.944000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:02:39.954000 audit[2963]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.954000 audit[2963]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffb106c20 a2=0 a3=1 items=0 ppid=2885 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.954000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:02:39.966000 audit[2966]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2966 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.966000 audit[2966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc26facc0 a2=0 a3=1 items=0 ppid=2885 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.966000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 00:02:39.969000 audit[2967]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.969000 audit[2967]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff919a850 a2=0 a3=1 items=0 ppid=2885 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 00:02:39.976000 audit[2969]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.976000 audit[2969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc92b9a40 a2=0 a3=1 items=0 ppid=2885 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:39.985000 audit[2972]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.985000 audit[2972]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc3fed7b0 a2=0 a3=1 items=0 ppid=2885 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:39.989000 audit[2973]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2973 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.989000 audit[2973]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5528a90 a2=0 a3=1 items=0 ppid=2885 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.989000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 00:02:39.995000 audit[2975]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:02:39.995000 audit[2975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffde7c24d0 a2=0 a3=1 items=0 ppid=2885 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:39.995000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 00:02:40.054000 audit[2981]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:40.054000 audit[2981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffed474c70 a2=0 a3=1 items=0 ppid=2885 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.054000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:40.069000 audit[2981]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:40.069000 audit[2981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffed474c70 a2=0 a3=1 items=0 ppid=2885 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:40.074000 audit[2986]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2986 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.074000 audit[2986]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc0619c20 a2=0 a3=1 items=0 ppid=2885 pid=2986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.074000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 00:02:40.082000 audit[2988]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2988 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.082000 audit[2988]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe8ee6e00 a2=0 a3=1 items=0 ppid=2885 pid=2988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.082000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Aug 13 00:02:40.091000 audit[2991]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2991 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.091000 audit[2991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff41188d0 a2=0 a3=1 items=0 ppid=2885 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.091000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Aug 13 00:02:40.096000 audit[2992]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2992 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.096000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef8a5eb0 a2=0 a3=1 items=0 ppid=2885 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 00:02:40.104000 audit[2994]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2994 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.104000 audit[2994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffde138fd0 a2=0 a3=1 items=0 ppid=2885 pid=2994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.104000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 00:02:40.107000 audit[2995]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2995 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.107000 audit[2995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2983430 a2=0 a3=1 items=0 ppid=2885 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.107000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 00:02:40.114000 audit[2997]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2997 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.114000 audit[2997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffea92a2d0 a2=0 a3=1 items=0 ppid=2885 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.114000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Aug 13 00:02:40.135000 audit[3000]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.135000 audit[3000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff2655ff0 a2=0 a3=1 items=0 ppid=2885 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.135000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 00:02:40.140000 audit[3001]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3001 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.140000 audit[3001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec7a3820 a2=0 a3=1 items=0 ppid=2885 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 00:02:40.150000 audit[3003]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3003 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.150000 audit[3003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd08dd580 a2=0 a3=1 items=0 ppid=2885 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.150000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 00:02:40.158000 audit[3004]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3004 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.158000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec01e5d0 a2=0 a3=1 items=0 ppid=2885 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.158000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 00:02:40.166000 audit[3006]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3006 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.166000 audit[3006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff36a3700 a2=0 a3=1 items=0 ppid=2885 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:02:40.176000 audit[3009]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3009 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.176000 audit[3009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd9d59ef0 a2=0 a3=1 items=0 ppid=2885 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 00:02:40.186000 audit[3012]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3012 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.186000 audit[3012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff788cee0 a2=0 a3=1 items=0 ppid=2885 pid=3012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Aug 13 00:02:40.188000 audit[3013]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3013 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.188000 audit[3013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd99d8040 a2=0 a3=1 items=0 ppid=2885 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 00:02:40.195000 audit[3015]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3015 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.195000 audit[3015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff9e64590 a2=0 a3=1 items=0 ppid=2885 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:40.203000 audit[3018]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.203000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd427ec10 a2=0 a3=1 items=0 ppid=2885 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.203000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:02:40.206000 audit[3019]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3019 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.206000 audit[3019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd25d60f0 a2=0 a3=1 items=0 ppid=2885 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.206000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 00:02:40.212000 audit[3021]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3021 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.212000 audit[3021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe01b2820 a2=0 a3=1 items=0 ppid=2885 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.212000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 00:02:40.217000 audit[3022]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.217000 audit[3022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde347180 a2=0 a3=1 items=0 ppid=2885 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.217000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 00:02:40.224000 audit[3024]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3024 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.224000 audit[3024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff72e7050 a2=0 a3=1 items=0 ppid=2885 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.224000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:40.233000 audit[3027]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3027 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:02:40.233000 audit[3027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc978a7b0 a2=0 a3=1 items=0 ppid=2885 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.233000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:02:40.241000 audit[3029]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3029 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 00:02:40.241000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd98f42a0 a2=0 a3=1 items=0 ppid=2885 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.241000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:40.244000 audit[3029]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3029 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 00:02:40.244000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd98f42a0 a2=0 a3=1 items=0 ppid=2885 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:40.244000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:40.676476 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3061021069.mount: Deactivated successfully. Aug 13 00:02:40.784221 kubelet[2737]: I0813 00:02:40.783831 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-tfkgd" podStartSLOduration=2.783808459 podStartE2EDuration="2.783808459s" podCreationTimestamp="2025-08-13 00:02:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:02:40.153236921 +0000 UTC m=+6.453645421" watchObservedRunningTime="2025-08-13 00:02:40.783808459 +0000 UTC m=+7.084216935" Aug 13 00:02:41.823132 env[1658]: time="2025-08-13T00:02:41.823058312Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:41.829230 env[1658]: time="2025-08-13T00:02:41.829170950Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:41.832790 env[1658]: time="2025-08-13T00:02:41.832705157Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:41.836583 env[1658]: time="2025-08-13T00:02:41.836503077Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:02:41.838210 env[1658]: time="2025-08-13T00:02:41.838135763Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Aug 13 00:02:41.848895 env[1658]: time="2025-08-13T00:02:41.848808069Z" level=info msg="CreateContainer within sandbox \"9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Aug 13 00:02:41.871734 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount124519184.mount: Deactivated successfully. Aug 13 00:02:41.887827 env[1658]: time="2025-08-13T00:02:41.887736348Z" level=info msg="CreateContainer within sandbox \"9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea\"" Aug 13 00:02:41.889116 env[1658]: time="2025-08-13T00:02:41.889064269Z" level=info msg="StartContainer for \"295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea\"" Aug 13 00:02:41.894527 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2338604615.mount: Deactivated successfully. Aug 13 00:02:41.931108 systemd[1]: Started cri-containerd-295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea.scope. Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.977000 audit: BPF prog-id=117 op=LOAD Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2789 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:41.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239356166383131353661633039346161373866363035353166643666 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2789 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:41.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239356166383131353661633039346161373866363035353166643666 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit: BPF prog-id=118 op=LOAD Aug 13 00:02:41.979000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2789 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:41.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239356166383131353661633039346161373866363035353166643666 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.979000 audit: BPF prog-id=119 op=LOAD Aug 13 00:02:41.979000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2789 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:41.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239356166383131353661633039346161373866363035353166643666 Aug 13 00:02:41.979000 audit: BPF prog-id=119 op=UNLOAD Aug 13 00:02:41.979000 audit: BPF prog-id=118 op=UNLOAD Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:02:41.980000 audit: BPF prog-id=120 op=LOAD Aug 13 00:02:41.980000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2789 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:41.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239356166383131353661633039346161373866363035353166643666 Aug 13 00:02:42.019966 env[1658]: time="2025-08-13T00:02:42.019897457Z" level=info msg="StartContainer for \"295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea\" returns successfully" Aug 13 00:02:50.711631 sudo[1933]: pam_unix(sudo:session): session closed for user root Aug 13 00:02:50.725543 kernel: kauditd_printk_skb: 357 callbacks suppressed Aug 13 00:02:50.725741 kernel: audit: type=1106 audit(1755043370.710:846): pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:50.710000 audit[1933]: USER_END pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:50.710000 audit[1933]: CRED_DISP pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:50.740327 kernel: audit: type=1104 audit(1755043370.710:847): pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:02:50.748126 sshd[1930]: pam_unix(sshd:session): session closed for user core Aug 13 00:02:50.749000 audit[1930]: USER_END pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:50.765982 systemd-logind[1647]: Session 7 logged out. Waiting for processes to exit. Aug 13 00:02:50.768020 systemd[1]: sshd@6-172.31.18.163:22-139.178.89.65:37698.service: Deactivated successfully. Aug 13 00:02:50.749000 audit[1930]: CRED_DISP pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:50.769450 kernel: audit: type=1106 audit(1755043370.749:848): pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:50.769519 systemd[1]: session-7.scope: Deactivated successfully. Aug 13 00:02:50.769840 systemd[1]: session-7.scope: Consumed 12.061s CPU time. Aug 13 00:02:50.780297 systemd-logind[1647]: Removed session 7. Aug 13 00:02:50.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.18.163:22-139.178.89.65:37698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:50.790484 kernel: audit: type=1104 audit(1755043370.749:849): pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:02:50.790648 kernel: audit: type=1131 audit(1755043370.767:850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.18.163:22-139.178.89.65:37698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:53.585000 audit[3108]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:53.585000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.608194 kernel: audit: type=1325 audit(1755043373.585:851): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:53.608347 kernel: audit: type=1300 audit(1755043373.585:851): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.585000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:53.623298 kernel: audit: type=1327 audit(1755043373.585:851): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:53.609000 audit[3108]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:53.633601 kernel: audit: type=1325 audit(1755043373.609:852): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:53.609000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.648718 kernel: audit: type=1300 audit(1755043373.609:852): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.609000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:53.912000 audit[3110]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3110 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:53.912000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdba15950 a2=0 a3=1 items=0 ppid=2885 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.912000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:02:53.972000 audit[3110]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3110 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:02:53.972000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdba15950 a2=0 a3=1 items=0 ppid=2885 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:02:53.972000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:00.934839 kernel: kauditd_printk_skb: 7 callbacks suppressed Aug 13 00:03:00.935026 kernel: audit: type=1325 audit(1755043380.925:855): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:00.925000 audit[3117]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:00.925000 audit[3117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:00.949683 kernel: audit: type=1300 audit(1755043380.925:855): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:00.925000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:00.961829 kernel: audit: type=1327 audit(1755043380.925:855): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:00.962000 audit[3117]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:00.972317 kernel: audit: type=1325 audit(1755043380.962:856): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:00.962000 audit[3117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:00.993436 kernel: audit: type=1300 audit(1755043380.962:856): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:00.962000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:01.004343 kernel: audit: type=1327 audit(1755043380.962:856): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:01.028000 audit[3119]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:01.037321 kernel: audit: type=1325 audit(1755043381.028:857): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:01.037481 kernel: audit: type=1300 audit(1755043381.028:857): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd365e7e0 a2=0 a3=1 items=0 ppid=2885 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.028000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd365e7e0 a2=0 a3=1 items=0 ppid=2885 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.028000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:01.058303 kernel: audit: type=1327 audit(1755043381.028:857): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:01.061000 audit[3119]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:01.070323 kernel: audit: type=1325 audit(1755043381.061:858): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:01.061000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd365e7e0 a2=0 a3=1 items=0 ppid=2885 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.061000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:01.270638 kubelet[2737]: I0813 00:03:01.270511 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-bpwfb" podStartSLOduration=20.654348072 podStartE2EDuration="23.270488806s" podCreationTimestamp="2025-08-13 00:02:38 +0000 UTC" firstStartedPulling="2025-08-13 00:02:39.226161241 +0000 UTC m=+5.526569717" lastFinishedPulling="2025-08-13 00:02:41.842301987 +0000 UTC m=+8.142710451" observedRunningTime="2025-08-13 00:02:42.163979298 +0000 UTC m=+8.464387774" watchObservedRunningTime="2025-08-13 00:03:01.270488806 +0000 UTC m=+27.570897318" Aug 13 00:03:01.283511 systemd[1]: Created slice kubepods-besteffort-pod778c37e2_4184_48b2_8b4a_14d6ddc7be98.slice. Aug 13 00:03:01.383813 kubelet[2737]: I0813 00:03:01.383724 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/778c37e2-4184-48b2-8b4a-14d6ddc7be98-typha-certs\") pod \"calico-typha-74646bb547-wtjck\" (UID: \"778c37e2-4184-48b2-8b4a-14d6ddc7be98\") " pod="calico-system/calico-typha-74646bb547-wtjck" Aug 13 00:03:01.383999 kubelet[2737]: I0813 00:03:01.383844 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r7w6c\" (UniqueName: \"kubernetes.io/projected/778c37e2-4184-48b2-8b4a-14d6ddc7be98-kube-api-access-r7w6c\") pod \"calico-typha-74646bb547-wtjck\" (UID: \"778c37e2-4184-48b2-8b4a-14d6ddc7be98\") " pod="calico-system/calico-typha-74646bb547-wtjck" Aug 13 00:03:01.383999 kubelet[2737]: I0813 00:03:01.383891 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/778c37e2-4184-48b2-8b4a-14d6ddc7be98-tigera-ca-bundle\") pod \"calico-typha-74646bb547-wtjck\" (UID: \"778c37e2-4184-48b2-8b4a-14d6ddc7be98\") " pod="calico-system/calico-typha-74646bb547-wtjck" Aug 13 00:03:01.521854 systemd[1]: Created slice kubepods-besteffort-podd2c8d899_9b95_41f5_8a20_031e8b4b5d3b.slice. Aug 13 00:03:01.585543 kubelet[2737]: I0813 00:03:01.585468 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-flexvol-driver-host\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.585704 kubelet[2737]: I0813 00:03:01.585578 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-cni-bin-dir\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.585704 kubelet[2737]: I0813 00:03:01.585618 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-policysync\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.585704 kubelet[2737]: I0813 00:03:01.585687 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-lib-modules\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.585896 kubelet[2737]: I0813 00:03:01.585753 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-var-run-calico\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.585896 kubelet[2737]: I0813 00:03:01.585799 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-xtables-lock\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.585896 kubelet[2737]: I0813 00:03:01.585873 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-cni-log-dir\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.586076 kubelet[2737]: I0813 00:03:01.585941 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-tigera-ca-bundle\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.586076 kubelet[2737]: I0813 00:03:01.586006 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fk9vv\" (UniqueName: \"kubernetes.io/projected/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-kube-api-access-fk9vv\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.586076 kubelet[2737]: I0813 00:03:01.586051 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-cni-net-dir\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.586259 kubelet[2737]: I0813 00:03:01.586112 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-node-certs\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.586259 kubelet[2737]: I0813 00:03:01.586154 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d2c8d899-9b95-41f5-8a20-031e8b4b5d3b-var-lib-calico\") pod \"calico-node-sxpxf\" (UID: \"d2c8d899-9b95-41f5-8a20-031e8b4b5d3b\") " pod="calico-system/calico-node-sxpxf" Aug 13 00:03:01.593173 env[1658]: time="2025-08-13T00:03:01.592593854Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74646bb547-wtjck,Uid:778c37e2-4184-48b2-8b4a-14d6ddc7be98,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:01.634849 env[1658]: time="2025-08-13T00:03:01.634425542Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:01.634849 env[1658]: time="2025-08-13T00:03:01.634499138Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:01.634849 env[1658]: time="2025-08-13T00:03:01.634524482Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:01.635430 env[1658]: time="2025-08-13T00:03:01.635245970Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/751c9ac40160888ff3b45b9e9992e2f2d13fa1776b6c55cd72cb70f218b1e2d8 pid=3129 runtime=io.containerd.runc.v2 Aug 13 00:03:01.659885 kubelet[2737]: E0813 00:03:01.659803 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qhqx2" podUID="155419cf-dcf3-4f89-bb80-fbed7e0cf848" Aug 13 00:03:01.677839 systemd[1]: Started cri-containerd-751c9ac40160888ff3b45b9e9992e2f2d13fa1776b6c55cd72cb70f218b1e2d8.scope. Aug 13 00:03:01.693763 kubelet[2737]: I0813 00:03:01.693700 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2mvxd\" (UniqueName: \"kubernetes.io/projected/155419cf-dcf3-4f89-bb80-fbed7e0cf848-kube-api-access-2mvxd\") pod \"csi-node-driver-qhqx2\" (UID: \"155419cf-dcf3-4f89-bb80-fbed7e0cf848\") " pod="calico-system/csi-node-driver-qhqx2" Aug 13 00:03:01.694256 kubelet[2737]: I0813 00:03:01.694208 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/155419cf-dcf3-4f89-bb80-fbed7e0cf848-socket-dir\") pod \"csi-node-driver-qhqx2\" (UID: \"155419cf-dcf3-4f89-bb80-fbed7e0cf848\") " pod="calico-system/csi-node-driver-qhqx2" Aug 13 00:03:01.698552 kubelet[2737]: I0813 00:03:01.695197 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/155419cf-dcf3-4f89-bb80-fbed7e0cf848-kubelet-dir\") pod \"csi-node-driver-qhqx2\" (UID: \"155419cf-dcf3-4f89-bb80-fbed7e0cf848\") " pod="calico-system/csi-node-driver-qhqx2" Aug 13 00:03:01.698552 kubelet[2737]: I0813 00:03:01.697993 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/155419cf-dcf3-4f89-bb80-fbed7e0cf848-registration-dir\") pod \"csi-node-driver-qhqx2\" (UID: \"155419cf-dcf3-4f89-bb80-fbed7e0cf848\") " pod="calico-system/csi-node-driver-qhqx2" Aug 13 00:03:01.698552 kubelet[2737]: I0813 00:03:01.698162 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/155419cf-dcf3-4f89-bb80-fbed7e0cf848-varrun\") pod \"csi-node-driver-qhqx2\" (UID: \"155419cf-dcf3-4f89-bb80-fbed7e0cf848\") " pod="calico-system/csi-node-driver-qhqx2" Aug 13 00:03:01.707969 kubelet[2737]: E0813 00:03:01.707909 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.708151 kubelet[2737]: W0813 00:03:01.707955 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.708218 kubelet[2737]: E0813 00:03:01.708177 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.716671 kubelet[2737]: E0813 00:03:01.716632 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.716896 kubelet[2737]: W0813 00:03:01.716866 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.717039 kubelet[2737]: E0813 00:03:01.717012 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.749071 kubelet[2737]: E0813 00:03:01.749003 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.749071 kubelet[2737]: W0813 00:03:01.749045 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.749071 kubelet[2737]: E0813 00:03:01.749081 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.799534 kubelet[2737]: E0813 00:03:01.799364 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.799534 kubelet[2737]: W0813 00:03:01.799426 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.799534 kubelet[2737]: E0813 00:03:01.799461 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.802412 kubelet[2737]: E0813 00:03:01.802364 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.802412 kubelet[2737]: W0813 00:03:01.802401 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.802635 kubelet[2737]: E0813 00:03:01.802443 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.802966 kubelet[2737]: E0813 00:03:01.802917 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.802966 kubelet[2737]: W0813 00:03:01.802956 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.803550 kubelet[2737]: E0813 00:03:01.803184 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.804558 kubelet[2737]: E0813 00:03:01.804510 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.804558 kubelet[2737]: W0813 00:03:01.804551 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.804814 kubelet[2737]: E0813 00:03:01.804767 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.805064 kubelet[2737]: E0813 00:03:01.805028 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.805064 kubelet[2737]: W0813 00:03:01.805057 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.805253 kubelet[2737]: E0813 00:03:01.805215 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.805535 kubelet[2737]: E0813 00:03:01.805497 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.805535 kubelet[2737]: W0813 00:03:01.805526 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.805785 kubelet[2737]: E0813 00:03:01.805698 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.805871 kubelet[2737]: E0813 00:03:01.805844 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.805871 kubelet[2737]: W0813 00:03:01.805861 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.806017 kubelet[2737]: E0813 00:03:01.805983 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.806217 kubelet[2737]: E0813 00:03:01.806183 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.806217 kubelet[2737]: W0813 00:03:01.806211 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.806382 kubelet[2737]: E0813 00:03:01.806368 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.806616 kubelet[2737]: E0813 00:03:01.806580 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.806616 kubelet[2737]: W0813 00:03:01.806608 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.806772 kubelet[2737]: E0813 00:03:01.806639 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.807624 kubelet[2737]: E0813 00:03:01.806978 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.807624 kubelet[2737]: W0813 00:03:01.807009 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.807624 kubelet[2737]: E0813 00:03:01.807145 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.807624 kubelet[2737]: E0813 00:03:01.807397 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.807624 kubelet[2737]: W0813 00:03:01.807430 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.807624 kubelet[2737]: E0813 00:03:01.807564 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.808056 kubelet[2737]: E0813 00:03:01.807862 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.808056 kubelet[2737]: W0813 00:03:01.807881 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.808224 kubelet[2737]: E0813 00:03:01.808187 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.808224 kubelet[2737]: W0813 00:03:01.808214 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.808462 kubelet[2737]: E0813 00:03:01.808192 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.808462 kubelet[2737]: E0813 00:03:01.808432 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.808614 kubelet[2737]: E0813 00:03:01.808558 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.808614 kubelet[2737]: W0813 00:03:01.808576 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.808908 kubelet[2737]: E0813 00:03:01.808749 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.809877 kubelet[2737]: E0813 00:03:01.809010 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.809877 kubelet[2737]: W0813 00:03:01.809041 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.809877 kubelet[2737]: E0813 00:03:01.809426 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.809877 kubelet[2737]: W0813 00:03:01.809445 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.809877 kubelet[2737]: E0813 00:03:01.809614 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.809877 kubelet[2737]: E0813 00:03:01.809670 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.811572 kubelet[2737]: E0813 00:03:01.811514 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.811572 kubelet[2737]: W0813 00:03:01.811558 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.811845 kubelet[2737]: E0813 00:03:01.811777 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.812079 kubelet[2737]: E0813 00:03:01.812038 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.812079 kubelet[2737]: W0813 00:03:01.812066 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.812693 kubelet[2737]: E0813 00:03:01.812462 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.812821 kubelet[2737]: E0813 00:03:01.812725 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.812821 kubelet[2737]: W0813 00:03:01.812744 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.813058 kubelet[2737]: E0813 00:03:01.812987 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.813150 kubelet[2737]: E0813 00:03:01.813061 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.813150 kubelet[2737]: W0813 00:03:01.813079 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.813317 kubelet[2737]: E0813 00:03:01.813246 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.815526 kubelet[2737]: E0813 00:03:01.815449 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.815526 kubelet[2737]: W0813 00:03:01.815487 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.815816 kubelet[2737]: E0813 00:03:01.815750 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.816090 kubelet[2737]: E0813 00:03:01.816047 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.816090 kubelet[2737]: W0813 00:03:01.816077 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.816448 kubelet[2737]: E0813 00:03:01.816262 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.816534 kubelet[2737]: E0813 00:03:01.816494 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.816534 kubelet[2737]: W0813 00:03:01.816513 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.816958 kubelet[2737]: E0813 00:03:01.816720 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.818483 kubelet[2737]: E0813 00:03:01.818425 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.818483 kubelet[2737]: W0813 00:03:01.818469 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.818825 kubelet[2737]: E0813 00:03:01.818520 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.819114 kubelet[2737]: E0813 00:03:01.819063 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.819114 kubelet[2737]: W0813 00:03:01.819100 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.819297 kubelet[2737]: E0813 00:03:01.819129 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.831810 env[1658]: time="2025-08-13T00:03:01.831141404Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sxpxf,Uid:d2c8d899-9b95-41f5-8a20-031e8b4b5d3b,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:01.868183 kubelet[2737]: E0813 00:03:01.868118 2737 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:03:01.868183 kubelet[2737]: W0813 00:03:01.868157 2737 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:03:01.868478 kubelet[2737]: E0813 00:03:01.868190 2737 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:03:01.878194 env[1658]: time="2025-08-13T00:03:01.878053436Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:01.878403 env[1658]: time="2025-08-13T00:03:01.878239581Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:01.878403 env[1658]: time="2025-08-13T00:03:01.878323245Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:01.878768 env[1658]: time="2025-08-13T00:03:01.878687361Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341 pid=3195 runtime=io.containerd.runc.v2 Aug 13 00:03:01.905077 systemd[1]: Started cri-containerd-80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341.scope. Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.960000 audit: BPF prog-id=121 op=LOAD Aug 13 00:03:01.962000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.962000 audit[3139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3129 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735316339616334303136303838386666336234356239653939393265 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3129 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735316339616334303136303838386666336234356239653939393265 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.963000 audit: BPF prog-id=122 op=LOAD Aug 13 00:03:01.963000 audit[3139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3129 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735316339616334303136303838386666336234356239653939393265 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.965000 audit: BPF prog-id=123 op=LOAD Aug 13 00:03:01.965000 audit[3139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3129 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735316339616334303136303838386666336234356239653939393265 Aug 13 00:03:01.967000 audit: BPF prog-id=123 op=UNLOAD Aug 13 00:03:01.967000 audit: BPF prog-id=122 op=UNLOAD Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.967000 audit: BPF prog-id=124 op=LOAD Aug 13 00:03:01.967000 audit[3139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3129 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:01.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735316339616334303136303838386666336234356239653939393265 Aug 13 00:03:01.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:01.999000 audit: BPF prog-id=125 op=LOAD Aug 13 00:03:02.001000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.001000 audit[3205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3195 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:02.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383134313932373732653139343635366337613330613732626633 Aug 13 00:03:02.001000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.001000 audit[3205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3195 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:02.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383134313932373732653139343635366337613330613732626633 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.002000 audit: BPF prog-id=126 op=LOAD Aug 13 00:03:02.002000 audit[3205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3195 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:02.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383134313932373732653139343635366337613330613732626633 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.004000 audit: BPF prog-id=127 op=LOAD Aug 13 00:03:02.004000 audit[3205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3195 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:02.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383134313932373732653139343635366337613330613732626633 Aug 13 00:03:02.005000 audit: BPF prog-id=127 op=UNLOAD Aug 13 00:03:02.005000 audit: BPF prog-id=126 op=UNLOAD Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:02.005000 audit: BPF prog-id=128 op=LOAD Aug 13 00:03:02.005000 audit[3205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3195 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:02.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383134313932373732653139343635366337613330613732626633 Aug 13 00:03:02.049170 env[1658]: time="2025-08-13T00:03:02.049106571Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sxpxf,Uid:d2c8d899-9b95-41f5-8a20-031e8b4b5d3b,Namespace:calico-system,Attempt:0,} returns sandbox id \"80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341\"" Aug 13 00:03:02.062417 env[1658]: time="2025-08-13T00:03:02.055836508Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Aug 13 00:03:02.117000 audit[3230]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=3230 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:02.117000 audit[3230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff24e0b70 a2=0 a3=1 items=0 ppid=2885 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:02.117000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:02.126000 audit[3230]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3230 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:02.126000 audit[3230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff24e0b70 a2=0 a3=1 items=0 ppid=2885 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:02.126000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:02.142652 env[1658]: time="2025-08-13T00:03:02.142564983Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74646bb547-wtjck,Uid:778c37e2-4184-48b2-8b4a-14d6ddc7be98,Namespace:calico-system,Attempt:0,} returns sandbox id \"751c9ac40160888ff3b45b9e9992e2f2d13fa1776b6c55cd72cb70f218b1e2d8\"" Aug 13 00:03:02.509560 systemd[1]: run-containerd-runc-k8s.io-751c9ac40160888ff3b45b9e9992e2f2d13fa1776b6c55cd72cb70f218b1e2d8-runc.B3VCVT.mount: Deactivated successfully. Aug 13 00:03:03.010686 kubelet[2737]: E0813 00:03:03.009637 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qhqx2" podUID="155419cf-dcf3-4f89-bb80-fbed7e0cf848" Aug 13 00:03:03.203440 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1328569404.mount: Deactivated successfully. Aug 13 00:03:03.288000 audit[3238]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3238 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:03.288000 audit[3238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffff35fa1f0 a2=0 a3=1 items=0 ppid=2885 pid=3238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:03.288000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:03.310000 audit[3238]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3238 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:03.310000 audit[3238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff35fa1f0 a2=0 a3=1 items=0 ppid=2885 pid=3238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:03.310000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:03.424116 env[1658]: time="2025-08-13T00:03:03.424029166Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:03.431317 env[1658]: time="2025-08-13T00:03:03.431221692Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:03.436694 env[1658]: time="2025-08-13T00:03:03.436639969Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:03.442365 env[1658]: time="2025-08-13T00:03:03.442305230Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:03.445808 env[1658]: time="2025-08-13T00:03:03.444388647Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Aug 13 00:03:03.448484 env[1658]: time="2025-08-13T00:03:03.448417252Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Aug 13 00:03:03.450362 env[1658]: time="2025-08-13T00:03:03.450291040Z" level=info msg="CreateContainer within sandbox \"80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Aug 13 00:03:03.481759 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount901806424.mount: Deactivated successfully. Aug 13 00:03:03.491424 env[1658]: time="2025-08-13T00:03:03.491303870Z" level=info msg="CreateContainer within sandbox \"80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794\"" Aug 13 00:03:03.492807 env[1658]: time="2025-08-13T00:03:03.492733491Z" level=info msg="StartContainer for \"10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794\"" Aug 13 00:03:03.562171 systemd[1]: run-containerd-runc-k8s.io-10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794-runc.hq6Jrw.mount: Deactivated successfully. Aug 13 00:03:03.568588 systemd[1]: Started cri-containerd-10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794.scope. Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3195 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:03.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130633139656162306437363936343634383932323162366562396165 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit: BPF prog-id=129 op=LOAD Aug 13 00:03:03.633000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3195 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:03.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130633139656162306437363936343634383932323162366562396165 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit: BPF prog-id=130 op=LOAD Aug 13 00:03:03.633000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3195 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:03.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130633139656162306437363936343634383932323162366562396165 Aug 13 00:03:03.633000 audit: BPF prog-id=130 op=UNLOAD Aug 13 00:03:03.633000 audit: BPF prog-id=129 op=UNLOAD Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:03.633000 audit: BPF prog-id=131 op=LOAD Aug 13 00:03:03.633000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3195 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:03.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130633139656162306437363936343634383932323162366562396165 Aug 13 00:03:03.668815 env[1658]: time="2025-08-13T00:03:03.668744013Z" level=info msg="StartContainer for \"10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794\" returns successfully" Aug 13 00:03:03.726557 systemd[1]: cri-containerd-10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794.scope: Deactivated successfully. Aug 13 00:03:03.730000 audit: BPF prog-id=131 op=UNLOAD Aug 13 00:03:03.789796 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794-rootfs.mount: Deactivated successfully. Aug 13 00:03:03.928164 env[1658]: time="2025-08-13T00:03:03.928006908Z" level=info msg="shim disconnected" id=10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794 Aug 13 00:03:03.928525 env[1658]: time="2025-08-13T00:03:03.928483116Z" level=warning msg="cleaning up after shim disconnected" id=10c19eab0d769646489221b6eb9ae477e89995a680f8520ac7706d3946cdd794 namespace=k8s.io Aug 13 00:03:03.928668 env[1658]: time="2025-08-13T00:03:03.928638432Z" level=info msg="cleaning up dead shim" Aug 13 00:03:03.942492 env[1658]: time="2025-08-13T00:03:03.942434955Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:03:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3285 runtime=io.containerd.runc.v2\n" Aug 13 00:03:04.335000 audit[3302]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=3302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:04.335000 audit[3302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffdd490790 a2=0 a3=1 items=0 ppid=2885 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:04.335000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:04.340000 audit[3302]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=3302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:04.340000 audit[3302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdd490790 a2=0 a3=1 items=0 ppid=2885 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:04.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:05.009225 kubelet[2737]: E0813 00:03:05.009138 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qhqx2" podUID="155419cf-dcf3-4f89-bb80-fbed7e0cf848" Aug 13 00:03:05.847019 env[1658]: time="2025-08-13T00:03:05.846960321Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:05.850076 env[1658]: time="2025-08-13T00:03:05.849982989Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:05.854528 env[1658]: time="2025-08-13T00:03:05.853071490Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:05.857297 env[1658]: time="2025-08-13T00:03:05.856179479Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:05.857575 env[1658]: time="2025-08-13T00:03:05.857236331Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Aug 13 00:03:05.863316 env[1658]: time="2025-08-13T00:03:05.863196144Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Aug 13 00:03:05.886484 env[1658]: time="2025-08-13T00:03:05.886421837Z" level=info msg="CreateContainer within sandbox \"751c9ac40160888ff3b45b9e9992e2f2d13fa1776b6c55cd72cb70f218b1e2d8\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Aug 13 00:03:05.910410 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3409808378.mount: Deactivated successfully. Aug 13 00:03:05.921672 env[1658]: time="2025-08-13T00:03:05.921566233Z" level=info msg="CreateContainer within sandbox \"751c9ac40160888ff3b45b9e9992e2f2d13fa1776b6c55cd72cb70f218b1e2d8\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"3aabe7926c9200241b9e21c3cd4d10c5fdb59f2875dc6653f79c4d002a13aafe\"" Aug 13 00:03:05.925490 env[1658]: time="2025-08-13T00:03:05.925387825Z" level=info msg="StartContainer for \"3aabe7926c9200241b9e21c3cd4d10c5fdb59f2875dc6653f79c4d002a13aafe\"" Aug 13 00:03:05.964233 systemd[1]: Started cri-containerd-3aabe7926c9200241b9e21c3cd4d10c5fdb59f2875dc6653f79c4d002a13aafe.scope. Aug 13 00:03:06.020579 kernel: kauditd_printk_skb: 178 callbacks suppressed Aug 13 00:03:06.020747 kernel: audit: type=1400 audit(1755043386.008:908): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.020811 kernel: audit: type=1400 audit(1755043386.012:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.037515 kernel: audit: type=1400 audit(1755043386.012:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.037727 kernel: audit: type=1400 audit(1755043386.012:911): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.048187 kernel: audit: type=1400 audit(1755043386.012:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.063183 kernel: audit: type=1400 audit(1755043386.012:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.063474 kernel: audit: type=1400 audit(1755043386.012:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.079472 kernel: audit: type=1400 audit(1755043386.012:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.092967 kernel: audit: type=1400 audit(1755043386.012:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.093109 kernel: audit: type=1400 audit(1755043386.018:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.018000 audit: BPF prog-id=132 op=LOAD Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3129 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:06.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616265373932366339323030323431623965323163336364346431 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3129 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:06.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616265373932366339323030323431623965323163336364346431 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.019000 audit: BPF prog-id=133 op=LOAD Aug 13 00:03:06.019000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3129 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:06.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616265373932366339323030323431623965323163336364346431 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.036000 audit: BPF prog-id=134 op=LOAD Aug 13 00:03:06.036000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3129 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:06.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616265373932366339323030323431623965323163336364346431 Aug 13 00:03:06.044000 audit: BPF prog-id=134 op=UNLOAD Aug 13 00:03:06.044000 audit: BPF prog-id=133 op=UNLOAD Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:06.044000 audit: BPF prog-id=135 op=LOAD Aug 13 00:03:06.044000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3129 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:06.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616265373932366339323030323431623965323163336364346431 Aug 13 00:03:06.141821 env[1658]: time="2025-08-13T00:03:06.141721194Z" level=info msg="StartContainer for \"3aabe7926c9200241b9e21c3cd4d10c5fdb59f2875dc6653f79c4d002a13aafe\" returns successfully" Aug 13 00:03:07.009977 kubelet[2737]: E0813 00:03:07.009894 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qhqx2" podUID="155419cf-dcf3-4f89-bb80-fbed7e0cf848" Aug 13 00:03:07.217368 kubelet[2737]: I0813 00:03:07.217301 2737 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:07.358534 kubelet[2737]: I0813 00:03:07.358019 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-74646bb547-wtjck" podStartSLOduration=2.643340253 podStartE2EDuration="6.357968101s" podCreationTimestamp="2025-08-13 00:03:01 +0000 UTC" firstStartedPulling="2025-08-13 00:03:02.144595899 +0000 UTC m=+28.445004363" lastFinishedPulling="2025-08-13 00:03:05.859223759 +0000 UTC m=+32.159632211" observedRunningTime="2025-08-13 00:03:06.242219414 +0000 UTC m=+32.542627890" watchObservedRunningTime="2025-08-13 00:03:07.357968101 +0000 UTC m=+33.658376577" Aug 13 00:03:07.405000 audit[3347]: NETFILTER_CFG table=filter:103 family=2 entries=21 op=nft_register_rule pid=3347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:07.405000 audit[3347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd6c25460 a2=0 a3=1 items=0 ppid=2885 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:07.405000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:07.413000 audit[3347]: NETFILTER_CFG table=nat:104 family=2 entries=19 op=nft_register_chain pid=3347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:07.413000 audit[3347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd6c25460 a2=0 a3=1 items=0 ppid=2885 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:07.413000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:09.010130 kubelet[2737]: E0813 00:03:09.010026 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qhqx2" podUID="155419cf-dcf3-4f89-bb80-fbed7e0cf848" Aug 13 00:03:09.627243 env[1658]: time="2025-08-13T00:03:09.627178618Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:09.634086 env[1658]: time="2025-08-13T00:03:09.634031027Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:09.639233 env[1658]: time="2025-08-13T00:03:09.639182964Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:09.644087 env[1658]: time="2025-08-13T00:03:09.644039437Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:09.646825 env[1658]: time="2025-08-13T00:03:09.645663169Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Aug 13 00:03:09.651617 env[1658]: time="2025-08-13T00:03:09.651555782Z" level=info msg="CreateContainer within sandbox \"80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Aug 13 00:03:09.679898 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1363099360.mount: Deactivated successfully. Aug 13 00:03:09.691302 env[1658]: time="2025-08-13T00:03:09.691182524Z" level=info msg="CreateContainer within sandbox \"80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539\"" Aug 13 00:03:09.695346 env[1658]: time="2025-08-13T00:03:09.695253261Z" level=info msg="StartContainer for \"15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539\"" Aug 13 00:03:09.744118 systemd[1]: run-containerd-runc-k8s.io-15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539-runc.KXvEyU.mount: Deactivated successfully. Aug 13 00:03:09.752568 systemd[1]: Started cri-containerd-15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539.scope. Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3195 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:09.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135663563346433323332633061663938356261323462323862373331 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit: BPF prog-id=136 op=LOAD Aug 13 00:03:09.801000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3195 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:09.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135663563346433323332633061663938356261323462323862373331 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.801000 audit: BPF prog-id=137 op=LOAD Aug 13 00:03:09.801000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3195 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:09.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135663563346433323332633061663938356261323462323862373331 Aug 13 00:03:09.802000 audit: BPF prog-id=137 op=UNLOAD Aug 13 00:03:09.802000 audit: BPF prog-id=136 op=UNLOAD Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:09.802000 audit: BPF prog-id=138 op=LOAD Aug 13 00:03:09.802000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3195 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:09.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135663563346433323332633061663938356261323462323862373331 Aug 13 00:03:09.839682 env[1658]: time="2025-08-13T00:03:09.839585805Z" level=info msg="StartContainer for \"15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539\" returns successfully" Aug 13 00:03:10.869359 env[1658]: time="2025-08-13T00:03:10.869237591Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 00:03:10.873929 systemd[1]: cri-containerd-15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539.scope: Deactivated successfully. Aug 13 00:03:10.874425 systemd[1]: cri-containerd-15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539.scope: Consumed 1.073s CPU time. Aug 13 00:03:10.876000 audit: BPF prog-id=138 op=UNLOAD Aug 13 00:03:10.913686 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539-rootfs.mount: Deactivated successfully. Aug 13 00:03:10.953589 kubelet[2737]: I0813 00:03:10.952358 2737 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Aug 13 00:03:11.028543 systemd[1]: Created slice kubepods-besteffort-pod155419cf_dcf3_4f89_bb80_fbed7e0cf848.slice. Aug 13 00:03:11.051396 env[1658]: time="2025-08-13T00:03:11.047493478Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qhqx2,Uid:155419cf-dcf3-4f89-bb80-fbed7e0cf848,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:11.059910 systemd[1]: Created slice kubepods-burstable-pod57449ba8_d127_4f60_b657_bff80db1c884.slice. Aug 13 00:03:11.085470 systemd[1]: Created slice kubepods-besteffort-pod673954fb_b359_43b2_9081_665048e7cbd1.slice. Aug 13 00:03:11.088528 kubelet[2737]: I0813 00:03:11.088447 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ghbmq\" (UniqueName: \"kubernetes.io/projected/01d325a3-f014-43df-9108-2d734e893a16-kube-api-access-ghbmq\") pod \"calico-kube-controllers-85f4cfff9d-wr7d6\" (UID: \"01d325a3-f014-43df-9108-2d734e893a16\") " pod="calico-system/calico-kube-controllers-85f4cfff9d-wr7d6" Aug 13 00:03:11.088744 kubelet[2737]: I0813 00:03:11.088553 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kr4hd\" (UniqueName: \"kubernetes.io/projected/09dc4739-c8b2-41d7-b069-31f6814494f2-kube-api-access-kr4hd\") pod \"calico-apiserver-855f9bdb85-zzpcx\" (UID: \"09dc4739-c8b2-41d7-b069-31f6814494f2\") " pod="calico-apiserver/calico-apiserver-855f9bdb85-zzpcx" Aug 13 00:03:11.088744 kubelet[2737]: I0813 00:03:11.088598 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/01d325a3-f014-43df-9108-2d734e893a16-tigera-ca-bundle\") pod \"calico-kube-controllers-85f4cfff9d-wr7d6\" (UID: \"01d325a3-f014-43df-9108-2d734e893a16\") " pod="calico-system/calico-kube-controllers-85f4cfff9d-wr7d6" Aug 13 00:03:11.088744 kubelet[2737]: I0813 00:03:11.088640 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/09dc4739-c8b2-41d7-b069-31f6814494f2-calico-apiserver-certs\") pod \"calico-apiserver-855f9bdb85-zzpcx\" (UID: \"09dc4739-c8b2-41d7-b069-31f6814494f2\") " pod="calico-apiserver/calico-apiserver-855f9bdb85-zzpcx" Aug 13 00:03:11.088744 kubelet[2737]: I0813 00:03:11.088712 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/57449ba8-d127-4f60-b657-bff80db1c884-config-volume\") pod \"coredns-7c65d6cfc9-txddh\" (UID: \"57449ba8-d127-4f60-b657-bff80db1c884\") " pod="kube-system/coredns-7c65d6cfc9-txddh" Aug 13 00:03:11.089000 kubelet[2737]: I0813 00:03:11.088753 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t9zmz\" (UniqueName: \"kubernetes.io/projected/3fbc7976-3052-4851-9233-63f608fc52d6-kube-api-access-t9zmz\") pod \"coredns-7c65d6cfc9-mbsc2\" (UID: \"3fbc7976-3052-4851-9233-63f608fc52d6\") " pod="kube-system/coredns-7c65d6cfc9-mbsc2" Aug 13 00:03:11.089000 kubelet[2737]: I0813 00:03:11.088796 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/673954fb-b359-43b2-9081-665048e7cbd1-calico-apiserver-certs\") pod \"calico-apiserver-855f9bdb85-zm582\" (UID: \"673954fb-b359-43b2-9081-665048e7cbd1\") " pod="calico-apiserver/calico-apiserver-855f9bdb85-zm582" Aug 13 00:03:11.089000 kubelet[2737]: I0813 00:03:11.088838 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zzmv7\" (UniqueName: \"kubernetes.io/projected/673954fb-b359-43b2-9081-665048e7cbd1-kube-api-access-zzmv7\") pod \"calico-apiserver-855f9bdb85-zm582\" (UID: \"673954fb-b359-43b2-9081-665048e7cbd1\") " pod="calico-apiserver/calico-apiserver-855f9bdb85-zm582" Aug 13 00:03:11.089000 kubelet[2737]: I0813 00:03:11.088882 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f2dwd\" (UniqueName: \"kubernetes.io/projected/57449ba8-d127-4f60-b657-bff80db1c884-kube-api-access-f2dwd\") pod \"coredns-7c65d6cfc9-txddh\" (UID: \"57449ba8-d127-4f60-b657-bff80db1c884\") " pod="kube-system/coredns-7c65d6cfc9-txddh" Aug 13 00:03:11.089000 kubelet[2737]: I0813 00:03:11.088922 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3fbc7976-3052-4851-9233-63f608fc52d6-config-volume\") pod \"coredns-7c65d6cfc9-mbsc2\" (UID: \"3fbc7976-3052-4851-9233-63f608fc52d6\") " pod="kube-system/coredns-7c65d6cfc9-mbsc2" Aug 13 00:03:11.108002 systemd[1]: Created slice kubepods-burstable-pod3fbc7976_3052_4851_9233_63f608fc52d6.slice. Aug 13 00:03:11.128359 systemd[1]: Created slice kubepods-besteffort-pod01d325a3_f014_43df_9108_2d734e893a16.slice. Aug 13 00:03:11.148199 systemd[1]: Created slice kubepods-besteffort-pod09dc4739_c8b2_41d7_b069_31f6814494f2.slice. Aug 13 00:03:11.172213 systemd[1]: Created slice kubepods-besteffort-pod9f33f005_53e6_4d2b_9743_0641ab7bf242.slice. Aug 13 00:03:11.187749 systemd[1]: Created slice kubepods-besteffort-pod0a69438c_dc61_4b3b_a302_51fecc0cc7ea.slice. Aug 13 00:03:11.192111 kubelet[2737]: I0813 00:03:11.191200 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cf8qh\" (UniqueName: \"kubernetes.io/projected/9f33f005-53e6-4d2b-9743-0641ab7bf242-kube-api-access-cf8qh\") pod \"goldmane-58fd7646b9-5mk2m\" (UID: \"9f33f005-53e6-4d2b-9743-0641ab7bf242\") " pod="calico-system/goldmane-58fd7646b9-5mk2m" Aug 13 00:03:11.192111 kubelet[2737]: I0813 00:03:11.191500 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9f33f005-53e6-4d2b-9743-0641ab7bf242-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-5mk2m\" (UID: \"9f33f005-53e6-4d2b-9743-0641ab7bf242\") " pod="calico-system/goldmane-58fd7646b9-5mk2m" Aug 13 00:03:11.192111 kubelet[2737]: I0813 00:03:11.191625 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/9f33f005-53e6-4d2b-9743-0641ab7bf242-goldmane-key-pair\") pod \"goldmane-58fd7646b9-5mk2m\" (UID: \"9f33f005-53e6-4d2b-9743-0641ab7bf242\") " pod="calico-system/goldmane-58fd7646b9-5mk2m" Aug 13 00:03:11.192111 kubelet[2737]: I0813 00:03:11.191796 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2cqv9\" (UniqueName: \"kubernetes.io/projected/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-kube-api-access-2cqv9\") pod \"whisker-7989d9d898-tl2dg\" (UID: \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\") " pod="calico-system/whisker-7989d9d898-tl2dg" Aug 13 00:03:11.192111 kubelet[2737]: I0813 00:03:11.191886 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-ca-bundle\") pod \"whisker-7989d9d898-tl2dg\" (UID: \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\") " pod="calico-system/whisker-7989d9d898-tl2dg" Aug 13 00:03:11.192562 kubelet[2737]: I0813 00:03:11.192069 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-backend-key-pair\") pod \"whisker-7989d9d898-tl2dg\" (UID: \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\") " pod="calico-system/whisker-7989d9d898-tl2dg" Aug 13 00:03:11.192562 kubelet[2737]: I0813 00:03:11.192214 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/9f33f005-53e6-4d2b-9743-0641ab7bf242-config\") pod \"goldmane-58fd7646b9-5mk2m\" (UID: \"9f33f005-53e6-4d2b-9743-0641ab7bf242\") " pod="calico-system/goldmane-58fd7646b9-5mk2m" Aug 13 00:03:11.411022 env[1658]: time="2025-08-13T00:03:11.410862963Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zm582,Uid:673954fb-b359-43b2-9081-665048e7cbd1,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:03:11.417627 env[1658]: time="2025-08-13T00:03:11.417170560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mbsc2,Uid:3fbc7976-3052-4851-9233-63f608fc52d6,Namespace:kube-system,Attempt:0,}" Aug 13 00:03:11.440375 env[1658]: time="2025-08-13T00:03:11.440004188Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f4cfff9d-wr7d6,Uid:01d325a3-f014-43df-9108-2d734e893a16,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:11.464384 env[1658]: time="2025-08-13T00:03:11.464127527Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zzpcx,Uid:09dc4739-c8b2-41d7-b069-31f6814494f2,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:03:11.481902 env[1658]: time="2025-08-13T00:03:11.481779650Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5mk2m,Uid:9f33f005-53e6-4d2b-9743-0641ab7bf242,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:11.501935 env[1658]: time="2025-08-13T00:03:11.501593213Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7989d9d898-tl2dg,Uid:0a69438c-dc61-4b3b-a302-51fecc0cc7ea,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:11.673128 env[1658]: time="2025-08-13T00:03:11.672932142Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-txddh,Uid:57449ba8-d127-4f60-b657-bff80db1c884,Namespace:kube-system,Attempt:0,}" Aug 13 00:03:12.000498 env[1658]: time="2025-08-13T00:03:12.000428138Z" level=info msg="shim disconnected" id=15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539 Aug 13 00:03:12.001146 env[1658]: time="2025-08-13T00:03:12.000498134Z" level=warning msg="cleaning up after shim disconnected" id=15f5c4d3232c0af985ba24b28b731ccf5e9b6f37c7d1ee15931a793fac90b539 namespace=k8s.io Aug 13 00:03:12.001146 env[1658]: time="2025-08-13T00:03:12.000520394Z" level=info msg="cleaning up dead shim" Aug 13 00:03:12.039828 env[1658]: time="2025-08-13T00:03:12.039751759Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:03:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3413 runtime=io.containerd.runc.v2\n" Aug 13 00:03:12.281923 env[1658]: time="2025-08-13T00:03:12.277588384Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Aug 13 00:03:12.508764 env[1658]: time="2025-08-13T00:03:12.508645043Z" level=error msg="Failed to destroy network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.509525 env[1658]: time="2025-08-13T00:03:12.509427408Z" level=error msg="encountered an error cleaning up failed sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.509670 env[1658]: time="2025-08-13T00:03:12.509544660Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7989d9d898-tl2dg,Uid:0a69438c-dc61-4b3b-a302-51fecc0cc7ea,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.510018 kubelet[2737]: E0813 00:03:12.509937 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.512756 kubelet[2737]: E0813 00:03:12.510034 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7989d9d898-tl2dg" Aug 13 00:03:12.512756 kubelet[2737]: E0813 00:03:12.510070 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7989d9d898-tl2dg" Aug 13 00:03:12.512756 kubelet[2737]: E0813 00:03:12.510134 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7989d9d898-tl2dg_calico-system(0a69438c-dc61-4b3b-a302-51fecc0cc7ea)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7989d9d898-tl2dg_calico-system(0a69438c-dc61-4b3b-a302-51fecc0cc7ea)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7989d9d898-tl2dg" podUID="0a69438c-dc61-4b3b-a302-51fecc0cc7ea" Aug 13 00:03:12.529249 env[1658]: time="2025-08-13T00:03:12.529095698Z" level=error msg="Failed to destroy network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.530080 env[1658]: time="2025-08-13T00:03:12.530003570Z" level=error msg="encountered an error cleaning up failed sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.530567 env[1658]: time="2025-08-13T00:03:12.530500910Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qhqx2,Uid:155419cf-dcf3-4f89-bb80-fbed7e0cf848,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.531138 kubelet[2737]: E0813 00:03:12.531059 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.531312 kubelet[2737]: E0813 00:03:12.531159 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qhqx2" Aug 13 00:03:12.531312 kubelet[2737]: E0813 00:03:12.531210 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qhqx2" Aug 13 00:03:12.531589 kubelet[2737]: E0813 00:03:12.531364 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-qhqx2_calico-system(155419cf-dcf3-4f89-bb80-fbed7e0cf848)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-qhqx2_calico-system(155419cf-dcf3-4f89-bb80-fbed7e0cf848)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qhqx2" podUID="155419cf-dcf3-4f89-bb80-fbed7e0cf848" Aug 13 00:03:12.598116 env[1658]: time="2025-08-13T00:03:12.597937632Z" level=error msg="Failed to destroy network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.600189 env[1658]: time="2025-08-13T00:03:12.600105864Z" level=error msg="encountered an error cleaning up failed sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.600445 env[1658]: time="2025-08-13T00:03:12.600218148Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zm582,Uid:673954fb-b359-43b2-9081-665048e7cbd1,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.600604 kubelet[2737]: E0813 00:03:12.600537 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.600729 kubelet[2737]: E0813 00:03:12.600625 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-855f9bdb85-zm582" Aug 13 00:03:12.600729 kubelet[2737]: E0813 00:03:12.600673 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-855f9bdb85-zm582" Aug 13 00:03:12.600873 kubelet[2737]: E0813 00:03:12.600736 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-855f9bdb85-zm582_calico-apiserver(673954fb-b359-43b2-9081-665048e7cbd1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-855f9bdb85-zm582_calico-apiserver(673954fb-b359-43b2-9081-665048e7cbd1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-855f9bdb85-zm582" podUID="673954fb-b359-43b2-9081-665048e7cbd1" Aug 13 00:03:12.613898 env[1658]: time="2025-08-13T00:03:12.613816466Z" level=error msg="Failed to destroy network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.614967 env[1658]: time="2025-08-13T00:03:12.614893406Z" level=error msg="encountered an error cleaning up failed sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.615237 env[1658]: time="2025-08-13T00:03:12.615163514Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f4cfff9d-wr7d6,Uid:01d325a3-f014-43df-9108-2d734e893a16,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.615807 kubelet[2737]: E0813 00:03:12.615732 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.616048 kubelet[2737]: E0813 00:03:12.615829 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85f4cfff9d-wr7d6" Aug 13 00:03:12.616048 kubelet[2737]: E0813 00:03:12.615866 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85f4cfff9d-wr7d6" Aug 13 00:03:12.616048 kubelet[2737]: E0813 00:03:12.615958 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-85f4cfff9d-wr7d6_calico-system(01d325a3-f014-43df-9108-2d734e893a16)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-85f4cfff9d-wr7d6_calico-system(01d325a3-f014-43df-9108-2d734e893a16)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85f4cfff9d-wr7d6" podUID="01d325a3-f014-43df-9108-2d734e893a16" Aug 13 00:03:12.662504 env[1658]: time="2025-08-13T00:03:12.662404185Z" level=error msg="Failed to destroy network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.663122 env[1658]: time="2025-08-13T00:03:12.663044481Z" level=error msg="encountered an error cleaning up failed sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.663262 env[1658]: time="2025-08-13T00:03:12.663148137Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mbsc2,Uid:3fbc7976-3052-4851-9233-63f608fc52d6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.663568 kubelet[2737]: E0813 00:03:12.663508 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.663680 kubelet[2737]: E0813 00:03:12.663592 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-mbsc2" Aug 13 00:03:12.663680 kubelet[2737]: E0813 00:03:12.663635 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-mbsc2" Aug 13 00:03:12.663828 kubelet[2737]: E0813 00:03:12.663695 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-mbsc2_kube-system(3fbc7976-3052-4851-9233-63f608fc52d6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-mbsc2_kube-system(3fbc7976-3052-4851-9233-63f608fc52d6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-mbsc2" podUID="3fbc7976-3052-4851-9233-63f608fc52d6" Aug 13 00:03:12.668757 env[1658]: time="2025-08-13T00:03:12.668668281Z" level=error msg="Failed to destroy network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.671248 env[1658]: time="2025-08-13T00:03:12.671176618Z" level=error msg="encountered an error cleaning up failed sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.671707 env[1658]: time="2025-08-13T00:03:12.671631994Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-txddh,Uid:57449ba8-d127-4f60-b657-bff80db1c884,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.672148 kubelet[2737]: E0813 00:03:12.672089 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.672318 kubelet[2737]: E0813 00:03:12.672175 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-txddh" Aug 13 00:03:12.672318 kubelet[2737]: E0813 00:03:12.672212 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-txddh" Aug 13 00:03:12.672484 kubelet[2737]: E0813 00:03:12.672336 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-txddh_kube-system(57449ba8-d127-4f60-b657-bff80db1c884)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-txddh_kube-system(57449ba8-d127-4f60-b657-bff80db1c884)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-txddh" podUID="57449ba8-d127-4f60-b657-bff80db1c884" Aug 13 00:03:12.686412 env[1658]: time="2025-08-13T00:03:12.686338116Z" level=error msg="Failed to destroy network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.687409 env[1658]: time="2025-08-13T00:03:12.687261384Z" level=error msg="encountered an error cleaning up failed sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.687790 env[1658]: time="2025-08-13T00:03:12.687694020Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5mk2m,Uid:9f33f005-53e6-4d2b-9743-0641ab7bf242,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.688559 kubelet[2737]: E0813 00:03:12.688504 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.688703 kubelet[2737]: E0813 00:03:12.688587 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-5mk2m" Aug 13 00:03:12.688703 kubelet[2737]: E0813 00:03:12.688625 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-5mk2m" Aug 13 00:03:12.688863 kubelet[2737]: E0813 00:03:12.688688 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-5mk2m_calico-system(9f33f005-53e6-4d2b-9743-0641ab7bf242)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-5mk2m_calico-system(9f33f005-53e6-4d2b-9743-0641ab7bf242)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-5mk2m" podUID="9f33f005-53e6-4d2b-9743-0641ab7bf242" Aug 13 00:03:12.696577 env[1658]: time="2025-08-13T00:03:12.696482089Z" level=error msg="Failed to destroy network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.697214 env[1658]: time="2025-08-13T00:03:12.697151761Z" level=error msg="encountered an error cleaning up failed sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.697372 env[1658]: time="2025-08-13T00:03:12.697303561Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zzpcx,Uid:09dc4739-c8b2-41d7-b069-31f6814494f2,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.697658 kubelet[2737]: E0813 00:03:12.697596 2737 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:12.697778 kubelet[2737]: E0813 00:03:12.697685 2737 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-855f9bdb85-zzpcx" Aug 13 00:03:12.697778 kubelet[2737]: E0813 00:03:12.697730 2737 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-855f9bdb85-zzpcx" Aug 13 00:03:12.697919 kubelet[2737]: E0813 00:03:12.697801 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-855f9bdb85-zzpcx_calico-apiserver(09dc4739-c8b2-41d7-b069-31f6814494f2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-855f9bdb85-zzpcx_calico-apiserver(09dc4739-c8b2-41d7-b069-31f6814494f2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-855f9bdb85-zzpcx" podUID="09dc4739-c8b2-41d7-b069-31f6814494f2" Aug 13 00:03:12.916353 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77-shm.mount: Deactivated successfully. Aug 13 00:03:12.917341 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb-shm.mount: Deactivated successfully. Aug 13 00:03:12.917503 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb-shm.mount: Deactivated successfully. Aug 13 00:03:13.279008 kubelet[2737]: I0813 00:03:13.278950 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:13.281640 env[1658]: time="2025-08-13T00:03:13.280719219Z" level=info msg="StopPodSandbox for \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\"" Aug 13 00:03:13.286493 kubelet[2737]: I0813 00:03:13.285549 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:13.287377 env[1658]: time="2025-08-13T00:03:13.287228680Z" level=info msg="StopPodSandbox for \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\"" Aug 13 00:03:13.291103 kubelet[2737]: I0813 00:03:13.291034 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:13.296697 env[1658]: time="2025-08-13T00:03:13.295083005Z" level=info msg="StopPodSandbox for \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\"" Aug 13 00:03:13.301357 kubelet[2737]: I0813 00:03:13.301303 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:13.310108 env[1658]: time="2025-08-13T00:03:13.309952843Z" level=info msg="StopPodSandbox for \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\"" Aug 13 00:03:13.313850 kubelet[2737]: I0813 00:03:13.313747 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:13.317429 env[1658]: time="2025-08-13T00:03:13.315047012Z" level=info msg="StopPodSandbox for \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\"" Aug 13 00:03:13.323000 kubelet[2737]: I0813 00:03:13.322938 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:13.329601 env[1658]: time="2025-08-13T00:03:13.329531614Z" level=info msg="StopPodSandbox for \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\"" Aug 13 00:03:13.332601 kubelet[2737]: I0813 00:03:13.332551 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:13.336458 env[1658]: time="2025-08-13T00:03:13.335314642Z" level=info msg="StopPodSandbox for \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\"" Aug 13 00:03:13.336623 kubelet[2737]: I0813 00:03:13.336117 2737 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:13.337172 env[1658]: time="2025-08-13T00:03:13.337115723Z" level=info msg="StopPodSandbox for \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\"" Aug 13 00:03:13.481763 env[1658]: time="2025-08-13T00:03:13.481655057Z" level=error msg="StopPodSandbox for \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\" failed" error="failed to destroy network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.482520 kubelet[2737]: E0813 00:03:13.482447 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:13.482716 kubelet[2737]: E0813 00:03:13.482546 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1"} Aug 13 00:03:13.482716 kubelet[2737]: E0813 00:03:13.482637 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9f33f005-53e6-4d2b-9743-0641ab7bf242\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.482716 kubelet[2737]: E0813 00:03:13.482679 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9f33f005-53e6-4d2b-9743-0641ab7bf242\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-5mk2m" podUID="9f33f005-53e6-4d2b-9743-0641ab7bf242" Aug 13 00:03:13.547318 env[1658]: time="2025-08-13T00:03:13.547088618Z" level=error msg="StopPodSandbox for \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\" failed" error="failed to destroy network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.549624 kubelet[2737]: E0813 00:03:13.549235 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:13.549624 kubelet[2737]: E0813 00:03:13.549348 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11"} Aug 13 00:03:13.549624 kubelet[2737]: E0813 00:03:13.549433 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"09dc4739-c8b2-41d7-b069-31f6814494f2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.549624 kubelet[2737]: E0813 00:03:13.549512 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"09dc4739-c8b2-41d7-b069-31f6814494f2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-855f9bdb85-zzpcx" podUID="09dc4739-c8b2-41d7-b069-31f6814494f2" Aug 13 00:03:13.609537 env[1658]: time="2025-08-13T00:03:13.609438874Z" level=error msg="StopPodSandbox for \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\" failed" error="failed to destroy network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.610356 kubelet[2737]: E0813 00:03:13.610028 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:13.610356 kubelet[2737]: E0813 00:03:13.610133 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77"} Aug 13 00:03:13.610356 kubelet[2737]: E0813 00:03:13.610216 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"01d325a3-f014-43df-9108-2d734e893a16\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.610356 kubelet[2737]: E0813 00:03:13.610301 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"01d325a3-f014-43df-9108-2d734e893a16\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85f4cfff9d-wr7d6" podUID="01d325a3-f014-43df-9108-2d734e893a16" Aug 13 00:03:13.615791 env[1658]: time="2025-08-13T00:03:13.615696059Z" level=error msg="StopPodSandbox for \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\" failed" error="failed to destroy network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.616239 kubelet[2737]: E0813 00:03:13.616045 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:13.616550 kubelet[2737]: E0813 00:03:13.616258 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75"} Aug 13 00:03:13.616718 kubelet[2737]: E0813 00:03:13.616581 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"673954fb-b359-43b2-9081-665048e7cbd1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.616718 kubelet[2737]: E0813 00:03:13.616626 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"673954fb-b359-43b2-9081-665048e7cbd1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-855f9bdb85-zm582" podUID="673954fb-b359-43b2-9081-665048e7cbd1" Aug 13 00:03:13.632867 env[1658]: time="2025-08-13T00:03:13.632765869Z" level=error msg="StopPodSandbox for \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\" failed" error="failed to destroy network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.633181 kubelet[2737]: E0813 00:03:13.633105 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:13.633358 kubelet[2737]: E0813 00:03:13.633190 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb"} Aug 13 00:03:13.633358 kubelet[2737]: E0813 00:03:13.633249 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.633358 kubelet[2737]: E0813 00:03:13.633325 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7989d9d898-tl2dg" podUID="0a69438c-dc61-4b3b-a302-51fecc0cc7ea" Aug 13 00:03:13.637168 env[1658]: time="2025-08-13T00:03:13.637068973Z" level=error msg="StopPodSandbox for \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\" failed" error="failed to destroy network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.638013 kubelet[2737]: E0813 00:03:13.637677 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:13.638013 kubelet[2737]: E0813 00:03:13.637772 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1"} Aug 13 00:03:13.638013 kubelet[2737]: E0813 00:03:13.637881 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3fbc7976-3052-4851-9233-63f608fc52d6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.638013 kubelet[2737]: E0813 00:03:13.637957 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3fbc7976-3052-4851-9233-63f608fc52d6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-mbsc2" podUID="3fbc7976-3052-4851-9233-63f608fc52d6" Aug 13 00:03:13.656552 env[1658]: time="2025-08-13T00:03:13.656474500Z" level=error msg="StopPodSandbox for \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\" failed" error="failed to destroy network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.657126 kubelet[2737]: E0813 00:03:13.657039 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:13.657304 kubelet[2737]: E0813 00:03:13.657131 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb"} Aug 13 00:03:13.657304 kubelet[2737]: E0813 00:03:13.657194 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"155419cf-dcf3-4f89-bb80-fbed7e0cf848\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.657627 kubelet[2737]: E0813 00:03:13.657236 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"155419cf-dcf3-4f89-bb80-fbed7e0cf848\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qhqx2" podUID="155419cf-dcf3-4f89-bb80-fbed7e0cf848" Aug 13 00:03:13.662574 env[1658]: time="2025-08-13T00:03:13.662486861Z" level=error msg="StopPodSandbox for \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\" failed" error="failed to destroy network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:03:13.663056 kubelet[2737]: E0813 00:03:13.662998 2737 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:13.663178 kubelet[2737]: E0813 00:03:13.663073 2737 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13"} Aug 13 00:03:13.663178 kubelet[2737]: E0813 00:03:13.663130 2737 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"57449ba8-d127-4f60-b657-bff80db1c884\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:03:13.663433 kubelet[2737]: E0813 00:03:13.663169 2737 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"57449ba8-d127-4f60-b657-bff80db1c884\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-txddh" podUID="57449ba8-d127-4f60-b657-bff80db1c884" Aug 13 00:03:20.862407 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2781611953.mount: Deactivated successfully. Aug 13 00:03:20.924463 env[1658]: time="2025-08-13T00:03:20.924391707Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:20.926895 env[1658]: time="2025-08-13T00:03:20.926829405Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:20.929426 env[1658]: time="2025-08-13T00:03:20.929361783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:20.931934 env[1658]: time="2025-08-13T00:03:20.931880097Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:20.932814 env[1658]: time="2025-08-13T00:03:20.932768852Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Aug 13 00:03:20.965517 env[1658]: time="2025-08-13T00:03:20.965460220Z" level=info msg="CreateContainer within sandbox \"80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Aug 13 00:03:20.995006 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount814861644.mount: Deactivated successfully. Aug 13 00:03:21.001721 env[1658]: time="2025-08-13T00:03:21.001657946Z" level=info msg="CreateContainer within sandbox \"80814192772e194656c7a30a72bf335abe6158d1324ad5fceef90425299fa341\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"e700297ba4ad131f981ecd8c61e7338d0e7377a8427e88e9e44fc05955e060ba\"" Aug 13 00:03:21.005365 env[1658]: time="2025-08-13T00:03:21.005173243Z" level=info msg="StartContainer for \"e700297ba4ad131f981ecd8c61e7338d0e7377a8427e88e9e44fc05955e060ba\"" Aug 13 00:03:21.047519 systemd[1]: Started cri-containerd-e700297ba4ad131f981ecd8c61e7338d0e7377a8427e88e9e44fc05955e060ba.scope. Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.110219 kernel: kauditd_printk_skb: 97 callbacks suppressed Aug 13 00:03:21.110356 kernel: audit: type=1400 audit(1755043401.106:935): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3195 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.130336 kernel: audit: type=1300 audit(1755043401.106:935): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3195 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537303032393762613461643133316639383165636438633631653733 Aug 13 00:03:21.144638 kernel: audit: type=1327 audit(1755043401.106:935): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537303032393762613461643133316639383165636438633631653733 Aug 13 00:03:21.144846 kernel: audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.161820 kernel: audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.170184 kernel: audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.179087 kernel: audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.188168 kernel: audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.202087 kernel: audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.210720 kernel: audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.106000 audit: BPF prog-id=139 op=LOAD Aug 13 00:03:21.106000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3195 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537303032393762613461643133316639383165636438633631653733 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.109000 audit: BPF prog-id=140 op=LOAD Aug 13 00:03:21.109000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3195 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537303032393762613461643133316639383165636438633631653733 Aug 13 00:03:21.117000 audit: BPF prog-id=140 op=UNLOAD Aug 13 00:03:21.117000 audit: BPF prog-id=139 op=UNLOAD Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:21.117000 audit: BPF prog-id=141 op=LOAD Aug 13 00:03:21.117000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3195 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:21.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537303032393762613461643133316639383165636438633631653733 Aug 13 00:03:21.218455 env[1658]: time="2025-08-13T00:03:21.215851673Z" level=info msg="StartContainer for \"e700297ba4ad131f981ecd8c61e7338d0e7377a8427e88e9e44fc05955e060ba\" returns successfully" Aug 13 00:03:21.400129 kubelet[2737]: I0813 00:03:21.399872 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-sxpxf" podStartSLOduration=1.5206223730000001 podStartE2EDuration="20.399846292s" podCreationTimestamp="2025-08-13 00:03:01 +0000 UTC" firstStartedPulling="2025-08-13 00:03:02.055142464 +0000 UTC m=+28.355550928" lastFinishedPulling="2025-08-13 00:03:20.934366395 +0000 UTC m=+47.234774847" observedRunningTime="2025-08-13 00:03:21.397312078 +0000 UTC m=+47.697720566" watchObservedRunningTime="2025-08-13 00:03:21.399846292 +0000 UTC m=+47.700254756" Aug 13 00:03:21.519786 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Aug 13 00:03:21.519976 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 13 00:03:21.709626 env[1658]: time="2025-08-13T00:03:21.709483252Z" level=info msg="StopPodSandbox for \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\"" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:21.896 [INFO][3816] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:21.897 [INFO][3816] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" iface="eth0" netns="/var/run/netns/cni-44e0a83d-ebbe-8347-2bdd-9463cffe01a3" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:21.897 [INFO][3816] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" iface="eth0" netns="/var/run/netns/cni-44e0a83d-ebbe-8347-2bdd-9463cffe01a3" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:21.899 [INFO][3816] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" iface="eth0" netns="/var/run/netns/cni-44e0a83d-ebbe-8347-2bdd-9463cffe01a3" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:21.899 [INFO][3816] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:21.899 [INFO][3816] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:22.018 [INFO][3829] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:22.019 [INFO][3829] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:22.019 [INFO][3829] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:22.045 [WARNING][3829] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:22.046 [INFO][3829] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:22.053 [INFO][3829] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:22.062643 env[1658]: 2025-08-13 00:03:22.059 [INFO][3816] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:22.069883 systemd[1]: run-netns-cni\x2d44e0a83d\x2debbe\x2d8347\x2d2bdd\x2d9463cffe01a3.mount: Deactivated successfully. Aug 13 00:03:22.076730 env[1658]: time="2025-08-13T00:03:22.071650022Z" level=info msg="TearDown network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\" successfully" Aug 13 00:03:22.076730 env[1658]: time="2025-08-13T00:03:22.071709759Z" level=info msg="StopPodSandbox for \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\" returns successfully" Aug 13 00:03:22.195902 kubelet[2737]: I0813 00:03:22.195851 2737 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2cqv9\" (UniqueName: \"kubernetes.io/projected/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-kube-api-access-2cqv9\") pod \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\" (UID: \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\") " Aug 13 00:03:22.198074 kubelet[2737]: I0813 00:03:22.196458 2737 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-ca-bundle\") pod \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\" (UID: \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\") " Aug 13 00:03:22.198074 kubelet[2737]: I0813 00:03:22.197863 2737 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-backend-key-pair\") pod \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\" (UID: \"0a69438c-dc61-4b3b-a302-51fecc0cc7ea\") " Aug 13 00:03:22.217491 kubelet[2737]: I0813 00:03:22.211528 2737 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "0a69438c-dc61-4b3b-a302-51fecc0cc7ea" (UID: "0a69438c-dc61-4b3b-a302-51fecc0cc7ea"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Aug 13 00:03:22.217491 kubelet[2737]: I0813 00:03:22.212152 2737 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "0a69438c-dc61-4b3b-a302-51fecc0cc7ea" (UID: "0a69438c-dc61-4b3b-a302-51fecc0cc7ea"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Aug 13 00:03:22.215165 systemd[1]: var-lib-kubelet-pods-0a69438c\x2ddc61\x2d4b3b\x2da302\x2d51fecc0cc7ea-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2cqv9.mount: Deactivated successfully. Aug 13 00:03:22.215573 systemd[1]: var-lib-kubelet-pods-0a69438c\x2ddc61\x2d4b3b\x2da302\x2d51fecc0cc7ea-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Aug 13 00:03:22.220779 kubelet[2737]: I0813 00:03:22.220676 2737 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-kube-api-access-2cqv9" (OuterVolumeSpecName: "kube-api-access-2cqv9") pod "0a69438c-dc61-4b3b-a302-51fecc0cc7ea" (UID: "0a69438c-dc61-4b3b-a302-51fecc0cc7ea"). InnerVolumeSpecName "kube-api-access-2cqv9". PluginName "kubernetes.io/projected", VolumeGidValue "" Aug 13 00:03:22.298653 kubelet[2737]: I0813 00:03:22.298592 2737 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-2cqv9\" (UniqueName: \"kubernetes.io/projected/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-kube-api-access-2cqv9\") on node \"ip-172-31-18-163\" DevicePath \"\"" Aug 13 00:03:22.298653 kubelet[2737]: I0813 00:03:22.298649 2737 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-ca-bundle\") on node \"ip-172-31-18-163\" DevicePath \"\"" Aug 13 00:03:22.298653 kubelet[2737]: I0813 00:03:22.298675 2737 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0a69438c-dc61-4b3b-a302-51fecc0cc7ea-whisker-backend-key-pair\") on node \"ip-172-31-18-163\" DevicePath \"\"" Aug 13 00:03:22.384573 systemd[1]: Removed slice kubepods-besteffort-pod0a69438c_dc61_4b3b_a302_51fecc0cc7ea.slice. Aug 13 00:03:22.482676 systemd[1]: Created slice kubepods-besteffort-pod672e9c97_3ca9_4d79_b82c_07575ecfaca4.slice. Aug 13 00:03:22.500103 kubelet[2737]: I0813 00:03:22.500033 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/672e9c97-3ca9-4d79-b82c-07575ecfaca4-whisker-backend-key-pair\") pod \"whisker-54bdd5b8c4-wl8cs\" (UID: \"672e9c97-3ca9-4d79-b82c-07575ecfaca4\") " pod="calico-system/whisker-54bdd5b8c4-wl8cs" Aug 13 00:03:22.500749 kubelet[2737]: I0813 00:03:22.500118 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/672e9c97-3ca9-4d79-b82c-07575ecfaca4-whisker-ca-bundle\") pod \"whisker-54bdd5b8c4-wl8cs\" (UID: \"672e9c97-3ca9-4d79-b82c-07575ecfaca4\") " pod="calico-system/whisker-54bdd5b8c4-wl8cs" Aug 13 00:03:22.500749 kubelet[2737]: I0813 00:03:22.500165 2737 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gwdrs\" (UniqueName: \"kubernetes.io/projected/672e9c97-3ca9-4d79-b82c-07575ecfaca4-kube-api-access-gwdrs\") pod \"whisker-54bdd5b8c4-wl8cs\" (UID: \"672e9c97-3ca9-4d79-b82c-07575ecfaca4\") " pod="calico-system/whisker-54bdd5b8c4-wl8cs" Aug 13 00:03:22.790542 env[1658]: time="2025-08-13T00:03:22.789876649Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-54bdd5b8c4-wl8cs,Uid:672e9c97-3ca9-4d79-b82c-07575ecfaca4,Namespace:calico-system,Attempt:0,}" Aug 13 00:03:23.029223 (udev-worker)[3870]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:03:23.031899 systemd-networkd[1381]: cali368090c52a0: Link UP Aug 13 00:03:23.037377 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:23.037572 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali368090c52a0: link becomes ready Aug 13 00:03:23.038104 systemd-networkd[1381]: cali368090c52a0: Gained carrier Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.850 [INFO][3851] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.888 [INFO][3851] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0 whisker-54bdd5b8c4- calico-system 672e9c97-3ca9-4d79-b82c-07575ecfaca4 932 0 2025-08-13 00:03:22 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:54bdd5b8c4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-18-163 whisker-54bdd5b8c4-wl8cs eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali368090c52a0 [] [] }} ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.889 [INFO][3851] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.940 [INFO][3863] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" HandleID="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Workload="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.940 [INFO][3863] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" HandleID="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Workload="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400032a310), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-18-163", "pod":"whisker-54bdd5b8c4-wl8cs", "timestamp":"2025-08-13 00:03:22.940094533 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.940 [INFO][3863] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.940 [INFO][3863] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.940 [INFO][3863] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.956 [INFO][3863] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.966 [INFO][3863] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.974 [INFO][3863] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.979 [INFO][3863] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.983 [INFO][3863] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.984 [INFO][3863] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.987 [INFO][3863] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239 Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:22.995 [INFO][3863] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:23.006 [INFO][3863] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.129/26] block=192.168.83.128/26 handle="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:23.006 [INFO][3863] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.129/26] handle="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" host="ip-172-31-18-163" Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:23.006 [INFO][3863] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:23.076855 env[1658]: 2025-08-13 00:03:23.007 [INFO][3863] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.129/26] IPv6=[] ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" HandleID="k8s-pod-network.d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Workload="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" Aug 13 00:03:23.079385 env[1658]: 2025-08-13 00:03:23.011 [INFO][3851] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0", GenerateName:"whisker-54bdd5b8c4-", Namespace:"calico-system", SelfLink:"", UID:"672e9c97-3ca9-4d79-b82c-07575ecfaca4", ResourceVersion:"932", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"54bdd5b8c4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"whisker-54bdd5b8c4-wl8cs", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.83.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali368090c52a0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:23.079385 env[1658]: 2025-08-13 00:03:23.011 [INFO][3851] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.129/32] ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" Aug 13 00:03:23.079385 env[1658]: 2025-08-13 00:03:23.011 [INFO][3851] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali368090c52a0 ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" Aug 13 00:03:23.079385 env[1658]: 2025-08-13 00:03:23.040 [INFO][3851] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" Aug 13 00:03:23.079385 env[1658]: 2025-08-13 00:03:23.043 [INFO][3851] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0", GenerateName:"whisker-54bdd5b8c4-", Namespace:"calico-system", SelfLink:"", UID:"672e9c97-3ca9-4d79-b82c-07575ecfaca4", ResourceVersion:"932", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"54bdd5b8c4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239", Pod:"whisker-54bdd5b8c4-wl8cs", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.83.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali368090c52a0", MAC:"0e:3a:6e:41:75:cb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:23.079385 env[1658]: 2025-08-13 00:03:23.073 [INFO][3851] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239" Namespace="calico-system" Pod="whisker-54bdd5b8c4-wl8cs" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--54bdd5b8c4--wl8cs-eth0" Aug 13 00:03:23.100164 env[1658]: time="2025-08-13T00:03:23.099998956Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:23.100164 env[1658]: time="2025-08-13T00:03:23.100102758Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:23.100573 env[1658]: time="2025-08-13T00:03:23.100132158Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:23.101244 env[1658]: time="2025-08-13T00:03:23.101130041Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239 pid=3887 runtime=io.containerd.runc.v2 Aug 13 00:03:23.163778 systemd[1]: Started cri-containerd-d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239.scope. Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.195000 audit: BPF prog-id=142 op=LOAD Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3887 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436383365633832663865323365346335336136323966653132363165 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3887 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436383365633832663865323365346335336136323966653132363165 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit: BPF prog-id=143 op=LOAD Aug 13 00:03:23.196000 audit[3897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3887 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436383365633832663865323365346335336136323966653132363165 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.196000 audit: BPF prog-id=144 op=LOAD Aug 13 00:03:23.196000 audit[3897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3887 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436383365633832663865323365346335336136323966653132363165 Aug 13 00:03:23.197000 audit: BPF prog-id=144 op=UNLOAD Aug 13 00:03:23.197000 audit: BPF prog-id=143 op=UNLOAD Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { perfmon } for pid=3897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit[3897]: AVC avc: denied { bpf } for pid=3897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:23.197000 audit: BPF prog-id=145 op=LOAD Aug 13 00:03:23.197000 audit[3897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3887 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436383365633832663865323365346335336136323966653132363165 Aug 13 00:03:23.245528 env[1658]: time="2025-08-13T00:03:23.245473717Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-54bdd5b8c4-wl8cs,Uid:672e9c97-3ca9-4d79-b82c-07575ecfaca4,Namespace:calico-system,Attempt:0,} returns sandbox id \"d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239\"" Aug 13 00:03:23.250448 env[1658]: time="2025-08-13T00:03:23.250383535Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Aug 13 00:03:23.388000 audit[3944]: AVC avc: denied { write } for pid=3944 comm="tee" name="fd" dev="proc" ino=21135 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:23.388000 audit[3944]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff08517f1 a2=241 a3=1b6 items=1 ppid=3928 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.388000 audit: CWD cwd="/etc/service/enabled/cni/log" Aug 13 00:03:23.388000 audit: PATH item=0 name="/dev/fd/63" inode=21114 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:23.388000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:23.463000 audit[3967]: AVC avc: denied { write } for pid=3967 comm="tee" name="fd" dev="proc" ino=21859 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:23.463000 audit[3967]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdea787ef a2=241 a3=1b6 items=1 ppid=3932 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.463000 audit: CWD cwd="/etc/service/enabled/bird6/log" Aug 13 00:03:23.463000 audit: PATH item=0 name="/dev/fd/63" inode=21155 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:23.463000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:23.489000 audit[3981]: AVC avc: denied { write } for pid=3981 comm="tee" name="fd" dev="proc" ino=21181 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:23.503000 audit[3991]: AVC avc: denied { write } for pid=3991 comm="tee" name="fd" dev="proc" ino=21186 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:23.489000 audit[3981]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcd0ae7df a2=241 a3=1b6 items=1 ppid=3933 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.489000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Aug 13 00:03:23.489000 audit: PATH item=0 name="/dev/fd/63" inode=21172 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:23.489000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:23.518000 audit[3983]: AVC avc: denied { write } for pid=3983 comm="tee" name="fd" dev="proc" ino=21192 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:23.519000 audit[3986]: AVC avc: denied { write } for pid=3986 comm="tee" name="fd" dev="proc" ino=21195 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:23.518000 audit[3983]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff456d7f0 a2=241 a3=1b6 items=1 ppid=3941 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.518000 audit: CWD cwd="/etc/service/enabled/bird/log" Aug 13 00:03:23.518000 audit: PATH item=0 name="/dev/fd/63" inode=21173 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:23.519000 audit[3986]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee2027ef a2=241 a3=1b6 items=1 ppid=3940 pid=3986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.518000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:23.519000 audit: CWD cwd="/etc/service/enabled/confd/log" Aug 13 00:03:23.519000 audit: PATH item=0 name="/dev/fd/63" inode=21174 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:23.519000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:23.503000 audit[3991]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff158f7e0 a2=241 a3=1b6 items=1 ppid=3939 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.503000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Aug 13 00:03:23.503000 audit: PATH item=0 name="/dev/fd/63" inode=21177 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:23.531000 audit[3994]: AVC avc: denied { write } for pid=3994 comm="tee" name="fd" dev="proc" ino=21201 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:03:23.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:23.531000 audit[3994]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd82477ef a2=241 a3=1b6 items=1 ppid=3942 pid=3994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:23.531000 audit: CWD cwd="/etc/service/enabled/felix/log" Aug 13 00:03:23.531000 audit: PATH item=0 name="/dev/fd/63" inode=21178 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:23.531000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:03:24.016759 kubelet[2737]: I0813 00:03:24.016682 2737 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="0a69438c-dc61-4b3b-a302-51fecc0cc7ea" path="/var/lib/kubelet/pods/0a69438c-dc61-4b3b-a302-51fecc0cc7ea/volumes" Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.151000 audit: BPF prog-id=146 op=LOAD Aug 13 00:03:24.151000 audit[4020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0f863d8 a2=98 a3=ffffe0f863c8 items=0 ppid=3947 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.151000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.152000 audit: BPF prog-id=146 op=UNLOAD Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit: BPF prog-id=147 op=LOAD Aug 13 00:03:24.152000 audit[4020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0f86288 a2=74 a3=95 items=0 ppid=3947 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.152000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.152000 audit: BPF prog-id=147 op=UNLOAD Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit: BPF prog-id=148 op=LOAD Aug 13 00:03:24.152000 audit[4020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0f862b8 a2=40 a3=ffffe0f862e8 items=0 ppid=3947 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.152000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.152000 audit: BPF prog-id=148 op=UNLOAD Aug 13 00:03:24.152000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.152000 audit[4020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe0f863d0 a2=50 a3=0 items=0 ppid=3947 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.152000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.161000 audit: BPF prog-id=149 op=LOAD Aug 13 00:03:24.161000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffec996248 a2=98 a3=ffffec996238 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.161000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.162000 audit: BPF prog-id=149 op=UNLOAD Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.163000 audit: BPF prog-id=150 op=LOAD Aug 13 00:03:24.163000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffec995ed8 a2=74 a3=95 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.163000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.165000 audit: BPF prog-id=150 op=UNLOAD Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.165000 audit: BPF prog-id=151 op=LOAD Aug 13 00:03:24.165000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffec995f38 a2=94 a3=2 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.165000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.167000 audit: BPF prog-id=151 op=UNLOAD Aug 13 00:03:24.380004 systemd-networkd[1381]: cali368090c52a0: Gained IPv6LL Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit: BPF prog-id=152 op=LOAD Aug 13 00:03:24.402000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffec995ef8 a2=40 a3=ffffec995f28 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.402000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.402000 audit: BPF prog-id=152 op=UNLOAD Aug 13 00:03:24.402000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.402000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffec996010 a2=50 a3=0 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.402000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.419000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.419000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec995f68 a2=28 a3=ffffec996098 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.419000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec995f98 a2=28 a3=ffffec9960c8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec995e48 a2=28 a3=ffffec995f78 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec995fb8 a2=28 a3=ffffec9960e8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec995f98 a2=28 a3=ffffec9960c8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec995f88 a2=28 a3=ffffec9960b8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec995fb8 a2=28 a3=ffffec9960e8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec995f98 a2=28 a3=ffffec9960c8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec995fb8 a2=28 a3=ffffec9960e8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec995f88 a2=28 a3=ffffec9960b8 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.420000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.420000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec996008 a2=28 a3=ffffec996148 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.420000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffec995d40 a2=50 a3=0 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.421000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.421000 audit: BPF prog-id=153 op=LOAD Aug 13 00:03:24.421000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffec995d48 a2=94 a3=5 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.421000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.422000 audit: BPF prog-id=153 op=UNLOAD Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffec995e50 a2=50 a3=0 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.422000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffec995f98 a2=4 a3=3 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.422000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { confidentiality } for pid=4021 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.422000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffec995f78 a2=94 a3=6 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.422000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.422000 audit[4021]: AVC avc: denied { confidentiality } for pid=4021 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.422000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffec995748 a2=94 a3=83 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.422000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { perfmon } for pid=4021 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { bpf } for pid=4021 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.423000 audit[4021]: AVC avc: denied { confidentiality } for pid=4021 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.423000 audit[4021]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffec995748 a2=94 a3=83 items=0 ppid=3947 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.423000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.452000 audit: BPF prog-id=154 op=LOAD Aug 13 00:03:24.452000 audit[4042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe487f3c8 a2=98 a3=ffffe487f3b8 items=0 ppid=3947 pid=4042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.452000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:03:24.455000 audit: BPF prog-id=154 op=UNLOAD Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.455000 audit: BPF prog-id=155 op=LOAD Aug 13 00:03:24.455000 audit[4042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe487f278 a2=74 a3=95 items=0 ppid=3947 pid=4042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.455000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:03:24.457000 audit: BPF prog-id=155 op=UNLOAD Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { perfmon } for pid=4042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit[4042]: AVC avc: denied { bpf } for pid=4042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.457000 audit: BPF prog-id=156 op=LOAD Aug 13 00:03:24.457000 audit[4042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe487f2a8 a2=40 a3=ffffe487f2d8 items=0 ppid=3947 pid=4042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.457000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:03:24.457000 audit: BPF prog-id=156 op=UNLOAD Aug 13 00:03:24.632076 (udev-worker)[3800]: Network interface NamePolicy= disabled on kernel command line. Aug 13 00:03:24.643962 systemd-networkd[1381]: vxlan.calico: Link UP Aug 13 00:03:24.643992 systemd-networkd[1381]: vxlan.calico: Gained carrier Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit: BPF prog-id=157 op=LOAD Aug 13 00:03:24.695000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff5ce9bc8 a2=98 a3=fffff5ce9bb8 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.695000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.695000 audit: BPF prog-id=157 op=UNLOAD Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit: BPF prog-id=158 op=LOAD Aug 13 00:03:24.695000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff5ce98a8 a2=74 a3=95 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.695000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.695000 audit: BPF prog-id=158 op=UNLOAD Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit: BPF prog-id=159 op=LOAD Aug 13 00:03:24.695000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff5ce9908 a2=94 a3=2 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.695000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.695000 audit: BPF prog-id=159 op=UNLOAD Aug 13 00:03:24.695000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.695000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff5ce9938 a2=28 a3=fffff5ce9a68 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.695000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff5ce9968 a2=28 a3=fffff5ce9a98 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff5ce9818 a2=28 a3=fffff5ce9948 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff5ce9988 a2=28 a3=fffff5ce9ab8 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff5ce9968 a2=28 a3=fffff5ce9a98 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff5ce9958 a2=28 a3=fffff5ce9a88 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff5ce9988 a2=28 a3=fffff5ce9ab8 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff5ce9968 a2=28 a3=fffff5ce9a98 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff5ce9988 a2=28 a3=fffff5ce9ab8 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff5ce9958 a2=28 a3=fffff5ce9a88 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff5ce99d8 a2=28 a3=fffff5ce9b18 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.696000 audit: BPF prog-id=160 op=LOAD Aug 13 00:03:24.696000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff5ce97f8 a2=40 a3=fffff5ce9828 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.696000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.696000 audit: BPF prog-id=160 op=UNLOAD Aug 13 00:03:24.703000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.703000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffff5ce9820 a2=50 a3=0 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.703000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffff5ce9820 a2=50 a3=0 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.704000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit: BPF prog-id=161 op=LOAD Aug 13 00:03:24.704000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff5ce8f88 a2=94 a3=2 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.704000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.704000 audit: BPF prog-id=161 op=UNLOAD Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { perfmon } for pid=4066 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit[4066]: AVC avc: denied { bpf } for pid=4066 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.704000 audit: BPF prog-id=162 op=LOAD Aug 13 00:03:24.704000 audit[4066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff5ce9118 a2=94 a3=30 items=0 ppid=3947 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.704000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.725000 audit: BPF prog-id=163 op=LOAD Aug 13 00:03:24.725000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff46f73f8 a2=98 a3=fffff46f73e8 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.725000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.725000 audit: BPF prog-id=163 op=UNLOAD Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit: BPF prog-id=164 op=LOAD Aug 13 00:03:24.726000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff46f7088 a2=74 a3=95 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.726000 audit: BPF prog-id=164 op=UNLOAD Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.726000 audit: BPF prog-id=165 op=LOAD Aug 13 00:03:24.726000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff46f70e8 a2=94 a3=2 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.726000 audit: BPF prog-id=165 op=UNLOAD Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.918000 audit: BPF prog-id=166 op=LOAD Aug 13 00:03:24.918000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff46f70a8 a2=40 a3=fffff46f70d8 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.918000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.928000 audit: BPF prog-id=166 op=UNLOAD Aug 13 00:03:24.928000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.928000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff46f71c0 a2=50 a3=0 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.928000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.948000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.948000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff46f7118 a2=28 a3=fffff46f7248 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.948000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.949000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.949000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff46f7148 a2=28 a3=fffff46f7278 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.949000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.949000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.949000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff46f6ff8 a2=28 a3=fffff46f7128 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.949000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.949000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.949000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff46f7168 a2=28 a3=fffff46f7298 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.949000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.950000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.950000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff46f7148 a2=28 a3=fffff46f7278 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.950000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.950000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.950000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff46f7138 a2=28 a3=fffff46f7268 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.950000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.950000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.950000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff46f7168 a2=28 a3=fffff46f7298 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.950000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.950000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.950000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff46f7148 a2=28 a3=fffff46f7278 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.950000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.950000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.950000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff46f7168 a2=28 a3=fffff46f7298 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.950000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.950000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.950000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff46f7138 a2=28 a3=fffff46f7268 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.950000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.950000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.950000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff46f71b8 a2=28 a3=fffff46f72f8 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.950000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff46f6ef0 a2=50 a3=0 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.951000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit: BPF prog-id=167 op=LOAD Aug 13 00:03:24.951000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff46f6ef8 a2=94 a3=5 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.951000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.951000 audit: BPF prog-id=167 op=UNLOAD Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff46f7000 a2=50 a3=0 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.951000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff46f7148 a2=4 a3=3 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.951000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.951000 audit[4070]: AVC avc: denied { confidentiality } for pid=4070 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.951000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff46f7128 a2=94 a3=6 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.951000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { confidentiality } for pid=4070 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.955000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff46f68f8 a2=94 a3=83 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.955000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.955000 audit[4070]: AVC avc: denied { confidentiality } for pid=4070 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:03:24.955000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff46f68f8 a2=94 a3=83 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.955000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.957000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.957000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff46f8338 a2=10 a3=fffff46f8428 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.957000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.957000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff46f81f8 a2=10 a3=fffff46f82e8 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.957000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.957000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff46f8168 a2=10 a3=fffff46f82e8 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.957000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:24.957000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff46f8168 a2=10 a3=fffff46f82e8 items=0 ppid=3947 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:24.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:03:24.974000 audit: BPF prog-id=162 op=UNLOAD Aug 13 00:03:25.011762 env[1658]: time="2025-08-13T00:03:25.011034272Z" level=info msg="StopPodSandbox for \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\"" Aug 13 00:03:25.137149 env[1658]: time="2025-08-13T00:03:25.137065683Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:25.145534 env[1658]: time="2025-08-13T00:03:25.145458151Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:25.177154 env[1658]: time="2025-08-13T00:03:25.177091789Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:25.195483 env[1658]: time="2025-08-13T00:03:25.195352643Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:25.213806 env[1658]: time="2025-08-13T00:03:25.207852238Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Aug 13 00:03:25.234930 env[1658]: time="2025-08-13T00:03:25.234871599Z" level=info msg="CreateContainer within sandbox \"d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Aug 13 00:03:25.284553 env[1658]: time="2025-08-13T00:03:25.284486225Z" level=info msg="CreateContainer within sandbox \"d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"eb749e39e60de231f9eae50c43ae8b6ce11c27724dafc784be04852e12c66417\"" Aug 13 00:03:25.289956 env[1658]: time="2025-08-13T00:03:25.287425428Z" level=info msg="StartContainer for \"eb749e39e60de231f9eae50c43ae8b6ce11c27724dafc784be04852e12c66417\"" Aug 13 00:03:25.332000 audit[4110]: NETFILTER_CFG table=raw:105 family=2 entries=21 op=nft_register_chain pid=4110 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:25.332000 audit[4110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff2439850 a2=0 a3=ffffa63b1fa8 items=0 ppid=3947 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.332000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:25.348000 audit[4112]: NETFILTER_CFG table=nat:106 family=2 entries=15 op=nft_register_chain pid=4112 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:25.348000 audit[4112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffffe21670 a2=0 a3=ffff829e4fa8 items=0 ppid=3947 pid=4112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.348000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:25.350000 audit[4111]: NETFILTER_CFG table=mangle:107 family=2 entries=16 op=nft_register_chain pid=4111 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:25.350000 audit[4111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffff55915f0 a2=0 a3=ffff817bffa8 items=0 ppid=3947 pid=4111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.350000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:25.461019 systemd[1]: Started cri-containerd-eb749e39e60de231f9eae50c43ae8b6ce11c27724dafc784be04852e12c66417.scope. Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.273 [INFO][4092] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.273 [INFO][4092] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" iface="eth0" netns="/var/run/netns/cni-5199b546-d812-e141-a752-90a4966accef" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.274 [INFO][4092] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" iface="eth0" netns="/var/run/netns/cni-5199b546-d812-e141-a752-90a4966accef" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.275 [INFO][4092] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" iface="eth0" netns="/var/run/netns/cni-5199b546-d812-e141-a752-90a4966accef" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.275 [INFO][4092] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.275 [INFO][4092] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.434 [INFO][4114] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.435 [INFO][4114] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.435 [INFO][4114] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.474 [WARNING][4114] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.474 [INFO][4114] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.480 [INFO][4114] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:25.490347 env[1658]: 2025-08-13 00:03:25.485 [INFO][4092] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:25.496359 systemd[1]: run-netns-cni\x2d5199b546\x2dd812\x2de141\x2da752\x2d90a4966accef.mount: Deactivated successfully. Aug 13 00:03:25.498117 env[1658]: time="2025-08-13T00:03:25.498049730Z" level=info msg="TearDown network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\" successfully" Aug 13 00:03:25.498313 env[1658]: time="2025-08-13T00:03:25.498255640Z" level=info msg="StopPodSandbox for \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\" returns successfully" Aug 13 00:03:25.499409 env[1658]: time="2025-08-13T00:03:25.499309131Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zzpcx,Uid:09dc4739-c8b2-41d7-b069-31f6814494f2,Namespace:calico-apiserver,Attempt:1,}" Aug 13 00:03:25.481000 audit[4125]: NETFILTER_CFG table=filter:108 family=2 entries=94 op=nft_register_chain pid=4125 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:25.481000 audit[4125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffe9c27280 a2=0 a3=ffff860a8fa8 items=0 ppid=3947 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.481000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.591000 audit: BPF prog-id=168 op=LOAD Aug 13 00:03:25.591000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.591000 audit[4130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3887 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562373439653339653630646532333166396561653530633433616538 Aug 13 00:03:25.591000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.591000 audit[4130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3887 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562373439653339653630646532333166396561653530633433616538 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit: BPF prog-id=169 op=LOAD Aug 13 00:03:25.592000 audit[4130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3887 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562373439653339653630646532333166396561653530633433616538 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit: BPF prog-id=170 op=LOAD Aug 13 00:03:25.592000 audit[4130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3887 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562373439653339653630646532333166396561653530633433616538 Aug 13 00:03:25.592000 audit: BPF prog-id=170 op=UNLOAD Aug 13 00:03:25.592000 audit: BPF prog-id=169 op=UNLOAD Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.592000 audit: BPF prog-id=171 op=LOAD Aug 13 00:03:25.592000 audit[4130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3887 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562373439653339653630646532333166396561653530633433616538 Aug 13 00:03:25.677681 env[1658]: time="2025-08-13T00:03:25.677592051Z" level=info msg="StartContainer for \"eb749e39e60de231f9eae50c43ae8b6ce11c27724dafc784be04852e12c66417\" returns successfully" Aug 13 00:03:25.682391 env[1658]: time="2025-08-13T00:03:25.682323580Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Aug 13 00:03:25.722000 audit[4147]: AVC avc: denied { search } for pid=4147 comm="nginx" name="crypto" dev="proc" ino=22303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c450 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Aug 13 00:03:25.722000 audit[4147]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff95756958 a2=0 a3=0 items=0 ppid=3887 pid=4147 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c450 key=(null) Aug 13 00:03:25.722000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Aug 13 00:03:25.814772 systemd-networkd[1381]: calibcc2aaccf11: Link UP Aug 13 00:03:25.820228 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:25.820440 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibcc2aaccf11: link becomes ready Aug 13 00:03:25.820661 systemd-networkd[1381]: calibcc2aaccf11: Gained carrier Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.650 [INFO][4156] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0 calico-apiserver-855f9bdb85- calico-apiserver 09dc4739-c8b2-41d7-b069-31f6814494f2 946 0 2025-08-13 00:02:53 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:855f9bdb85 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-18-163 calico-apiserver-855f9bdb85-zzpcx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibcc2aaccf11 [] [] }} ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.650 [INFO][4156] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.731 [INFO][4177] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" HandleID="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.731 [INFO][4177] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" HandleID="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd6c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-18-163", "pod":"calico-apiserver-855f9bdb85-zzpcx", "timestamp":"2025-08-13 00:03:25.731105505 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.731 [INFO][4177] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.731 [INFO][4177] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.731 [INFO][4177] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.750 [INFO][4177] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.757 [INFO][4177] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.765 [INFO][4177] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.768 [INFO][4177] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.772 [INFO][4177] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.773 [INFO][4177] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.776 [INFO][4177] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46 Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.787 [INFO][4177] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.796 [INFO][4177] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.130/26] block=192.168.83.128/26 handle="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.796 [INFO][4177] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.130/26] handle="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" host="ip-172-31-18-163" Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.797 [INFO][4177] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:25.852495 env[1658]: 2025-08-13 00:03:25.797 [INFO][4177] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.130/26] IPv6=[] ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" HandleID="k8s-pod-network.bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.853768 env[1658]: 2025-08-13 00:03:25.800 [INFO][4156] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"09dc4739-c8b2-41d7-b069-31f6814494f2", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"calico-apiserver-855f9bdb85-zzpcx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibcc2aaccf11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:25.853768 env[1658]: 2025-08-13 00:03:25.800 [INFO][4156] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.130/32] ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.853768 env[1658]: 2025-08-13 00:03:25.800 [INFO][4156] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibcc2aaccf11 ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.853768 env[1658]: 2025-08-13 00:03:25.825 [INFO][4156] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.853768 env[1658]: 2025-08-13 00:03:25.828 [INFO][4156] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"09dc4739-c8b2-41d7-b069-31f6814494f2", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46", Pod:"calico-apiserver-855f9bdb85-zzpcx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibcc2aaccf11", MAC:"7a:0b:77:91:4b:d9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:25.853768 env[1658]: 2025-08-13 00:03:25.847 [INFO][4156] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zzpcx" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:25.877411 env[1658]: time="2025-08-13T00:03:25.877221886Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:25.877411 env[1658]: time="2025-08-13T00:03:25.877344863Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:25.877411 env[1658]: time="2025-08-13T00:03:25.877372536Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:25.880200 env[1658]: time="2025-08-13T00:03:25.878241417Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46 pid=4206 runtime=io.containerd.runc.v2 Aug 13 00:03:25.890240 kubelet[2737]: I0813 00:03:25.890172 2737 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:25.890000 audit[4216]: NETFILTER_CFG table=filter:109 family=2 entries=50 op=nft_register_chain pid=4216 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:25.890000 audit[4216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffc2a06c20 a2=0 a3=ffff9f02bfa8 items=0 ppid=3947 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.890000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:25.923027 systemd[1]: Started cri-containerd-bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46.scope. Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.991000 audit: BPF prog-id=172 op=LOAD Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4206 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262373239643266663233343538393538383133346563376639356333 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4206 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262373239643266663233343538393538383133346563376639356333 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit: BPF prog-id=173 op=LOAD Aug 13 00:03:25.992000 audit[4217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4206 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262373239643266663233343538393538383133346563376639356333 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit: BPF prog-id=174 op=LOAD Aug 13 00:03:25.992000 audit[4217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4206 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262373239643266663233343538393538383133346563376639356333 Aug 13 00:03:25.992000 audit: BPF prog-id=174 op=UNLOAD Aug 13 00:03:25.992000 audit: BPF prog-id=173 op=UNLOAD Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { perfmon } for pid=4217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit[4217]: AVC avc: denied { bpf } for pid=4217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:25.992000 audit: BPF prog-id=175 op=LOAD Aug 13 00:03:25.992000 audit[4217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4206 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262373239643266663233343538393538383133346563376639356333 Aug 13 00:03:26.071611 env[1658]: time="2025-08-13T00:03:26.071537326Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zzpcx,Uid:09dc4739-c8b2-41d7-b069-31f6814494f2,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46\"" Aug 13 00:03:26.364053 systemd-networkd[1381]: vxlan.calico: Gained IPv6LL Aug 13 00:03:27.011826 env[1658]: time="2025-08-13T00:03:27.011748222Z" level=info msg="StopPodSandbox for \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\"" Aug 13 00:03:27.012325 env[1658]: time="2025-08-13T00:03:27.012247139Z" level=info msg="StopPodSandbox for \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\"" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.269 [INFO][4303] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.270 [INFO][4303] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" iface="eth0" netns="/var/run/netns/cni-248fc063-08ff-6928-a142-bc8009c01d6c" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.270 [INFO][4303] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" iface="eth0" netns="/var/run/netns/cni-248fc063-08ff-6928-a142-bc8009c01d6c" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.271 [INFO][4303] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" iface="eth0" netns="/var/run/netns/cni-248fc063-08ff-6928-a142-bc8009c01d6c" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.271 [INFO][4303] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.272 [INFO][4303] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.322 [INFO][4321] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.324 [INFO][4321] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.324 [INFO][4321] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.351 [WARNING][4321] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.351 [INFO][4321] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.355 [INFO][4321] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:27.363181 env[1658]: 2025-08-13 00:03:27.360 [INFO][4303] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:27.370660 env[1658]: time="2025-08-13T00:03:27.370584393Z" level=info msg="TearDown network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\" successfully" Aug 13 00:03:27.370896 env[1658]: time="2025-08-13T00:03:27.370859844Z" level=info msg="StopPodSandbox for \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\" returns successfully" Aug 13 00:03:27.375918 systemd[1]: run-netns-cni\x2d248fc063\x2d08ff\x2d6928\x2da142\x2dbc8009c01d6c.mount: Deactivated successfully. Aug 13 00:03:27.378525 env[1658]: time="2025-08-13T00:03:27.378473631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zm582,Uid:673954fb-b359-43b2-9081-665048e7cbd1,Namespace:calico-apiserver,Attempt:1,}" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.249 [INFO][4304] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.249 [INFO][4304] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" iface="eth0" netns="/var/run/netns/cni-51c2834a-369f-c9b0-058b-7a2cf5d88d6e" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.249 [INFO][4304] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" iface="eth0" netns="/var/run/netns/cni-51c2834a-369f-c9b0-058b-7a2cf5d88d6e" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.249 [INFO][4304] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" iface="eth0" netns="/var/run/netns/cni-51c2834a-369f-c9b0-058b-7a2cf5d88d6e" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.249 [INFO][4304] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.250 [INFO][4304] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.366 [INFO][4316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.367 [INFO][4316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.367 [INFO][4316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.429 [WARNING][4316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.429 [INFO][4316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.436 [INFO][4316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:27.463118 env[1658]: 2025-08-13 00:03:27.454 [INFO][4304] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:27.468555 env[1658]: time="2025-08-13T00:03:27.468475288Z" level=info msg="TearDown network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\" successfully" Aug 13 00:03:27.468785 env[1658]: time="2025-08-13T00:03:27.468733435Z" level=info msg="StopPodSandbox for \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\" returns successfully" Aug 13 00:03:27.471669 systemd[1]: run-netns-cni\x2d51c2834a\x2d369f\x2dc9b0\x2d058b\x2d7a2cf5d88d6e.mount: Deactivated successfully. Aug 13 00:03:27.490425 env[1658]: time="2025-08-13T00:03:27.490342336Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f4cfff9d-wr7d6,Uid:01d325a3-f014-43df-9108-2d734e893a16,Namespace:calico-system,Attempt:1,}" Aug 13 00:03:27.646145 systemd-networkd[1381]: calibcc2aaccf11: Gained IPv6LL Aug 13 00:03:27.887423 systemd-networkd[1381]: cali1b5898b3b3b: Link UP Aug 13 00:03:27.893783 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:27.893926 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1b5898b3b3b: link becomes ready Aug 13 00:03:27.894180 systemd-networkd[1381]: cali1b5898b3b3b: Gained carrier Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.648 [INFO][4329] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0 calico-apiserver-855f9bdb85- calico-apiserver 673954fb-b359-43b2-9081-665048e7cbd1 962 0 2025-08-13 00:02:53 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:855f9bdb85 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-18-163 calico-apiserver-855f9bdb85-zm582 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1b5898b3b3b [] [] }} ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.648 [INFO][4329] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.787 [INFO][4352] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" HandleID="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.787 [INFO][4352] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" HandleID="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb6e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-18-163", "pod":"calico-apiserver-855f9bdb85-zm582", "timestamp":"2025-08-13 00:03:27.786972017 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.788 [INFO][4352] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.788 [INFO][4352] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.788 [INFO][4352] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.809 [INFO][4352] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.826 [INFO][4352] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.834 [INFO][4352] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.840 [INFO][4352] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.844 [INFO][4352] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.845 [INFO][4352] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.847 [INFO][4352] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100 Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.857 [INFO][4352] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.870 [INFO][4352] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.131/26] block=192.168.83.128/26 handle="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.870 [INFO][4352] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.131/26] handle="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" host="ip-172-31-18-163" Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.871 [INFO][4352] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:27.945548 env[1658]: 2025-08-13 00:03:27.871 [INFO][4352] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.131/26] IPv6=[] ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" HandleID="k8s-pod-network.1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.946817 env[1658]: 2025-08-13 00:03:27.874 [INFO][4329] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"673954fb-b359-43b2-9081-665048e7cbd1", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"calico-apiserver-855f9bdb85-zm582", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1b5898b3b3b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:27.946817 env[1658]: 2025-08-13 00:03:27.874 [INFO][4329] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.131/32] ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.946817 env[1658]: 2025-08-13 00:03:27.874 [INFO][4329] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1b5898b3b3b ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.946817 env[1658]: 2025-08-13 00:03:27.901 [INFO][4329] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:27.946817 env[1658]: 2025-08-13 00:03:27.902 [INFO][4329] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"673954fb-b359-43b2-9081-665048e7cbd1", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100", Pod:"calico-apiserver-855f9bdb85-zm582", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1b5898b3b3b", MAC:"e2:f4:03:ef:3d:78", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:27.946817 env[1658]: 2025-08-13 00:03:27.937 [INFO][4329] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100" Namespace="calico-apiserver" Pod="calico-apiserver-855f9bdb85-zm582" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:28.016138 env[1658]: time="2025-08-13T00:03:28.016082824Z" level=info msg="StopPodSandbox for \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\"" Aug 13 00:03:28.018518 env[1658]: time="2025-08-13T00:03:28.018351457Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:28.018670 env[1658]: time="2025-08-13T00:03:28.018602212Z" level=info msg="StopPodSandbox for \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\"" Aug 13 00:03:28.019778 env[1658]: time="2025-08-13T00:03:28.019076012Z" level=info msg="StopPodSandbox for \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\"" Aug 13 00:03:28.021228 env[1658]: time="2025-08-13T00:03:28.020989659Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:28.021574 env[1658]: time="2025-08-13T00:03:28.021494672Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:28.026453 env[1658]: time="2025-08-13T00:03:28.024661034Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100 pid=4381 runtime=io.containerd.runc.v2 Aug 13 00:03:28.122253 systemd[1]: Started cri-containerd-1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100.scope. Aug 13 00:03:28.186490 systemd-networkd[1381]: cali74d398590f2: Link UP Aug 13 00:03:28.204316 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali74d398590f2: link becomes ready Aug 13 00:03:28.199933 systemd-networkd[1381]: cali74d398590f2: Gained carrier Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.707 [INFO][4338] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0 calico-kube-controllers-85f4cfff9d- calico-system 01d325a3-f014-43df-9108-2d734e893a16 961 0 2025-08-13 00:03:01 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:85f4cfff9d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-18-163 calico-kube-controllers-85f4cfff9d-wr7d6 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali74d398590f2 [] [] }} ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.707 [INFO][4338] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.816 [INFO][4358] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" HandleID="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.816 [INFO][4358] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" HandleID="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c1a90), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-18-163", "pod":"calico-kube-controllers-85f4cfff9d-wr7d6", "timestamp":"2025-08-13 00:03:27.816604234 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.817 [INFO][4358] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.871 [INFO][4358] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.871 [INFO][4358] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:27.936 [INFO][4358] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.017 [INFO][4358] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.055 [INFO][4358] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.072 [INFO][4358] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.080 [INFO][4358] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.080 [INFO][4358] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.094 [INFO][4358] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.112 [INFO][4358] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.155 [INFO][4358] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.132/26] block=192.168.83.128/26 handle="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.155 [INFO][4358] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.132/26] handle="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" host="ip-172-31-18-163" Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.155 [INFO][4358] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:28.269245 env[1658]: 2025-08-13 00:03:28.155 [INFO][4358] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.132/26] IPv6=[] ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" HandleID="k8s-pod-network.322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:28.271007 env[1658]: 2025-08-13 00:03:28.161 [INFO][4338] cni-plugin/k8s.go 418: Populated endpoint ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0", GenerateName:"calico-kube-controllers-85f4cfff9d-", Namespace:"calico-system", SelfLink:"", UID:"01d325a3-f014-43df-9108-2d734e893a16", ResourceVersion:"961", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f4cfff9d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"calico-kube-controllers-85f4cfff9d-wr7d6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali74d398590f2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:28.271007 env[1658]: 2025-08-13 00:03:28.162 [INFO][4338] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.132/32] ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:28.271007 env[1658]: 2025-08-13 00:03:28.162 [INFO][4338] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali74d398590f2 ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:28.271007 env[1658]: 2025-08-13 00:03:28.198 [INFO][4338] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:28.271007 env[1658]: 2025-08-13 00:03:28.199 [INFO][4338] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0", GenerateName:"calico-kube-controllers-85f4cfff9d-", Namespace:"calico-system", SelfLink:"", UID:"01d325a3-f014-43df-9108-2d734e893a16", ResourceVersion:"961", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f4cfff9d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd", Pod:"calico-kube-controllers-85f4cfff9d-wr7d6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali74d398590f2", MAC:"ea:e7:ff:c3:d6:37", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:28.271007 env[1658]: 2025-08-13 00:03:28.252 [INFO][4338] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd" Namespace="calico-system" Pod="calico-kube-controllers-85f4cfff9d-wr7d6" WorkloadEndpoint="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:28.304000 audit[4442]: NETFILTER_CFG table=filter:110 family=2 entries=41 op=nft_register_chain pid=4442 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:28.312505 kernel: kauditd_printk_skb: 767 callbacks suppressed Aug 13 00:03:28.312771 kernel: audit: type=1325 audit(1755043408.304:1106): table=filter:110 family=2 entries=41 op=nft_register_chain pid=4442 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:28.304000 audit[4442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23076 a0=3 a1=ffffd0a22bb0 a2=0 a3=ffffa5d11fa8 items=0 ppid=3947 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.331331 kernel: audit: type=1300 audit(1755043408.304:1106): arch=c00000b7 syscall=211 success=yes exit=23076 a0=3 a1=ffffd0a22bb0 a2=0 a3=ffffa5d11fa8 items=0 ppid=3947 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.304000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:28.352435 kernel: audit: type=1327 audit(1755043408.304:1106): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:28.401505 env[1658]: time="2025-08-13T00:03:28.401310045Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:28.404724 env[1658]: time="2025-08-13T00:03:28.404602288Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:28.405041 env[1658]: time="2025-08-13T00:03:28.404963768Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:28.417731 env[1658]: time="2025-08-13T00:03:28.417622906Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd pid=4460 runtime=io.containerd.runc.v2 Aug 13 00:03:28.588338 systemd[1]: Started cri-containerd-322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd.scope. Aug 13 00:03:28.625353 systemd[1]: run-containerd-runc-k8s.io-322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd-runc.3TQlkZ.mount: Deactivated successfully. Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.402 [INFO][4427] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.402 [INFO][4427] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" iface="eth0" netns="/var/run/netns/cni-53a1eb3a-214e-c5e6-3479-194163fb84bc" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.403 [INFO][4427] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" iface="eth0" netns="/var/run/netns/cni-53a1eb3a-214e-c5e6-3479-194163fb84bc" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.404 [INFO][4427] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" iface="eth0" netns="/var/run/netns/cni-53a1eb3a-214e-c5e6-3479-194163fb84bc" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.404 [INFO][4427] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.404 [INFO][4427] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.563 [INFO][4471] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.570 [INFO][4471] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.570 [INFO][4471] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.635 [WARNING][4471] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.635 [INFO][4471] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.647 [INFO][4471] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:28.668380 env[1658]: 2025-08-13 00:03:28.650 [INFO][4427] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:28.675624 env[1658]: time="2025-08-13T00:03:28.675543376Z" level=info msg="TearDown network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\" successfully" Aug 13 00:03:28.675624 env[1658]: time="2025-08-13T00:03:28.675610024Z" level=info msg="StopPodSandbox for \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\" returns successfully" Aug 13 00:03:28.676883 env[1658]: time="2025-08-13T00:03:28.676790524Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-txddh,Uid:57449ba8-d127-4f60-b657-bff80db1c884,Namespace:kube-system,Attempt:1,}" Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.740065 kernel: audit: type=1400 audit(1755043408.720:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.740233 kernel: audit: type=1400 audit(1755043408.720:1108): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.755460 kernel: audit: type=1400 audit(1755043408.720:1109): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.773387 kernel: audit: type=1400 audit(1755043408.720:1110): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.773561 kernel: audit: type=1400 audit(1755043408.720:1111): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.791106 kernel: audit: type=1400 audit(1755043408.720:1112): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.805989 kernel: audit: type=1400 audit(1755043408.720:1113): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.736000 audit: BPF prog-id=176 op=LOAD Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4381 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163323361346465303633646535396362373761666161663839383033 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4381 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163323361346465303633646535396362373761666161663839383033 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit: BPF prog-id=177 op=LOAD Aug 13 00:03:28.739000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4381 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163323361346465303633646535396362373761666161663839383033 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit: BPF prog-id=178 op=LOAD Aug 13 00:03:28.739000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4381 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163323361346465303633646535396362373761666161663839383033 Aug 13 00:03:28.739000 audit: BPF prog-id=178 op=UNLOAD Aug 13 00:03:28.739000 audit: BPF prog-id=177 op=UNLOAD Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:28.739000 audit: BPF prog-id=179 op=LOAD Aug 13 00:03:28.739000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4381 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163323361346465303633646535396362373761666161663839383033 Aug 13 00:03:28.770000 audit[4505]: NETFILTER_CFG table=filter:111 family=2 entries=44 op=nft_register_chain pid=4505 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:28.770000 audit[4505]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21952 a0=3 a1=ffffe0caf7d0 a2=0 a3=ffffbac0bfa8 items=0 ppid=3947 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:28.770000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.531 [INFO][4428] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.531 [INFO][4428] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" iface="eth0" netns="/var/run/netns/cni-e2bb16e6-376b-7215-7a47-a274ee3dfdba" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.532 [INFO][4428] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" iface="eth0" netns="/var/run/netns/cni-e2bb16e6-376b-7215-7a47-a274ee3dfdba" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.533 [INFO][4428] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" iface="eth0" netns="/var/run/netns/cni-e2bb16e6-376b-7215-7a47-a274ee3dfdba" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.534 [INFO][4428] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.534 [INFO][4428] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.817 [INFO][4498] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.823 [INFO][4498] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.823 [INFO][4498] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.865 [WARNING][4498] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.865 [INFO][4498] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.873 [INFO][4498] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:28.892492 env[1658]: 2025-08-13 00:03:28.889 [INFO][4428] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.441 [INFO][4424] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.441 [INFO][4424] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" iface="eth0" netns="/var/run/netns/cni-331eb860-a3a9-7c89-e4dc-70b1777e9234" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.442 [INFO][4424] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" iface="eth0" netns="/var/run/netns/cni-331eb860-a3a9-7c89-e4dc-70b1777e9234" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.470 [INFO][4424] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" iface="eth0" netns="/var/run/netns/cni-331eb860-a3a9-7c89-e4dc-70b1777e9234" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.470 [INFO][4424] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.470 [INFO][4424] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.850 [INFO][4487] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.856 [INFO][4487] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.873 [INFO][4487] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.900 [WARNING][4487] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.900 [INFO][4487] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.905 [INFO][4487] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:28.911009 env[1658]: 2025-08-13 00:03:28.908 [INFO][4424] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:28.918820 env[1658]: time="2025-08-13T00:03:28.918735948Z" level=info msg="TearDown network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\" successfully" Aug 13 00:03:28.918820 env[1658]: time="2025-08-13T00:03:28.918807493Z" level=info msg="StopPodSandbox for \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\" returns successfully" Aug 13 00:03:28.919131 env[1658]: time="2025-08-13T00:03:28.918440505Z" level=info msg="TearDown network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\" successfully" Aug 13 00:03:28.919399 env[1658]: time="2025-08-13T00:03:28.919241717Z" level=info msg="StopPodSandbox for \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\" returns successfully" Aug 13 00:03:28.926126 env[1658]: time="2025-08-13T00:03:28.926060195Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5mk2m,Uid:9f33f005-53e6-4d2b-9743-0641ab7bf242,Namespace:calico-system,Attempt:1,}" Aug 13 00:03:28.940687 env[1658]: time="2025-08-13T00:03:28.940604862Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qhqx2,Uid:155419cf-dcf3-4f89-bb80-fbed7e0cf848,Namespace:calico-system,Attempt:1,}" Aug 13 00:03:28.993000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:28.993000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4009a2cdb0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:03:28.993000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:03:28.994000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:28.994000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400644c260 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:03:28.994000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:03:28.997000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7347 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:28.997000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400d1ddb30 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:03:28.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:03:29.008000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:29.008000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400d1ddd70 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:03:29.008000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:03:29.015000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:29.015000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400644c660 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:03:29.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:03:29.016000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:29.016000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400d6780f0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:03:29.016000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:03:29.022310 env[1658]: time="2025-08-13T00:03:29.014775279Z" level=info msg="StopPodSandbox for \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\"" Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.043000 audit: BPF prog-id=180 op=LOAD Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4460 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332326131383234626462323938396230363532313438656666656134 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4460 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332326131383234626462323938396230363532313438656666656134 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.044000 audit: BPF prog-id=181 op=LOAD Aug 13 00:03:29.044000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4460 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332326131383234626462323938396230363532313438656666656134 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit: BPF prog-id=182 op=LOAD Aug 13 00:03:29.045000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4460 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332326131383234626462323938396230363532313438656666656134 Aug 13 00:03:29.045000 audit: BPF prog-id=182 op=UNLOAD Aug 13 00:03:29.045000 audit: BPF prog-id=181 op=UNLOAD Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:29.045000 audit: BPF prog-id=183 op=LOAD Aug 13 00:03:29.045000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4460 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:29.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332326131383234626462323938396230363532313438656666656134 Aug 13 00:03:29.381161 systemd-networkd[1381]: cali1b5898b3b3b: Gained IPv6LL Aug 13 00:03:29.385174 systemd[1]: run-netns-cni\x2d53a1eb3a\x2d214e\x2dc5e6\x2d3479\x2d194163fb84bc.mount: Deactivated successfully. Aug 13 00:03:29.385391 systemd[1]: run-netns-cni\x2d331eb860\x2da3a9\x2d7c89\x2de4dc\x2d70b1777e9234.mount: Deactivated successfully. Aug 13 00:03:29.385519 systemd[1]: run-netns-cni\x2de2bb16e6\x2d376b\x2d7215\x2d7a47\x2da274ee3dfdba.mount: Deactivated successfully. Aug 13 00:03:29.399872 env[1658]: time="2025-08-13T00:03:29.399798963Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-855f9bdb85-zm582,Uid:673954fb-b359-43b2-9081-665048e7cbd1,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100\"" Aug 13 00:03:29.816424 systemd-networkd[1381]: cali175c2371b1f: Link UP Aug 13 00:03:29.826294 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:29.826422 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali175c2371b1f: link becomes ready Aug 13 00:03:29.826669 systemd-networkd[1381]: cali175c2371b1f: Gained carrier Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:28.965 [INFO][4506] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0 coredns-7c65d6cfc9- kube-system 57449ba8-d127-4f60-b657-bff80db1c884 975 0 2025-08-13 00:02:38 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-18-163 coredns-7c65d6cfc9-txddh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali175c2371b1f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:28.966 [INFO][4506] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.360 [INFO][4547] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" HandleID="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.361 [INFO][4547] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" HandleID="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d470), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-18-163", "pod":"coredns-7c65d6cfc9-txddh", "timestamp":"2025-08-13 00:03:29.360764578 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.361 [INFO][4547] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.361 [INFO][4547] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.362 [INFO][4547] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.511 [INFO][4547] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.591 [INFO][4547] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.627 [INFO][4547] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.633 [INFO][4547] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.685 [INFO][4547] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.685 [INFO][4547] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.689 [INFO][4547] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028 Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.725 [INFO][4547] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.790 [INFO][4547] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.133/26] block=192.168.83.128/26 handle="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.791 [INFO][4547] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.133/26] handle="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" host="ip-172-31-18-163" Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.791 [INFO][4547] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:29.929019 env[1658]: 2025-08-13 00:03:29.791 [INFO][4547] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.133/26] IPv6=[] ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" HandleID="k8s-pod-network.bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:29.930681 env[1658]: 2025-08-13 00:03:29.797 [INFO][4506] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"57449ba8-d127-4f60-b657-bff80db1c884", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"coredns-7c65d6cfc9-txddh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali175c2371b1f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:29.930681 env[1658]: 2025-08-13 00:03:29.797 [INFO][4506] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.133/32] ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:29.930681 env[1658]: 2025-08-13 00:03:29.797 [INFO][4506] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali175c2371b1f ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:29.930681 env[1658]: 2025-08-13 00:03:29.837 [INFO][4506] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:29.930681 env[1658]: 2025-08-13 00:03:29.838 [INFO][4506] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"57449ba8-d127-4f60-b657-bff80db1c884", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028", Pod:"coredns-7c65d6cfc9-txddh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali175c2371b1f", MAC:"16:71:91:94:cb:80", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:29.930681 env[1658]: 2025-08-13 00:03:29.923 [INFO][4506] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028" Namespace="kube-system" Pod="coredns-7c65d6cfc9-txddh" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:30.002403 env[1658]: time="2025-08-13T00:03:30.000867471Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f4cfff9d-wr7d6,Uid:01d325a3-f014-43df-9108-2d734e893a16,Namespace:calico-system,Attempt:1,} returns sandbox id \"322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd\"" Aug 13 00:03:30.043487 env[1658]: time="2025-08-13T00:03:30.030130901Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:30.043487 env[1658]: time="2025-08-13T00:03:30.030210666Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:30.043487 env[1658]: time="2025-08-13T00:03:30.030238014Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:30.043487 env[1658]: time="2025-08-13T00:03:30.031046090Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028 pid=4627 runtime=io.containerd.runc.v2 Aug 13 00:03:30.104253 systemd[1]: run-containerd-runc-k8s.io-bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028-runc.AHIGP8.mount: Deactivated successfully. Aug 13 00:03:30.121423 systemd[1]: Started cri-containerd-bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028.scope. Aug 13 00:03:30.139491 systemd-networkd[1381]: cali74d398590f2: Gained IPv6LL Aug 13 00:03:30.200885 systemd-networkd[1381]: califd293d2407a: Link UP Aug 13 00:03:30.214185 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califd293d2407a: link becomes ready Aug 13 00:03:30.214554 systemd-networkd[1381]: califd293d2407a: Gained carrier Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.241000 audit: BPF prog-id=184 op=LOAD Aug 13 00:03:30.242000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.242000 audit[4637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4627 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266366234383939666231353530623938306538666135646130646535 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4627 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266366234383939666231353530623938306538666135646130646535 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.243000 audit: BPF prog-id=185 op=LOAD Aug 13 00:03:30.243000 audit[4637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4627 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266366234383939666231353530623938306538666135646130646535 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit: BPF prog-id=186 op=LOAD Aug 13 00:03:30.244000 audit[4637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4627 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266366234383939666231353530623938306538666135646130646535 Aug 13 00:03:30.244000 audit: BPF prog-id=186 op=UNLOAD Aug 13 00:03:30.244000 audit: BPF prog-id=185 op=UNLOAD Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { perfmon } for pid=4637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit[4637]: AVC avc: denied { bpf } for pid=4637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.244000 audit: BPF prog-id=187 op=LOAD Aug 13 00:03:30.244000 audit[4637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4627 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266366234383939666231353530623938306538666135646130646535 Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.498 [INFO][4568] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.498 [INFO][4568] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" iface="eth0" netns="/var/run/netns/cni-f499fb17-4ea9-0a23-64b0-951f077ea55e" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.499 [INFO][4568] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" iface="eth0" netns="/var/run/netns/cni-f499fb17-4ea9-0a23-64b0-951f077ea55e" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.501 [INFO][4568] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" iface="eth0" netns="/var/run/netns/cni-f499fb17-4ea9-0a23-64b0-951f077ea55e" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.501 [INFO][4568] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.501 [INFO][4568] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.601 [INFO][4593] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:29.604 [INFO][4593] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:30.184 [INFO][4593] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:30.221 [WARNING][4593] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:30.221 [INFO][4593] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:30.250 [INFO][4593] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.262688 env[1658]: 2025-08-13 00:03:30.256 [INFO][4568] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:30.268716 systemd[1]: run-netns-cni\x2df499fb17\x2d4ea9\x2d0a23\x2d64b0\x2d951f077ea55e.mount: Deactivated successfully. Aug 13 00:03:30.272500 env[1658]: time="2025-08-13T00:03:30.272419334Z" level=info msg="TearDown network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\" successfully" Aug 13 00:03:30.272500 env[1658]: time="2025-08-13T00:03:30.272489235Z" level=info msg="StopPodSandbox for \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\" returns successfully" Aug 13 00:03:30.273737 env[1658]: time="2025-08-13T00:03:30.273667249Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mbsc2,Uid:3fbc7976-3052-4851-9233-63f608fc52d6,Namespace:kube-system,Attempt:1,}" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.174 [INFO][4528] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0 goldmane-58fd7646b9- calico-system 9f33f005-53e6-4d2b-9743-0641ab7bf242 976 0 2025-08-13 00:03:00 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-18-163 goldmane-58fd7646b9-5mk2m eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] califd293d2407a [] [] }} ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.174 [INFO][4528] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.446 [INFO][4578] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" HandleID="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.446 [INFO][4578] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" HandleID="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3010), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-18-163", "pod":"goldmane-58fd7646b9-5mk2m", "timestamp":"2025-08-13 00:03:29.446686666 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.447 [INFO][4578] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.791 [INFO][4578] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.791 [INFO][4578] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.892 [INFO][4578] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:29.999 [INFO][4578] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.053 [INFO][4578] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.063 [INFO][4578] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.081 [INFO][4578] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.081 [INFO][4578] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.129 [INFO][4578] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.152 [INFO][4578] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.183 [INFO][4578] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.134/26] block=192.168.83.128/26 handle="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.184 [INFO][4578] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.134/26] handle="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" host="ip-172-31-18-163" Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.184 [INFO][4578] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.306884 env[1658]: 2025-08-13 00:03:30.184 [INFO][4578] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.134/26] IPv6=[] ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" HandleID="k8s-pod-network.b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:30.308162 env[1658]: 2025-08-13 00:03:30.190 [INFO][4528] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9f33f005-53e6-4d2b-9743-0641ab7bf242", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"goldmane-58fd7646b9-5mk2m", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.83.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califd293d2407a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.308162 env[1658]: 2025-08-13 00:03:30.190 [INFO][4528] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.134/32] ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:30.308162 env[1658]: 2025-08-13 00:03:30.190 [INFO][4528] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califd293d2407a ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:30.308162 env[1658]: 2025-08-13 00:03:30.213 [INFO][4528] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:30.308162 env[1658]: 2025-08-13 00:03:30.214 [INFO][4528] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9f33f005-53e6-4d2b-9743-0641ab7bf242", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed", Pod:"goldmane-58fd7646b9-5mk2m", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.83.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califd293d2407a", MAC:"f6:76:5f:c2:60:b4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.308162 env[1658]: 2025-08-13 00:03:30.295 [INFO][4528] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed" Namespace="calico-system" Pod="goldmane-58fd7646b9-5mk2m" WorkloadEndpoint="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:30.462992 env[1658]: time="2025-08-13T00:03:30.457109270Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:30.462992 env[1658]: time="2025-08-13T00:03:30.458491551Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:30.462992 env[1658]: time="2025-08-13T00:03:30.458745761Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:30.467748 env[1658]: time="2025-08-13T00:03:30.467601446Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed pid=4689 runtime=io.containerd.runc.v2 Aug 13 00:03:30.476031 env[1658]: time="2025-08-13T00:03:30.475960062Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-txddh,Uid:57449ba8-d127-4f60-b657-bff80db1c884,Namespace:kube-system,Attempt:1,} returns sandbox id \"bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028\"" Aug 13 00:03:30.516499 env[1658]: time="2025-08-13T00:03:30.503965101Z" level=info msg="CreateContainer within sandbox \"bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 00:03:30.552303 systemd-networkd[1381]: cali9673a742af4: Link UP Aug 13 00:03:30.560314 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9673a742af4: link becomes ready Aug 13 00:03:30.560684 systemd-networkd[1381]: cali9673a742af4: Gained carrier Aug 13 00:03:30.592449 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1967752630.mount: Deactivated successfully. Aug 13 00:03:30.620000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:30.620000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400131c870 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:03:30.620000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:30.621000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:30.621000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fbf120 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:03:30.621000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:30.631461 env[1658]: time="2025-08-13T00:03:30.631333480Z" level=info msg="CreateContainer within sandbox \"bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c259f9c040c67210ae037df82fc136800ff3f6b952d583e1f80feb1290522b4d\"" Aug 13 00:03:30.648972 systemd[1]: Started cri-containerd-b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed.scope. Aug 13 00:03:30.654308 env[1658]: time="2025-08-13T00:03:30.653017977Z" level=info msg="StartContainer for \"c259f9c040c67210ae037df82fc136800ff3f6b952d583e1f80feb1290522b4d\"" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:29.590 [INFO][4534] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0 csi-node-driver- calico-system 155419cf-dcf3-4f89-bb80-fbed7e0cf848 979 0 2025-08-13 00:03:01 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-18-163 csi-node-driver-qhqx2 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali9673a742af4 [] [] }} ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:29.590 [INFO][4534] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:29.745 [INFO][4599] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" HandleID="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:29.745 [INFO][4599] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" HandleID="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-18-163", "pod":"csi-node-driver-qhqx2", "timestamp":"2025-08-13 00:03:29.745061787 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:29.745 [INFO][4599] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.253 [INFO][4599] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.253 [INFO][4599] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.308 [INFO][4599] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.347 [INFO][4599] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.384 [INFO][4599] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.402 [INFO][4599] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.411 [INFO][4599] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.411 [INFO][4599] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.420 [INFO][4599] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.433 [INFO][4599] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.468 [INFO][4599] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.135/26] block=192.168.83.128/26 handle="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.468 [INFO][4599] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.135/26] handle="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" host="ip-172-31-18-163" Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.468 [INFO][4599] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:30.668516 env[1658]: 2025-08-13 00:03:30.468 [INFO][4599] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.135/26] IPv6=[] ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" HandleID="k8s-pod-network.0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:30.669909 env[1658]: 2025-08-13 00:03:30.481 [INFO][4534] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155419cf-dcf3-4f89-bb80-fbed7e0cf848", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"csi-node-driver-qhqx2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.83.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9673a742af4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.669909 env[1658]: 2025-08-13 00:03:30.481 [INFO][4534] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.135/32] ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:30.669909 env[1658]: 2025-08-13 00:03:30.481 [INFO][4534] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9673a742af4 ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:30.669909 env[1658]: 2025-08-13 00:03:30.564 [INFO][4534] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:30.669909 env[1658]: 2025-08-13 00:03:30.565 [INFO][4534] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155419cf-dcf3-4f89-bb80-fbed7e0cf848", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d", Pod:"csi-node-driver-qhqx2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.83.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9673a742af4", MAC:"ca:b2:d4:c1:28:28", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:30.669909 env[1658]: 2025-08-13 00:03:30.647 [INFO][4534] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d" Namespace="calico-system" Pod="csi-node-driver-qhqx2" WorkloadEndpoint="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:30.798437 env[1658]: time="2025-08-13T00:03:30.798030993Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:30.798437 env[1658]: time="2025-08-13T00:03:30.798133173Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:30.798437 env[1658]: time="2025-08-13T00:03:30.798162166Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:30.799384 env[1658]: time="2025-08-13T00:03:30.799195375Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d pid=4747 runtime=io.containerd.runc.v2 Aug 13 00:03:30.819752 systemd[1]: Started cri-containerd-c259f9c040c67210ae037df82fc136800ff3f6b952d583e1f80feb1290522b4d.scope. Aug 13 00:03:30.868959 systemd[1]: Started cri-containerd-0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d.scope. Aug 13 00:03:30.947740 systemd-networkd[1381]: cali8cfbacaf637: Link UP Aug 13 00:03:30.957388 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:30.957505 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8cfbacaf637: link becomes ready Aug 13 00:03:30.957746 systemd-networkd[1381]: cali8cfbacaf637: Gained carrier Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.996000 audit: BPF prog-id=188 op=LOAD Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4627 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332353966396330343063363732313061653033376466383266633133 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4627 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332353966396330343063363732313061653033376466383266633133 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:30.999000 audit: BPF prog-id=189 op=LOAD Aug 13 00:03:30.999000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4627 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:30.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332353966396330343063363732313061653033376466383266633133 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit: BPF prog-id=190 op=LOAD Aug 13 00:03:31.000000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4627 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332353966396330343063363732313061653033376466383266633133 Aug 13 00:03:31.000000 audit: BPF prog-id=190 op=UNLOAD Aug 13 00:03:31.000000 audit: BPF prog-id=189 op=UNLOAD Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.000000 audit: BPF prog-id=191 op=LOAD Aug 13 00:03:31.000000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4627 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332353966396330343063363732313061653033376466383266633133 Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.681 [INFO][4661] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0 coredns-7c65d6cfc9- kube-system 3fbc7976-3052-4851-9233-63f608fc52d6 984 0 2025-08-13 00:02:38 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-18-163 coredns-7c65d6cfc9-mbsc2 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali8cfbacaf637 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.681 [INFO][4661] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.801 [INFO][4726] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" HandleID="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.803 [INFO][4726] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" HandleID="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000302150), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-18-163", "pod":"coredns-7c65d6cfc9-mbsc2", "timestamp":"2025-08-13 00:03:30.797540104 +0000 UTC"}, Hostname:"ip-172-31-18-163", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.803 [INFO][4726] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.803 [INFO][4726] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.803 [INFO][4726] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-18-163' Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.839 [INFO][4726] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.850 [INFO][4726] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.870 [INFO][4726] ipam/ipam.go 511: Trying affinity for 192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.875 [INFO][4726] ipam/ipam.go 158: Attempting to load block cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.880 [INFO][4726] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.83.128/26 host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.880 [INFO][4726] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.83.128/26 handle="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.883 [INFO][4726] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6 Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.900 [INFO][4726] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.83.128/26 handle="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.923 [INFO][4726] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.83.136/26] block=192.168.83.128/26 handle="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.923 [INFO][4726] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.83.136/26] handle="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" host="ip-172-31-18-163" Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.924 [INFO][4726] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:31.041643 env[1658]: 2025-08-13 00:03:30.924 [INFO][4726] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.83.136/26] IPv6=[] ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" HandleID="k8s-pod-network.98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:31.043321 env[1658]: 2025-08-13 00:03:30.932 [INFO][4661] cni-plugin/k8s.go 418: Populated endpoint ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3fbc7976-3052-4851-9233-63f608fc52d6", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"", Pod:"coredns-7c65d6cfc9-mbsc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8cfbacaf637", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:31.043321 env[1658]: 2025-08-13 00:03:30.932 [INFO][4661] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.83.136/32] ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:31.043321 env[1658]: 2025-08-13 00:03:30.932 [INFO][4661] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8cfbacaf637 ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:31.043321 env[1658]: 2025-08-13 00:03:30.963 [INFO][4661] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:31.043321 env[1658]: 2025-08-13 00:03:30.964 [INFO][4661] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3fbc7976-3052-4851-9233-63f608fc52d6", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6", Pod:"coredns-7c65d6cfc9-mbsc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8cfbacaf637", MAC:"da:ef:0f:5f:a9:ce", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:31.043321 env[1658]: 2025-08-13 00:03:31.030 [INFO][4661] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mbsc2" WorkloadEndpoint="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:31.135408 env[1658]: time="2025-08-13T00:03:31.130008642Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:03:31.135408 env[1658]: time="2025-08-13T00:03:31.130152115Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:03:31.135408 env[1658]: time="2025-08-13T00:03:31.130237484Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:03:31.135408 env[1658]: time="2025-08-13T00:03:31.130593707Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6 pid=4794 runtime=io.containerd.runc.v2 Aug 13 00:03:31.164428 env[1658]: time="2025-08-13T00:03:31.164358802Z" level=info msg="StartContainer for \"c259f9c040c67210ae037df82fc136800ff3f6b952d583e1f80feb1290522b4d\" returns successfully" Aug 13 00:03:31.193639 systemd[1]: Started cri-containerd-98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6.scope. Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.266000 audit: BPF prog-id=192 op=LOAD Aug 13 00:03:31.267000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.267000 audit[4758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4747 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037323433333463363237663363343534636665333833623163323362 Aug 13 00:03:31.267000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.267000 audit[4758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4747 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037323433333463363237663363343534636665333833623163323362 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.268000 audit: BPF prog-id=193 op=LOAD Aug 13 00:03:31.268000 audit[4758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4747 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037323433333463363237663363343534636665333833623163323362 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.269000 audit: BPF prog-id=194 op=LOAD Aug 13 00:03:31.269000 audit[4758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4747 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037323433333463363237663363343534636665333833623163323362 Aug 13 00:03:31.274000 audit: BPF prog-id=194 op=UNLOAD Aug 13 00:03:31.274000 audit: BPF prog-id=193 op=UNLOAD Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { perfmon } for pid=4758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit[4758]: AVC avc: denied { bpf } for pid=4758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.274000 audit: BPF prog-id=195 op=LOAD Aug 13 00:03:31.274000 audit[4758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4747 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037323433333463363237663363343534636665333833623163323362 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.341000 audit: BPF prog-id=196 op=LOAD Aug 13 00:03:31.342000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.342000 audit[4810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4794 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938623864666236623330636362633963393032356331373439363134 Aug 13 00:03:31.342000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.342000 audit[4810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4794 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938623864666236623330636362633963393032356331373439363134 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.343000 audit: BPF prog-id=197 op=LOAD Aug 13 00:03:31.343000 audit[4810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4794 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938623864666236623330636362633963393032356331373439363134 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.345000 audit: BPF prog-id=198 op=LOAD Aug 13 00:03:31.345000 audit[4810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4794 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938623864666236623330636362633963393032356331373439363134 Aug 13 00:03:31.349000 audit: BPF prog-id=198 op=UNLOAD Aug 13 00:03:31.349000 audit: BPF prog-id=197 op=UNLOAD Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { perfmon } for pid=4810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit[4810]: AVC avc: denied { bpf } for pid=4810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.349000 audit: BPF prog-id=199 op=LOAD Aug 13 00:03:31.349000 audit[4810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4794 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938623864666236623330636362633963393032356331373439363134 Aug 13 00:03:31.379830 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3624599473.mount: Deactivated successfully. Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.444000 audit: BPF prog-id=200 op=LOAD Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4689 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232336661333336373238386139306431333237633066663632343334 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4689 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232336661333336373238386139306431333237633066663632343334 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit: BPF prog-id=201 op=LOAD Aug 13 00:03:31.452000 audit[4703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4689 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232336661333336373238386139306431333237633066663632343334 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit: BPF prog-id=202 op=LOAD Aug 13 00:03:31.452000 audit[4703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4689 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232336661333336373238386139306431333237633066663632343334 Aug 13 00:03:31.452000 audit: BPF prog-id=202 op=UNLOAD Aug 13 00:03:31.452000 audit: BPF prog-id=201 op=UNLOAD Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { perfmon } for pid=4703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit[4703]: AVC avc: denied { bpf } for pid=4703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.452000 audit: BPF prog-id=203 op=LOAD Aug 13 00:03:31.452000 audit[4703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4689 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232336661333336373238386139306431333237633066663632343334 Aug 13 00:03:31.505799 env[1658]: time="2025-08-13T00:03:31.505742686Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qhqx2,Uid:155419cf-dcf3-4f89-bb80-fbed7e0cf848,Namespace:calico-system,Attempt:1,} returns sandbox id \"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d\"" Aug 13 00:03:31.583848 env[1658]: time="2025-08-13T00:03:31.583791929Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mbsc2,Uid:3fbc7976-3052-4851-9233-63f608fc52d6,Namespace:kube-system,Attempt:1,} returns sandbox id \"98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6\"" Aug 13 00:03:31.595986 env[1658]: time="2025-08-13T00:03:31.595894144Z" level=info msg="CreateContainer within sandbox \"98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 00:03:31.608000 audit[4844]: NETFILTER_CFG table=filter:112 family=2 entries=60 op=nft_register_chain pid=4844 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:31.608000 audit[4844]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28968 a0=3 a1=ffffe40302a0 a2=0 a3=ffff9b811fa8 items=0 ppid=3947 pid=4844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.608000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:31.649642 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2018033457.mount: Deactivated successfully. Aug 13 00:03:31.668875 env[1658]: time="2025-08-13T00:03:31.668812298Z" level=info msg="CreateContainer within sandbox \"98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f1988032c0b40d8a35cff3048499efb76f202e498ea73005e91660787b73fdd9\"" Aug 13 00:03:31.670228 env[1658]: time="2025-08-13T00:03:31.670152050Z" level=info msg="StartContainer for \"f1988032c0b40d8a35cff3048499efb76f202e498ea73005e91660787b73fdd9\"" Aug 13 00:03:31.677418 systemd-networkd[1381]: califd293d2407a: Gained IPv6LL Aug 13 00:03:31.677971 systemd-networkd[1381]: cali175c2371b1f: Gained IPv6LL Aug 13 00:03:31.735532 systemd[1]: Started cri-containerd-f1988032c0b40d8a35cff3048499efb76f202e498ea73005e91660787b73fdd9.scope. Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.814000 audit: BPF prog-id=204 op=LOAD Aug 13 00:03:31.816000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.816000 audit[4861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4794 pid=4861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393838303332633062343064386133356366663330343834393965 Aug 13 00:03:31.816000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.816000 audit[4861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4794 pid=4861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393838303332633062343064386133356366663330343834393965 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.819000 audit: BPF prog-id=205 op=LOAD Aug 13 00:03:31.819000 audit[4861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4794 pid=4861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393838303332633062343064386133356366663330343834393965 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.820000 audit: BPF prog-id=206 op=LOAD Aug 13 00:03:31.820000 audit[4861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4794 pid=4861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393838303332633062343064386133356366663330343834393965 Aug 13 00:03:31.822000 audit: BPF prog-id=206 op=UNLOAD Aug 13 00:03:31.822000 audit: BPF prog-id=205 op=UNLOAD Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { perfmon } for pid=4861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit[4861]: AVC avc: denied { bpf } for pid=4861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:31.823000 audit: BPF prog-id=207 op=LOAD Aug 13 00:03:31.823000 audit[4861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4794 pid=4861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393838303332633062343064386133356366663330343834393965 Aug 13 00:03:31.854000 audit[4878]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=4878 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:31.855000 audit[4774]: AVC avc: denied { getattr } for pid=4774 comm="coredns" path="cgroup:[4026532849]" dev="nsfs" ino=4026532849 scontext=system_u:system_r:svirt_lxc_net_t:s0:c24,c179 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 00:03:31.855000 audit[4774]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40001569d8 a2=40000d0578 a3=0 items=0 ppid=4627 pid=4774 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c24,c179 key=(null) Aug 13 00:03:31.855000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 00:03:31.854000 audit[4878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdecca220 a2=0 a3=1 items=0 ppid=2885 pid=4878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:31.888000 audit[4878]: NETFILTER_CFG table=nat:114 family=2 entries=14 op=nft_register_rule pid=4878 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:31.898772 env[1658]: time="2025-08-13T00:03:31.898682650Z" level=info msg="StartContainer for \"f1988032c0b40d8a35cff3048499efb76f202e498ea73005e91660787b73fdd9\" returns successfully" Aug 13 00:03:31.951000 audit[4872]: AVC avc: denied { getattr } for pid=4872 comm="coredns" path="cgroup:[4026532860]" dev="nsfs" ino=4026532860 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c839 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 00:03:31.951000 audit[4872]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056828 a2=400014e578 a3=0 items=0 ppid=4794 pid=4872 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c839 key=(null) Aug 13 00:03:31.951000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 00:03:31.888000 audit[4878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffdecca220 a2=0 a3=1 items=0 ppid=2885 pid=4878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:31.888000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:31.980867 env[1658]: time="2025-08-13T00:03:31.980791973Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5mk2m,Uid:9f33f005-53e6-4d2b-9743-0641ab7bf242,Namespace:calico-system,Attempt:1,} returns sandbox id \"b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed\"" Aug 13 00:03:31.995860 systemd-networkd[1381]: cali9673a742af4: Gained IPv6LL Aug 13 00:03:32.236197 env[1658]: time="2025-08-13T00:03:32.236108543Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:32.240619 env[1658]: time="2025-08-13T00:03:32.240548569Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:32.244641 env[1658]: time="2025-08-13T00:03:32.244577340Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:32.248544 env[1658]: time="2025-08-13T00:03:32.248472874Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:32.252509 env[1658]: time="2025-08-13T00:03:32.252347323Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Aug 13 00:03:32.260453 env[1658]: time="2025-08-13T00:03:32.260377276Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 00:03:32.265045 env[1658]: time="2025-08-13T00:03:32.264954152Z" level=info msg="CreateContainer within sandbox \"d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Aug 13 00:03:32.317000 audit[4908]: NETFILTER_CFG table=filter:115 family=2 entries=108 op=nft_register_chain pid=4908 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:03:32.317000 audit[4908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60472 a0=3 a1=ffffdb1791f0 a2=0 a3=ffffb79f6fa8 items=0 ppid=3947 pid=4908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.317000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:03:32.354740 env[1658]: time="2025-08-13T00:03:32.354675637Z" level=info msg="CreateContainer within sandbox \"d683ec82f8e23e4c53a629fe1261e5cd31c13e4687543f87ec30f6f3dfde5239\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"17bfb5afbb3e2e50aa48e94caccfca4ee0c08ac2143e1bc314d15c46fc43ee61\"" Aug 13 00:03:32.356053 env[1658]: time="2025-08-13T00:03:32.356000257Z" level=info msg="StartContainer for \"17bfb5afbb3e2e50aa48e94caccfca4ee0c08ac2143e1bc314d15c46fc43ee61\"" Aug 13 00:03:32.370423 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3068763456.mount: Deactivated successfully. Aug 13 00:03:32.447712 systemd[1]: run-containerd-runc-k8s.io-17bfb5afbb3e2e50aa48e94caccfca4ee0c08ac2143e1bc314d15c46fc43ee61-runc.L4RiWC.mount: Deactivated successfully. Aug 13 00:03:32.453305 systemd[1]: Started cri-containerd-17bfb5afbb3e2e50aa48e94caccfca4ee0c08ac2143e1bc314d15c46fc43ee61.scope. Aug 13 00:03:32.577813 kubelet[2737]: I0813 00:03:32.576759 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-txddh" podStartSLOduration=54.576710972 podStartE2EDuration="54.576710972s" podCreationTimestamp="2025-08-13 00:02:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:03:31.550959734 +0000 UTC m=+57.851368210" watchObservedRunningTime="2025-08-13 00:03:32.576710972 +0000 UTC m=+58.877119436" Aug 13 00:03:32.579169 kubelet[2737]: I0813 00:03:32.579065 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-mbsc2" podStartSLOduration=54.579040936 podStartE2EDuration="54.579040936s" podCreationTimestamp="2025-08-13 00:02:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:03:32.575809068 +0000 UTC m=+58.876217568" watchObservedRunningTime="2025-08-13 00:03:32.579040936 +0000 UTC m=+58.879449508" Aug 13 00:03:32.760000 audit[4934]: NETFILTER_CFG table=filter:116 family=2 entries=20 op=nft_register_rule pid=4934 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:32.760000 audit[4934]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff84f41d0 a2=0 a3=1 items=0 ppid=2885 pid=4934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.760000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:32.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.769000 audit: BPF prog-id=208 op=LOAD Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3887 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626662356166626233653265353061613438653934636163636663 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3887 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626662356166626233653265353061613438653934636163636663 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit: BPF prog-id=209 op=LOAD Aug 13 00:03:32.770000 audit[4916]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3887 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626662356166626233653265353061613438653934636163636663 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.770000 audit: BPF prog-id=210 op=LOAD Aug 13 00:03:32.770000 audit[4916]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3887 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626662356166626233653265353061613438653934636163636663 Aug 13 00:03:32.771000 audit: BPF prog-id=210 op=UNLOAD Aug 13 00:03:32.771000 audit: BPF prog-id=209 op=UNLOAD Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:32.771000 audit: BPF prog-id=211 op=LOAD Aug 13 00:03:32.771000 audit[4916]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3887 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626662356166626233653265353061613438653934636163636663 Aug 13 00:03:32.783000 audit[4934]: NETFILTER_CFG table=nat:117 family=2 entries=14 op=nft_register_rule pid=4934 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:32.783000 audit[4934]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffff84f41d0 a2=0 a3=1 items=0 ppid=2885 pid=4934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.783000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:32.818000 audit[4936]: NETFILTER_CFG table=filter:118 family=2 entries=17 op=nft_register_rule pid=4936 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:32.818000 audit[4936]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff3490830 a2=0 a3=1 items=0 ppid=2885 pid=4936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.818000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:32.825000 audit[4936]: NETFILTER_CFG table=nat:119 family=2 entries=35 op=nft_register_chain pid=4936 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:32.825000 audit[4936]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffff3490830 a2=0 a3=1 items=0 ppid=2885 pid=4936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:32.825000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:32.882531 env[1658]: time="2025-08-13T00:03:32.882468232Z" level=info msg="StartContainer for \"17bfb5afbb3e2e50aa48e94caccfca4ee0c08ac2143e1bc314d15c46fc43ee61\" returns successfully" Aug 13 00:03:32.951000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:32.951000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40029409a0 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:03:32.951000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:32.955536 systemd-networkd[1381]: cali8cfbacaf637: Gained IPv6LL Aug 13 00:03:32.957000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:32.957000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002940b40 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:03:32.957000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:32.971000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:32.971000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002940b60 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:03:32.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:32.974000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:03:32.974000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002940d00 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:03:32.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:03:33.610299 kubelet[2737]: I0813 00:03:33.610170 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-54bdd5b8c4-wl8cs" podStartSLOduration=2.601411943 podStartE2EDuration="11.610144731s" podCreationTimestamp="2025-08-13 00:03:22 +0000 UTC" firstStartedPulling="2025-08-13 00:03:23.247875148 +0000 UTC m=+49.548283612" lastFinishedPulling="2025-08-13 00:03:32.256607948 +0000 UTC m=+58.557016400" observedRunningTime="2025-08-13 00:03:33.609533422 +0000 UTC m=+59.909941874" watchObservedRunningTime="2025-08-13 00:03:33.610144731 +0000 UTC m=+59.910553327" Aug 13 00:03:33.750000 audit[4953]: NETFILTER_CFG table=filter:120 family=2 entries=13 op=nft_register_rule pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:33.753996 kernel: kauditd_printk_skb: 575 callbacks suppressed Aug 13 00:03:33.754155 kernel: audit: type=1325 audit(1755043413.750:1292): table=filter:120 family=2 entries=13 op=nft_register_rule pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:33.750000 audit[4953]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.772774 kernel: audit: type=1300 audit(1755043413.750:1292): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.773048 kernel: audit: type=1327 audit(1755043413.750:1292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:33.750000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:33.951000 audit[4953]: NETFILTER_CFG table=nat:121 family=2 entries=27 op=nft_register_chain pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:34.036304 kernel: audit: type=1325 audit(1755043413.951:1293): table=nat:121 family=2 entries=27 op=nft_register_chain pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:34.056831 systemd[1]: Started sshd@7-172.31.18.163:22-139.178.89.65:60960.service. Aug 13 00:03:34.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.163:22-139.178.89.65:60960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:34.085606 kernel: audit: type=1130 audit(1755043414.056:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.163:22-139.178.89.65:60960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:34.085771 kernel: audit: type=1300 audit(1755043413.951:1293): arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:33.951000 audit[4953]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:34.093305 env[1658]: time="2025-08-13T00:03:34.093003348Z" level=info msg="StopPodSandbox for \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\"" Aug 13 00:03:34.105986 kernel: audit: type=1327 audit(1755043413.951:1293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:33.951000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:34.268000 audit[4957]: USER_ACCT pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.273346 sshd[4957]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:34.304462 kernel: audit: type=1101 audit(1755043414.268:1295): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.304584 kernel: audit: type=1103 audit(1755043414.270:1296): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.270000 audit[4957]: CRED_ACQ pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.304754 sshd[4957]: Accepted publickey for core from 139.178.89.65 port 60960 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:34.325347 kernel: audit: type=1006 audit(1755043414.270:1297): pid=4957 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Aug 13 00:03:34.317367 systemd[1]: Started session-8.scope. Aug 13 00:03:34.324439 systemd-logind[1647]: New session 8 of user core. Aug 13 00:03:34.270000 audit[4957]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe27d3100 a2=3 a3=1 items=0 ppid=1 pid=4957 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:34.270000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:34.347000 audit[4957]: USER_START pid=4957 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.350000 audit[4974]: CRED_ACQ pid=4974 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.411 [WARNING][4967] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"57449ba8-d127-4f60-b657-bff80db1c884", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028", Pod:"coredns-7c65d6cfc9-txddh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali175c2371b1f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.412 [INFO][4967] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.412 [INFO][4967] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" iface="eth0" netns="" Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.412 [INFO][4967] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.412 [INFO][4967] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.590 [INFO][4979] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.590 [INFO][4979] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.590 [INFO][4979] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.644 [WARNING][4979] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.644 [INFO][4979] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.656 [INFO][4979] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:34.713539 env[1658]: 2025-08-13 00:03:34.700 [INFO][4967] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:34.717470 env[1658]: time="2025-08-13T00:03:34.717396159Z" level=info msg="TearDown network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\" successfully" Aug 13 00:03:34.717743 env[1658]: time="2025-08-13T00:03:34.717695850Z" level=info msg="StopPodSandbox for \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\" returns successfully" Aug 13 00:03:34.718889 env[1658]: time="2025-08-13T00:03:34.718824423Z" level=info msg="RemovePodSandbox for \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\"" Aug 13 00:03:34.719304 env[1658]: time="2025-08-13T00:03:34.719193558Z" level=info msg="Forcibly stopping sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\"" Aug 13 00:03:34.912169 sshd[4957]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:34.921000 audit[4957]: USER_END pid=4957 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.921000 audit[4957]: CRED_DISP pid=4957 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:34.924782 systemd[1]: session-8.scope: Deactivated successfully. Aug 13 00:03:34.926006 systemd[1]: sshd@7-172.31.18.163:22-139.178.89.65:60960.service: Deactivated successfully. Aug 13 00:03:34.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.163:22-139.178.89.65:60960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:34.933345 systemd-logind[1647]: Session 8 logged out. Waiting for processes to exit. Aug 13 00:03:34.938763 systemd-logind[1647]: Removed session 8. Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:34.986 [WARNING][5002] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"57449ba8-d127-4f60-b657-bff80db1c884", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"bf6b4899fb1550b980e8fa5da0de5acb99934694e55633dd3a48a1b756471028", Pod:"coredns-7c65d6cfc9-txddh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali175c2371b1f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:34.986 [INFO][5002] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:34.986 [INFO][5002] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" iface="eth0" netns="" Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:34.986 [INFO][5002] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:34.986 [INFO][5002] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:35.089 [INFO][5016] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:35.089 [INFO][5016] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:35.089 [INFO][5016] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:35.137 [WARNING][5016] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:35.137 [INFO][5016] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" HandleID="k8s-pod-network.a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--txddh-eth0" Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:35.140 [INFO][5016] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:35.148647 env[1658]: 2025-08-13 00:03:35.142 [INFO][5002] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13" Aug 13 00:03:35.149996 env[1658]: time="2025-08-13T00:03:35.148686829Z" level=info msg="TearDown network for sandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\" successfully" Aug 13 00:03:35.160851 env[1658]: time="2025-08-13T00:03:35.160749625Z" level=info msg="RemovePodSandbox \"a1d4c863be86e93b7cdeeaf51c1726583fe85c40d6463eaf4d9968849f7a4b13\" returns successfully" Aug 13 00:03:35.164693 env[1658]: time="2025-08-13T00:03:35.164601740Z" level=info msg="StopPodSandbox for \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\"" Aug 13 00:03:35.443000 audit[5040]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=5040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:35.443000 audit[5040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe79fc3b0 a2=0 a3=1 items=0 ppid=2885 pid=5040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:35.443000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:35.470000 audit[5040]: NETFILTER_CFG table=nat:123 family=2 entries=58 op=nft_register_chain pid=5040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:35.470000 audit[5040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffe79fc3b0 a2=0 a3=1 items=0 ppid=2885 pid=5040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:35.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.385 [WARNING][5032] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3fbc7976-3052-4851-9233-63f608fc52d6", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6", Pod:"coredns-7c65d6cfc9-mbsc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8cfbacaf637", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.385 [INFO][5032] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.385 [INFO][5032] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" iface="eth0" netns="" Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.385 [INFO][5032] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.385 [INFO][5032] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.491 [INFO][5042] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.492 [INFO][5042] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.493 [INFO][5042] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.518 [WARNING][5042] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.518 [INFO][5042] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.521 [INFO][5042] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:35.532376 env[1658]: 2025-08-13 00:03:35.525 [INFO][5032] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.533598 env[1658]: time="2025-08-13T00:03:35.533540308Z" level=info msg="TearDown network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\" successfully" Aug 13 00:03:35.533730 env[1658]: time="2025-08-13T00:03:35.533696142Z" level=info msg="StopPodSandbox for \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\" returns successfully" Aug 13 00:03:35.540555 env[1658]: time="2025-08-13T00:03:35.538408603Z" level=info msg="RemovePodSandbox for \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\"" Aug 13 00:03:35.540826 env[1658]: time="2025-08-13T00:03:35.540515808Z" level=info msg="Forcibly stopping sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\"" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.735 [WARNING][5064] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3fbc7976-3052-4851-9233-63f608fc52d6", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"98b8dfb6b30ccbc9c9025c17496142981ee811eb24cda9111403efbcb089c4a6", Pod:"coredns-7c65d6cfc9-mbsc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8cfbacaf637", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.736 [INFO][5064] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.736 [INFO][5064] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" iface="eth0" netns="" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.736 [INFO][5064] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.736 [INFO][5064] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.823 [INFO][5072] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.823 [INFO][5072] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.823 [INFO][5072] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.840 [WARNING][5072] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.840 [INFO][5072] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" HandleID="k8s-pod-network.47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Workload="ip--172--31--18--163-k8s-coredns--7c65d6cfc9--mbsc2-eth0" Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.844 [INFO][5072] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:35.850056 env[1658]: 2025-08-13 00:03:35.846 [INFO][5064] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1" Aug 13 00:03:35.851026 env[1658]: time="2025-08-13T00:03:35.850099204Z" level=info msg="TearDown network for sandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\" successfully" Aug 13 00:03:35.857608 env[1658]: time="2025-08-13T00:03:35.857530095Z" level=info msg="RemovePodSandbox \"47751a7d5e6c70e6bcd2952b3445fd8393148d08d7eaa029f3637836894cb9b1\" returns successfully" Aug 13 00:03:35.858505 env[1658]: time="2025-08-13T00:03:35.858439103Z" level=info msg="StopPodSandbox for \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\"" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:35.999 [WARNING][5088] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9f33f005-53e6-4d2b-9743-0641ab7bf242", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed", Pod:"goldmane-58fd7646b9-5mk2m", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.83.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califd293d2407a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.000 [INFO][5088] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.000 [INFO][5088] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" iface="eth0" netns="" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.000 [INFO][5088] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.000 [INFO][5088] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.115 [INFO][5095] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.116 [INFO][5095] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.116 [INFO][5095] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.141 [WARNING][5095] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.141 [INFO][5095] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.143 [INFO][5095] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:36.149398 env[1658]: 2025-08-13 00:03:36.146 [INFO][5088] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.151477 env[1658]: time="2025-08-13T00:03:36.151395171Z" level=info msg="TearDown network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\" successfully" Aug 13 00:03:36.151477 env[1658]: time="2025-08-13T00:03:36.151468024Z" level=info msg="StopPodSandbox for \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\" returns successfully" Aug 13 00:03:36.152480 env[1658]: time="2025-08-13T00:03:36.152393315Z" level=info msg="RemovePodSandbox for \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\"" Aug 13 00:03:36.152619 env[1658]: time="2025-08-13T00:03:36.152468988Z" level=info msg="Forcibly stopping sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\"" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.296 [WARNING][5110] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9f33f005-53e6-4d2b-9743-0641ab7bf242", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed", Pod:"goldmane-58fd7646b9-5mk2m", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.83.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califd293d2407a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.297 [INFO][5110] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.297 [INFO][5110] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" iface="eth0" netns="" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.297 [INFO][5110] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.297 [INFO][5110] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.396 [INFO][5117] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.401 [INFO][5117] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.401 [INFO][5117] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.422 [WARNING][5117] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.422 [INFO][5117] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" HandleID="k8s-pod-network.5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Workload="ip--172--31--18--163-k8s-goldmane--58fd7646b9--5mk2m-eth0" Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.426 [INFO][5117] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:36.433501 env[1658]: 2025-08-13 00:03:36.428 [INFO][5110] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1" Aug 13 00:03:36.436361 env[1658]: time="2025-08-13T00:03:36.433467234Z" level=info msg="TearDown network for sandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\" successfully" Aug 13 00:03:36.443153 env[1658]: time="2025-08-13T00:03:36.443070261Z" level=info msg="RemovePodSandbox \"5302da58594027e64cabe29e5fa46f0dc5b9d85b436517664839192976f458b1\" returns successfully" Aug 13 00:03:36.443935 env[1658]: time="2025-08-13T00:03:36.443856639Z" level=info msg="StopPodSandbox for \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\"" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.616 [WARNING][5132] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.616 [INFO][5132] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.616 [INFO][5132] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" iface="eth0" netns="" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.616 [INFO][5132] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.616 [INFO][5132] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.709 [INFO][5139] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.709 [INFO][5139] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.709 [INFO][5139] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.733 [WARNING][5139] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.733 [INFO][5139] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.756 [INFO][5139] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:36.762239 env[1658]: 2025-08-13 00:03:36.759 [INFO][5132] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:36.763181 env[1658]: time="2025-08-13T00:03:36.763132362Z" level=info msg="TearDown network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\" successfully" Aug 13 00:03:36.763351 env[1658]: time="2025-08-13T00:03:36.763310275Z" level=info msg="StopPodSandbox for \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\" returns successfully" Aug 13 00:03:36.764125 env[1658]: time="2025-08-13T00:03:36.764080993Z" level=info msg="RemovePodSandbox for \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\"" Aug 13 00:03:36.764401 env[1658]: time="2025-08-13T00:03:36.764336583Z" level=info msg="Forcibly stopping sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\"" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:36.922 [WARNING][5154] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" WorkloadEndpoint="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:36.929 [INFO][5154] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:36.930 [INFO][5154] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" iface="eth0" netns="" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:36.930 [INFO][5154] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:36.930 [INFO][5154] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:37.008 [INFO][5161] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:37.011 [INFO][5161] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:37.011 [INFO][5161] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:37.041 [WARNING][5161] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:37.042 [INFO][5161] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" HandleID="k8s-pod-network.9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Workload="ip--172--31--18--163-k8s-whisker--7989d9d898--tl2dg-eth0" Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:37.062 [INFO][5161] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:37.069319 env[1658]: 2025-08-13 00:03:37.066 [INFO][5154] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb" Aug 13 00:03:37.071024 env[1658]: time="2025-08-13T00:03:37.069251206Z" level=info msg="TearDown network for sandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\" successfully" Aug 13 00:03:37.077940 env[1658]: time="2025-08-13T00:03:37.077861439Z" level=info msg="RemovePodSandbox \"9e014e5a9a4124720639c19907ab78b89e7bf8430adde9913d60a2bd32d459fb\" returns successfully" Aug 13 00:03:37.078842 env[1658]: time="2025-08-13T00:03:37.078772978Z" level=info msg="StopPodSandbox for \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\"" Aug 13 00:03:37.273331 env[1658]: time="2025-08-13T00:03:37.273232862Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.277924 env[1658]: time="2025-08-13T00:03:37.277837297Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.282259 env[1658]: time="2025-08-13T00:03:37.282183226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.290745 env[1658]: time="2025-08-13T00:03:37.290659202Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.291349 env[1658]: time="2025-08-13T00:03:37.291239658Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Aug 13 00:03:37.303166 env[1658]: time="2025-08-13T00:03:37.300071953Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 00:03:37.304603 env[1658]: time="2025-08-13T00:03:37.304527251Z" level=info msg="CreateContainer within sandbox \"bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:03:37.337014 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4173359832.mount: Deactivated successfully. Aug 13 00:03:37.353466 env[1658]: time="2025-08-13T00:03:37.353366672Z" level=info msg="CreateContainer within sandbox \"bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"46f54f7796f57f48dfef1fd0d3b7c0536b0cd89a39c4a70da316a7525c00dd8e\"" Aug 13 00:03:37.354934 env[1658]: time="2025-08-13T00:03:37.354861979Z" level=info msg="StartContainer for \"46f54f7796f57f48dfef1fd0d3b7c0536b0cd89a39c4a70da316a7525c00dd8e\"" Aug 13 00:03:37.450557 systemd[1]: Started cri-containerd-46f54f7796f57f48dfef1fd0d3b7c0536b0cd89a39c4a70da316a7525c00dd8e.scope. Aug 13 00:03:37.461309 systemd[1]: run-containerd-runc-k8s.io-46f54f7796f57f48dfef1fd0d3b7c0536b0cd89a39c4a70da316a7525c00dd8e-runc.siT88m.mount: Deactivated successfully. Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.260 [WARNING][5177] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"09dc4739-c8b2-41d7-b069-31f6814494f2", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46", Pod:"calico-apiserver-855f9bdb85-zzpcx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibcc2aaccf11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.261 [INFO][5177] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.261 [INFO][5177] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" iface="eth0" netns="" Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.261 [INFO][5177] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.261 [INFO][5177] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.401 [INFO][5185] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.402 [INFO][5185] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.402 [INFO][5185] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.425 [WARNING][5185] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.425 [INFO][5185] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.429 [INFO][5185] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:37.467331 env[1658]: 2025-08-13 00:03:37.445 [INFO][5177] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.467331 env[1658]: time="2025-08-13T00:03:37.466969454Z" level=info msg="TearDown network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\" successfully" Aug 13 00:03:37.467331 env[1658]: time="2025-08-13T00:03:37.467014970Z" level=info msg="StopPodSandbox for \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\" returns successfully" Aug 13 00:03:37.469214 env[1658]: time="2025-08-13T00:03:37.468893104Z" level=info msg="RemovePodSandbox for \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\"" Aug 13 00:03:37.469214 env[1658]: time="2025-08-13T00:03:37.468959789Z" level=info msg="Forcibly stopping sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\"" Aug 13 00:03:37.642075 env[1658]: time="2025-08-13T00:03:37.641924187Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.650110 env[1658]: time="2025-08-13T00:03:37.650035432Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.654369 env[1658]: time="2025-08-13T00:03:37.654240636Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.658550 env[1658]: time="2025-08-13T00:03:37.658475552Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:37.658998 env[1658]: time="2025-08-13T00:03:37.658943099Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Aug 13 00:03:37.664175 env[1658]: time="2025-08-13T00:03:37.664077746Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Aug 13 00:03:37.666078 env[1658]: time="2025-08-13T00:03:37.666022361Z" level=info msg="CreateContainer within sandbox \"1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.692000 audit: BPF prog-id=212 op=LOAD Aug 13 00:03:37.697779 env[1658]: time="2025-08-13T00:03:37.697605651Z" level=info msg="CreateContainer within sandbox \"1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"d541f5c64e88f923891c3672328e8c6895cffdbfe32f2a9d00701721d665498c\"" Aug 13 00:03:37.696000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.703877 env[1658]: time="2025-08-13T00:03:37.699152031Z" level=info msg="StartContainer for \"d541f5c64e88f923891c3672328e8c6895cffdbfe32f2a9d00701721d665498c\"" Aug 13 00:03:37.696000 audit[5196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4206 pid=5196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436663534663737393666353766343864666566316664306433623763 Aug 13 00:03:37.707000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.707000 audit[5196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4206 pid=5196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436663534663737393666353766343864666566316664306433623763 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.709000 audit: BPF prog-id=213 op=LOAD Aug 13 00:03:37.709000 audit[5196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4206 pid=5196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436663534663737393666353766343864666566316664306433623763 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.712000 audit: BPF prog-id=214 op=LOAD Aug 13 00:03:37.712000 audit[5196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4206 pid=5196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436663534663737393666353766343864666566316664306433623763 Aug 13 00:03:37.713000 audit: BPF prog-id=214 op=UNLOAD Aug 13 00:03:37.714000 audit: BPF prog-id=213 op=UNLOAD Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.569 [WARNING][5216] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"09dc4739-c8b2-41d7-b069-31f6814494f2", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"bb729d2ff234589588134ec7f95c369d789eb6be9e4f69b20625051a0b452e46", Pod:"calico-apiserver-855f9bdb85-zzpcx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibcc2aaccf11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.570 [INFO][5216] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.570 [INFO][5216] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" iface="eth0" netns="" Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.570 [INFO][5216] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.570 [INFO][5216] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.675 [INFO][5230] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.675 [INFO][5230] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.675 [INFO][5230] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.707 [WARNING][5230] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.707 [INFO][5230] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" HandleID="k8s-pod-network.7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zzpcx-eth0" Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.711 [INFO][5230] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:37.719251 env[1658]: 2025-08-13 00:03:37.715 [INFO][5216] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11" Aug 13 00:03:37.719251 env[1658]: time="2025-08-13T00:03:37.719122678Z" level=info msg="TearDown network for sandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\" successfully" Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { perfmon } for pid=5196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit[5196]: AVC avc: denied { bpf } for pid=5196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.717000 audit: BPF prog-id=215 op=LOAD Aug 13 00:03:37.717000 audit[5196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4206 pid=5196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436663534663737393666353766343864666566316664306433623763 Aug 13 00:03:37.728011 env[1658]: time="2025-08-13T00:03:37.727068850Z" level=info msg="RemovePodSandbox \"7b4c1d1ef27494cca2d7c68edd69cc63f78ba5560487d41e20fd12bb60a6bc11\" returns successfully" Aug 13 00:03:37.728497 env[1658]: time="2025-08-13T00:03:37.728427944Z" level=info msg="StopPodSandbox for \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\"" Aug 13 00:03:37.773532 systemd[1]: Started cri-containerd-d541f5c64e88f923891c3672328e8c6895cffdbfe32f2a9d00701721d665498c.scope. Aug 13 00:03:37.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.952000 audit: BPF prog-id=216 op=LOAD Aug 13 00:03:37.959000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.959000 audit[5247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4381 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343166356336346538386639323338393163333637323332386538 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4381 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343166356336346538386639323338393163333637323332386538 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit: BPF prog-id=217 op=LOAD Aug 13 00:03:37.960000 audit[5247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4381 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343166356336346538386639323338393163333637323332386538 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit: BPF prog-id=218 op=LOAD Aug 13 00:03:37.960000 audit[5247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4381 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343166356336346538386639323338393163333637323332386538 Aug 13 00:03:37.960000 audit: BPF prog-id=218 op=UNLOAD Aug 13 00:03:37.960000 audit: BPF prog-id=217 op=UNLOAD Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:37.960000 audit: BPF prog-id=219 op=LOAD Aug 13 00:03:37.960000 audit[5247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4381 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:37.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343166356336346538386639323338393163333637323332386538 Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.854 [WARNING][5261] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0", GenerateName:"calico-kube-controllers-85f4cfff9d-", Namespace:"calico-system", SelfLink:"", UID:"01d325a3-f014-43df-9108-2d734e893a16", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f4cfff9d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd", Pod:"calico-kube-controllers-85f4cfff9d-wr7d6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali74d398590f2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.855 [INFO][5261] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.855 [INFO][5261] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" iface="eth0" netns="" Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.855 [INFO][5261] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.855 [INFO][5261] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.927 [INFO][5279] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.927 [INFO][5279] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.927 [INFO][5279] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.963 [WARNING][5279] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.963 [INFO][5279] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.967 [INFO][5279] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:37.977328 env[1658]: 2025-08-13 00:03:37.973 [INFO][5261] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:37.978217 env[1658]: time="2025-08-13T00:03:37.977385700Z" level=info msg="TearDown network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\" successfully" Aug 13 00:03:37.978217 env[1658]: time="2025-08-13T00:03:37.977443685Z" level=info msg="StopPodSandbox for \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\" returns successfully" Aug 13 00:03:37.979361 env[1658]: time="2025-08-13T00:03:37.978558517Z" level=info msg="RemovePodSandbox for \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\"" Aug 13 00:03:37.979361 env[1658]: time="2025-08-13T00:03:37.978641234Z" level=info msg="Forcibly stopping sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\"" Aug 13 00:03:37.986847 env[1658]: time="2025-08-13T00:03:37.986783295Z" level=info msg="StartContainer for \"46f54f7796f57f48dfef1fd0d3b7c0536b0cd89a39c4a70da316a7525c00dd8e\" returns successfully" Aug 13 00:03:38.133484 env[1658]: time="2025-08-13T00:03:38.133403689Z" level=info msg="StartContainer for \"d541f5c64e88f923891c3672328e8c6895cffdbfe32f2a9d00701721d665498c\" returns successfully" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.126 [WARNING][5302] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0", GenerateName:"calico-kube-controllers-85f4cfff9d-", Namespace:"calico-system", SelfLink:"", UID:"01d325a3-f014-43df-9108-2d734e893a16", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f4cfff9d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd", Pod:"calico-kube-controllers-85f4cfff9d-wr7d6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali74d398590f2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.127 [INFO][5302] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.127 [INFO][5302] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" iface="eth0" netns="" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.127 [INFO][5302] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.127 [INFO][5302] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.206 [INFO][5319] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.206 [INFO][5319] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.206 [INFO][5319] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.234 [WARNING][5319] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.234 [INFO][5319] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" HandleID="k8s-pod-network.56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Workload="ip--172--31--18--163-k8s-calico--kube--controllers--85f4cfff9d--wr7d6-eth0" Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.252 [INFO][5319] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:38.257903 env[1658]: 2025-08-13 00:03:38.255 [INFO][5302] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77" Aug 13 00:03:38.258789 env[1658]: time="2025-08-13T00:03:38.257941014Z" level=info msg="TearDown network for sandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\" successfully" Aug 13 00:03:38.266144 env[1658]: time="2025-08-13T00:03:38.266005553Z" level=info msg="RemovePodSandbox \"56858c91a49257ca53d2b653214dc5c2d9af9e548d978ac831b81d9512faad77\" returns successfully" Aug 13 00:03:38.267155 env[1658]: time="2025-08-13T00:03:38.267084625Z" level=info msg="StopPodSandbox for \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\"" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.382 [WARNING][5338] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155419cf-dcf3-4f89-bb80-fbed7e0cf848", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d", Pod:"csi-node-driver-qhqx2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.83.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9673a742af4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.386 [INFO][5338] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.386 [INFO][5338] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" iface="eth0" netns="" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.387 [INFO][5338] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.387 [INFO][5338] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.448 [INFO][5345] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.448 [INFO][5345] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.448 [INFO][5345] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.540 [WARNING][5345] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.540 [INFO][5345] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.564 [INFO][5345] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:38.576392 env[1658]: 2025-08-13 00:03:38.567 [INFO][5338] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.576392 env[1658]: time="2025-08-13T00:03:38.574706504Z" level=info msg="TearDown network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\" successfully" Aug 13 00:03:38.576392 env[1658]: time="2025-08-13T00:03:38.574749321Z" level=info msg="StopPodSandbox for \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\" returns successfully" Aug 13 00:03:38.579543 env[1658]: time="2025-08-13T00:03:38.579414103Z" level=info msg="RemovePodSandbox for \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\"" Aug 13 00:03:38.579700 env[1658]: time="2025-08-13T00:03:38.579521660Z" level=info msg="Forcibly stopping sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\"" Aug 13 00:03:38.785645 kubelet[2737]: I0813 00:03:38.785361 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-855f9bdb85-zm582" podStartSLOduration=37.533124001 podStartE2EDuration="45.785329174s" podCreationTimestamp="2025-08-13 00:02:53 +0000 UTC" firstStartedPulling="2025-08-13 00:03:29.410000607 +0000 UTC m=+55.710409071" lastFinishedPulling="2025-08-13 00:03:37.66220578 +0000 UTC m=+63.962614244" observedRunningTime="2025-08-13 00:03:38.701639418 +0000 UTC m=+65.002047918" watchObservedRunningTime="2025-08-13 00:03:38.785329174 +0000 UTC m=+65.085737674" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.780 [WARNING][5372] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155419cf-dcf3-4f89-bb80-fbed7e0cf848", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 3, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d", Pod:"csi-node-driver-qhqx2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.83.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9673a742af4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.781 [INFO][5372] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.781 [INFO][5372] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" iface="eth0" netns="" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.781 [INFO][5372] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.781 [INFO][5372] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.887 [INFO][5382] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.894 [INFO][5382] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.894 [INFO][5382] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.921 [WARNING][5382] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.921 [INFO][5382] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" HandleID="k8s-pod-network.433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Workload="ip--172--31--18--163-k8s-csi--node--driver--qhqx2-eth0" Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.928 [INFO][5382] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:38.938589 env[1658]: 2025-08-13 00:03:38.931 [INFO][5372] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb" Aug 13 00:03:38.938589 env[1658]: time="2025-08-13T00:03:38.938531601Z" level=info msg="TearDown network for sandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\" successfully" Aug 13 00:03:38.945931 env[1658]: time="2025-08-13T00:03:38.945851211Z" level=info msg="RemovePodSandbox \"433519cb4f372c06199321e14ff7c4a79d33be86ddfbec7108c8876fc182bddb\" returns successfully" Aug 13 00:03:38.946684 env[1658]: time="2025-08-13T00:03:38.946602957Z" level=info msg="StopPodSandbox for \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\"" Aug 13 00:03:39.063559 kernel: kauditd_printk_skb: 127 callbacks suppressed Aug 13 00:03:39.063727 kernel: audit: type=1325 audit(1755043419.053:1341): table=filter:124 family=2 entries=12 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.053000 audit[5403]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.053000 audit[5403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.078126 kernel: audit: type=1300 audit(1755043419.053:1341): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.053000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:39.087451 kernel: audit: type=1327 audit(1755043419.053:1341): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:39.091000 audit[5403]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.091000 audit[5403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.116330 kernel: audit: type=1325 audit(1755043419.091:1342): table=nat:125 family=2 entries=22 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.116493 kernel: audit: type=1300 audit(1755043419.091:1342): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.091000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:39.129851 kernel: audit: type=1327 audit(1755043419.091:1342): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:39.180000 audit[5412]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.205526 kernel: audit: type=1325 audit(1755043419.180:1343): table=filter:126 family=2 entries=12 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.205780 kernel: audit: type=1300 audit(1755043419.180:1343): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff0659ae0 a2=0 a3=1 items=0 ppid=2885 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.180000 audit[5412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff0659ae0 a2=0 a3=1 items=0 ppid=2885 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.180000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:39.236311 kernel: audit: type=1327 audit(1755043419.180:1343): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:39.243000 audit[5412]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.254340 kernel: audit: type=1325 audit(1755043419.243:1344): table=nat:127 family=2 entries=22 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:39.243000 audit[5412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff0659ae0 a2=0 a3=1 items=0 ppid=2885 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:39.243000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.152 [WARNING][5398] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"673954fb-b359-43b2-9081-665048e7cbd1", ResourceVersion:"1106", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100", Pod:"calico-apiserver-855f9bdb85-zm582", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1b5898b3b3b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.153 [INFO][5398] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.153 [INFO][5398] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" iface="eth0" netns="" Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.153 [INFO][5398] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.153 [INFO][5398] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.252 [INFO][5407] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.253 [INFO][5407] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.254 [INFO][5407] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.283 [WARNING][5407] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.283 [INFO][5407] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.288 [INFO][5407] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:39.296392 env[1658]: 2025-08-13 00:03:39.290 [INFO][5398] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.297227 env[1658]: time="2025-08-13T00:03:39.296431635Z" level=info msg="TearDown network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\" successfully" Aug 13 00:03:39.297227 env[1658]: time="2025-08-13T00:03:39.296477476Z" level=info msg="StopPodSandbox for \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\" returns successfully" Aug 13 00:03:39.300381 env[1658]: time="2025-08-13T00:03:39.299539166Z" level=info msg="RemovePodSandbox for \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\"" Aug 13 00:03:39.300381 env[1658]: time="2025-08-13T00:03:39.299609678Z" level=info msg="Forcibly stopping sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\"" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.443 [WARNING][5423] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0", GenerateName:"calico-apiserver-855f9bdb85-", Namespace:"calico-apiserver", SelfLink:"", UID:"673954fb-b359-43b2-9081-665048e7cbd1", ResourceVersion:"1106", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 2, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"855f9bdb85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-18-163", ContainerID:"1c23a4de063de59cb77afaaf8980307bdaa428945d92f586c1776992fa804100", Pod:"calico-apiserver-855f9bdb85-zm582", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1b5898b3b3b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.444 [INFO][5423] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.444 [INFO][5423] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" iface="eth0" netns="" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.444 [INFO][5423] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.444 [INFO][5423] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.508 [INFO][5431] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.510 [INFO][5431] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.510 [INFO][5431] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.551 [WARNING][5431] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.551 [INFO][5431] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" HandleID="k8s-pod-network.7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Workload="ip--172--31--18--163-k8s-calico--apiserver--855f9bdb85--zm582-eth0" Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.554 [INFO][5431] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:03:39.564112 env[1658]: 2025-08-13 00:03:39.560 [INFO][5423] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75" Aug 13 00:03:39.565315 env[1658]: time="2025-08-13T00:03:39.564142191Z" level=info msg="TearDown network for sandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\" successfully" Aug 13 00:03:39.582902 env[1658]: time="2025-08-13T00:03:39.581959379Z" level=info msg="RemovePodSandbox \"7b52d49381e5f28e4444056253570df0df4d84988e4d14278d6981f0adc87e75\" returns successfully" Aug 13 00:03:39.607345 kubelet[2737]: I0813 00:03:39.606661 2737 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:39.607345 kubelet[2737]: I0813 00:03:39.606661 2737 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:39.941542 systemd[1]: Started sshd@8-172.31.18.163:22-139.178.89.65:40270.service. Aug 13 00:03:39.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.18.163:22-139.178.89.65:40270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:40.153000 audit[5442]: USER_ACCT pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.161114 sshd[5442]: Accepted publickey for core from 139.178.89.65 port 40270 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:40.160000 audit[5442]: CRED_ACQ pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.161000 audit[5442]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd66ce80 a2=3 a3=1 items=0 ppid=1 pid=5442 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:40.161000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:40.163894 sshd[5442]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:40.176151 systemd-logind[1647]: New session 9 of user core. Aug 13 00:03:40.178020 systemd[1]: Started session-9.scope. Aug 13 00:03:40.197000 audit[5442]: USER_START pid=5442 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.199000 audit[5444]: CRED_ACQ pid=5444 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.585643 sshd[5442]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:40.587000 audit[5442]: USER_END pid=5442 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.587000 audit[5442]: CRED_DISP pid=5442 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:40.591693 systemd[1]: sshd@8-172.31.18.163:22-139.178.89.65:40270.service: Deactivated successfully. Aug 13 00:03:40.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.18.163:22-139.178.89.65:40270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:40.593408 systemd[1]: session-9.scope: Deactivated successfully. Aug 13 00:03:40.596091 systemd-logind[1647]: Session 9 logged out. Waiting for processes to exit. Aug 13 00:03:40.599896 systemd-logind[1647]: Removed session 9. Aug 13 00:03:41.756087 env[1658]: time="2025-08-13T00:03:41.756013302Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.761299 env[1658]: time="2025-08-13T00:03:41.761208173Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.770328 env[1658]: time="2025-08-13T00:03:41.770241883Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.776313 env[1658]: time="2025-08-13T00:03:41.776227044Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:41.776938 env[1658]: time="2025-08-13T00:03:41.776866144Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Aug 13 00:03:41.785318 env[1658]: time="2025-08-13T00:03:41.783700790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Aug 13 00:03:41.820127 env[1658]: time="2025-08-13T00:03:41.820041346Z" level=info msg="CreateContainer within sandbox \"322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Aug 13 00:03:41.861036 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2854704356.mount: Deactivated successfully. Aug 13 00:03:41.866696 env[1658]: time="2025-08-13T00:03:41.866612511Z" level=info msg="CreateContainer within sandbox \"322a1824bdb2989b0652148effea462f7fe0864e378f6b5e765b0df3a8bd41dd\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"f19a2a569b0abde5d0132f7cfe8de454374d6b65572ee9215ab3eec4af5861b1\"" Aug 13 00:03:41.867830 env[1658]: time="2025-08-13T00:03:41.867778919Z" level=info msg="StartContainer for \"f19a2a569b0abde5d0132f7cfe8de454374d6b65572ee9215ab3eec4af5861b1\"" Aug 13 00:03:41.939610 systemd[1]: Started cri-containerd-f19a2a569b0abde5d0132f7cfe8de454374d6b65572ee9215ab3eec4af5861b1.scope. Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.152000 audit: BPF prog-id=220 op=LOAD Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4460 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631396132613536396230616264653564303133326637636665386465 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4460 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631396132613536396230616264653564303133326637636665386465 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit: BPF prog-id=221 op=LOAD Aug 13 00:03:42.153000 audit[5461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4460 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631396132613536396230616264653564303133326637636665386465 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit: BPF prog-id=222 op=LOAD Aug 13 00:03:42.153000 audit[5461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4460 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631396132613536396230616264653564303133326637636665386465 Aug 13 00:03:42.153000 audit: BPF prog-id=222 op=UNLOAD Aug 13 00:03:42.153000 audit: BPF prog-id=221 op=UNLOAD Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { perfmon } for pid=5461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit[5461]: AVC avc: denied { bpf } for pid=5461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:42.153000 audit: BPF prog-id=223 op=LOAD Aug 13 00:03:42.153000 audit[5461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4460 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:42.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631396132613536396230616264653564303133326637636665386465 Aug 13 00:03:42.309429 env[1658]: time="2025-08-13T00:03:42.309333214Z" level=info msg="StartContainer for \"f19a2a569b0abde5d0132f7cfe8de454374d6b65572ee9215ab3eec4af5861b1\" returns successfully" Aug 13 00:03:42.647839 kubelet[2737]: I0813 00:03:42.647746 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-855f9bdb85-zzpcx" podStartSLOduration=38.428355558 podStartE2EDuration="49.647725657s" podCreationTimestamp="2025-08-13 00:02:53 +0000 UTC" firstStartedPulling="2025-08-13 00:03:26.076031599 +0000 UTC m=+52.376440063" lastFinishedPulling="2025-08-13 00:03:37.295401638 +0000 UTC m=+63.595810162" observedRunningTime="2025-08-13 00:03:38.789952844 +0000 UTC m=+65.090361308" watchObservedRunningTime="2025-08-13 00:03:42.647725657 +0000 UTC m=+68.948134121" Aug 13 00:03:42.648592 kubelet[2737]: I0813 00:03:42.648308 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-85f4cfff9d-wr7d6" podStartSLOduration=29.890679811 podStartE2EDuration="41.648283985s" podCreationTimestamp="2025-08-13 00:03:01 +0000 UTC" firstStartedPulling="2025-08-13 00:03:30.024169319 +0000 UTC m=+56.324577783" lastFinishedPulling="2025-08-13 00:03:41.781773493 +0000 UTC m=+68.082181957" observedRunningTime="2025-08-13 00:03:42.647022932 +0000 UTC m=+68.947431408" watchObservedRunningTime="2025-08-13 00:03:42.648283985 +0000 UTC m=+68.948692485" Aug 13 00:03:43.188241 env[1658]: time="2025-08-13T00:03:43.188175795Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:43.195233 env[1658]: time="2025-08-13T00:03:43.195175752Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:43.201111 env[1658]: time="2025-08-13T00:03:43.201045998Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:43.206468 env[1658]: time="2025-08-13T00:03:43.206393209Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:43.209133 env[1658]: time="2025-08-13T00:03:43.208005107Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Aug 13 00:03:43.211717 env[1658]: time="2025-08-13T00:03:43.211656023Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Aug 13 00:03:43.215921 env[1658]: time="2025-08-13T00:03:43.215848058Z" level=info msg="CreateContainer within sandbox \"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Aug 13 00:03:43.253465 env[1658]: time="2025-08-13T00:03:43.253395965Z" level=info msg="CreateContainer within sandbox \"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"7bf19bd37864b70c5b3d1e816d07961e40185ee89055aed0f09a16c60b01ff7f\"" Aug 13 00:03:43.254794 env[1658]: time="2025-08-13T00:03:43.254735354Z" level=info msg="StartContainer for \"7bf19bd37864b70c5b3d1e816d07961e40185ee89055aed0f09a16c60b01ff7f\"" Aug 13 00:03:43.347686 systemd[1]: Started cri-containerd-7bf19bd37864b70c5b3d1e816d07961e40185ee89055aed0f09a16c60b01ff7f.scope. Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4747 pid=5521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663139626433373836346237306335623364316538313664303739 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit: BPF prog-id=224 op=LOAD Aug 13 00:03:43.749000 audit[5521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4747 pid=5521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663139626433373836346237306335623364316538313664303739 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit: BPF prog-id=225 op=LOAD Aug 13 00:03:43.749000 audit[5521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4747 pid=5521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663139626433373836346237306335623364316538313664303739 Aug 13 00:03:43.749000 audit: BPF prog-id=225 op=UNLOAD Aug 13 00:03:43.749000 audit: BPF prog-id=224 op=UNLOAD Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { perfmon } for pid=5521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit[5521]: AVC avc: denied { bpf } for pid=5521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:43.749000 audit: BPF prog-id=226 op=LOAD Aug 13 00:03:43.749000 audit[5521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4747 pid=5521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:43.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663139626433373836346237306335623364316538313664303739 Aug 13 00:03:43.787435 env[1658]: time="2025-08-13T00:03:43.787334454Z" level=info msg="StartContainer for \"7bf19bd37864b70c5b3d1e816d07961e40185ee89055aed0f09a16c60b01ff7f\" returns successfully" Aug 13 00:03:43.793288 systemd[1]: run-containerd-runc-k8s.io-7bf19bd37864b70c5b3d1e816d07961e40185ee89055aed0f09a16c60b01ff7f-runc.WESMvi.mount: Deactivated successfully. Aug 13 00:03:45.619152 systemd[1]: Started sshd@9-172.31.18.163:22-139.178.89.65:40278.service. Aug 13 00:03:45.632762 kernel: kauditd_printk_skb: 113 callbacks suppressed Aug 13 00:03:45.632921 kernel: audit: type=1130 audit(1755043425.618:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.163:22-139.178.89.65:40278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:45.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.163:22-139.178.89.65:40278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:45.838000 audit[5560]: USER_ACCT pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.843456 sshd[5560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:45.851798 sshd[5560]: Accepted publickey for core from 139.178.89.65 port 40278 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:45.840000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.863612 kernel: audit: type=1101 audit(1755043425.838:1379): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.863759 kernel: audit: type=1103 audit(1755043425.840:1380): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.873834 kernel: audit: type=1006 audit(1755043425.840:1381): pid=5560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Aug 13 00:03:45.869401 systemd[1]: Started session-10.scope. Aug 13 00:03:45.870926 systemd-logind[1647]: New session 10 of user core. Aug 13 00:03:45.840000 audit[5560]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff699bf50 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:45.840000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:45.899307 kernel: audit: type=1300 audit(1755043425.840:1381): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff699bf50 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:45.899465 kernel: audit: type=1327 audit(1755043425.840:1381): proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:45.913000 audit[5560]: USER_START pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.916000 audit[5563]: CRED_ACQ pid=5563 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.929410 kernel: audit: type=1105 audit(1755043425.913:1382): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:45.944326 kernel: audit: type=1103 audit(1755043425.916:1383): pid=5563 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.177510 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2398349694.mount: Deactivated successfully. Aug 13 00:03:46.358589 sshd[5560]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:46.359000 audit[5560]: USER_END pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.363553 systemd[1]: session-10.scope: Deactivated successfully. Aug 13 00:03:46.364696 systemd[1]: sshd@9-172.31.18.163:22-139.178.89.65:40278.service: Deactivated successfully. Aug 13 00:03:46.374744 systemd-logind[1647]: Session 10 logged out. Waiting for processes to exit. Aug 13 00:03:46.360000 audit[5560]: CRED_DISP pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.394771 kernel: audit: type=1106 audit(1755043426.359:1384): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.394953 kernel: audit: type=1104 audit(1755043426.360:1385): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.386037 systemd[1]: Started sshd@10-172.31.18.163:22-139.178.89.65:40286.service. Aug 13 00:03:46.399683 systemd-logind[1647]: Removed session 10. Aug 13 00:03:46.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.163:22-139.178.89.65:40278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:46.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.18.163:22-139.178.89.65:40286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:46.491698 kubelet[2737]: I0813 00:03:46.491058 2737 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:46.607000 audit[5578]: USER_ACCT pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.609165 sshd[5578]: Accepted publickey for core from 139.178.89.65 port 40286 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:46.609000 audit[5578]: CRED_ACQ pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.609000 audit[5578]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb50ad00 a2=3 a3=1 items=0 ppid=1 pid=5578 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:46.609000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:46.611972 sshd[5578]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:46.621888 systemd[1]: Started session-11.scope. Aug 13 00:03:46.623053 systemd-logind[1647]: New session 11 of user core. Aug 13 00:03:46.638000 audit[5578]: USER_START pid=5578 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:46.641000 audit[5580]: CRED_ACQ pid=5580 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.216429 sshd[5578]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:47.216000 audit[5578]: USER_END pid=5578 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.217000 audit[5578]: CRED_DISP pid=5578 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.221765 systemd-logind[1647]: Session 11 logged out. Waiting for processes to exit. Aug 13 00:03:47.222130 systemd[1]: session-11.scope: Deactivated successfully. Aug 13 00:03:47.223413 systemd[1]: sshd@10-172.31.18.163:22-139.178.89.65:40286.service: Deactivated successfully. Aug 13 00:03:47.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.18.163:22-139.178.89.65:40286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:47.227598 systemd-logind[1647]: Removed session 11. Aug 13 00:03:47.243814 systemd[1]: Started sshd@11-172.31.18.163:22-139.178.89.65:40288.service. Aug 13 00:03:47.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.18.163:22-139.178.89.65:40288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:47.447000 audit[5588]: USER_ACCT pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.450628 sshd[5588]: Accepted publickey for core from 139.178.89.65 port 40288 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:47.453000 audit[5588]: CRED_ACQ pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.454000 audit[5588]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebb1ac80 a2=3 a3=1 items=0 ppid=1 pid=5588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:47.454000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:47.457203 sshd[5588]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:47.469128 systemd-logind[1647]: New session 12 of user core. Aug 13 00:03:47.472396 systemd[1]: Started session-12.scope. Aug 13 00:03:47.496000 audit[5588]: USER_START pid=5588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.499000 audit[5590]: CRED_ACQ pid=5590 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.898209 sshd[5588]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:47.899000 audit[5588]: USER_END pid=5588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.899000 audit[5588]: CRED_DISP pid=5588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:47.904199 systemd[1]: sshd@11-172.31.18.163:22-139.178.89.65:40288.service: Deactivated successfully. Aug 13 00:03:47.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.18.163:22-139.178.89.65:40288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:47.905760 systemd[1]: session-12.scope: Deactivated successfully. Aug 13 00:03:47.908552 systemd-logind[1647]: Session 12 logged out. Waiting for processes to exit. Aug 13 00:03:47.911339 systemd-logind[1647]: Removed session 12. Aug 13 00:03:47.986641 env[1658]: time="2025-08-13T00:03:47.986578283Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:47.991385 env[1658]: time="2025-08-13T00:03:47.991312611Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:47.995359 env[1658]: time="2025-08-13T00:03:47.995242610Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:48.000756 env[1658]: time="2025-08-13T00:03:48.000683406Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:48.002522 env[1658]: time="2025-08-13T00:03:48.002462308Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Aug 13 00:03:48.006950 env[1658]: time="2025-08-13T00:03:48.006901554Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Aug 13 00:03:48.010795 env[1658]: time="2025-08-13T00:03:48.010708971Z" level=info msg="CreateContainer within sandbox \"b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Aug 13 00:03:48.056721 env[1658]: time="2025-08-13T00:03:48.056653370Z" level=info msg="CreateContainer within sandbox \"b23fa3367288a90d1327c0ff62434a302e657207b0559f0a907f50898fa210ed\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83\"" Aug 13 00:03:48.058071 env[1658]: time="2025-08-13T00:03:48.058007362Z" level=info msg="StartContainer for \"95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83\"" Aug 13 00:03:48.151420 systemd[1]: run-containerd-runc-k8s.io-95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83-runc.wfSfgs.mount: Deactivated successfully. Aug 13 00:03:48.163924 systemd[1]: Started cri-containerd-95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83.scope. Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.421000 audit: BPF prog-id=227 op=LOAD Aug 13 00:03:48.423000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.423000 audit[5607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4689 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343633616335343231383265363462326533663863323832333233 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4689 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343633616335343231383265363462326533663863323832333233 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.424000 audit: BPF prog-id=228 op=LOAD Aug 13 00:03:48.424000 audit[5607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4689 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343633616335343231383265363462326533663863323832333233 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.433000 audit: BPF prog-id=229 op=LOAD Aug 13 00:03:48.433000 audit[5607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4689 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343633616335343231383265363462326533663863323832333233 Aug 13 00:03:48.437000 audit: BPF prog-id=229 op=UNLOAD Aug 13 00:03:48.437000 audit: BPF prog-id=228 op=UNLOAD Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { perfmon } for pid=5607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit[5607]: AVC avc: denied { bpf } for pid=5607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:48.438000 audit: BPF prog-id=230 op=LOAD Aug 13 00:03:48.438000 audit[5607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4689 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343633616335343231383265363462326533663863323832333233 Aug 13 00:03:48.622077 env[1658]: time="2025-08-13T00:03:48.622002224Z" level=info msg="StartContainer for \"95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83\" returns successfully" Aug 13 00:03:48.799000 audit[5646]: NETFILTER_CFG table=filter:128 family=2 entries=12 op=nft_register_rule pid=5646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:48.799000 audit[5646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc45fb360 a2=0 a3=1 items=0 ppid=2885 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.799000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:48.809000 audit[5646]: NETFILTER_CFG table=nat:129 family=2 entries=22 op=nft_register_rule pid=5646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:48.809000 audit[5646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc45fb360 a2=0 a3=1 items=0 ppid=2885 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:48.809000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:49.489004 kubelet[2737]: I0813 00:03:49.488947 2737 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:03:49.735229 env[1658]: time="2025-08-13T00:03:49.735152540Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:49.738964 env[1658]: time="2025-08-13T00:03:49.738886336Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:49.742658 env[1658]: time="2025-08-13T00:03:49.742487353Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:49.748545 env[1658]: time="2025-08-13T00:03:49.748460806Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:03:49.751250 env[1658]: time="2025-08-13T00:03:49.750377373Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Aug 13 00:03:49.756186 env[1658]: time="2025-08-13T00:03:49.756118805Z" level=info msg="CreateContainer within sandbox \"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Aug 13 00:03:49.802896 env[1658]: time="2025-08-13T00:03:49.802785805Z" level=info msg="CreateContainer within sandbox \"0724334c627f3c454cfe383b1c23b6ddff85359c1bdfe6ea62e80f56a696233d\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"fc8c5950042bb6ce237ec1d64957b384d89311d61e01b8e311d7c79ecbf139b3\"" Aug 13 00:03:49.804476 env[1658]: time="2025-08-13T00:03:49.804384154Z" level=info msg="StartContainer for \"fc8c5950042bb6ce237ec1d64957b384d89311d61e01b8e311d7c79ecbf139b3\"" Aug 13 00:03:49.865000 audit[5271]: AVC avc: denied { watch } for pid=5271 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.1286318736/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c369 tclass=file permissive=0 Aug 13 00:03:49.865000 audit[5271]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400101ed80 a2=fc6 a3=0 items=0 ppid=4381 pid=5271 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 key=(null) Aug 13 00:03:49.865000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:03:49.898874 systemd[1]: Started cri-containerd-fc8c5950042bb6ce237ec1d64957b384d89311d61e01b8e311d7c79ecbf139b3.scope. Aug 13 00:03:49.967170 kubelet[2737]: I0813 00:03:49.967036 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-5mk2m" podStartSLOduration=33.946649783 podStartE2EDuration="49.967009554s" podCreationTimestamp="2025-08-13 00:03:00 +0000 UTC" firstStartedPulling="2025-08-13 00:03:31.984967302 +0000 UTC m=+58.285375766" lastFinishedPulling="2025-08-13 00:03:48.005327085 +0000 UTC m=+74.305735537" observedRunningTime="2025-08-13 00:03:48.726735439 +0000 UTC m=+75.027143891" watchObservedRunningTime="2025-08-13 00:03:49.967009554 +0000 UTC m=+76.267418018" Aug 13 00:03:50.046339 systemd[1]: run-containerd-runc-k8s.io-fc8c5950042bb6ce237ec1d64957b384d89311d61e01b8e311d7c79ecbf139b3-runc.aMEd83.mount: Deactivated successfully. Aug 13 00:03:50.096000 audit[5681]: NETFILTER_CFG table=filter:130 family=2 entries=11 op=nft_register_rule pid=5681 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:50.096000 audit[5681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff7994e70 a2=0 a3=1 items=0 ppid=2885 pid=5681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:50.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:50.113000 audit[5681]: NETFILTER_CFG table=nat:131 family=2 entries=29 op=nft_register_chain pid=5681 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:50.113000 audit[5681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffff7994e70 a2=0 a3=1 items=0 ppid=2885 pid=5681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:50.113000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4747 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:50.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386335393530303432626236636532333765633164363439353762 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit: BPF prog-id=231 op=LOAD Aug 13 00:03:50.138000 audit[5662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4747 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:50.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386335393530303432626236636532333765633164363439353762 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit: BPF prog-id=232 op=LOAD Aug 13 00:03:50.138000 audit[5662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4747 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:50.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386335393530303432626236636532333765633164363439353762 Aug 13 00:03:50.138000 audit: BPF prog-id=232 op=UNLOAD Aug 13 00:03:50.138000 audit: BPF prog-id=231 op=UNLOAD Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:03:50.138000 audit: BPF prog-id=233 op=LOAD Aug 13 00:03:50.138000 audit[5662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4747 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:50.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386335393530303432626236636532333765633164363439353762 Aug 13 00:03:50.182495 env[1658]: time="2025-08-13T00:03:50.182398841Z" level=info msg="StartContainer for \"fc8c5950042bb6ce237ec1d64957b384d89311d61e01b8e311d7c79ecbf139b3\" returns successfully" Aug 13 00:03:50.308579 kubelet[2737]: I0813 00:03:50.308410 2737 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Aug 13 00:03:50.308579 kubelet[2737]: I0813 00:03:50.308514 2737 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Aug 13 00:03:51.726537 kernel: kauditd_printk_skb: 138 callbacks suppressed Aug 13 00:03:51.726739 kernel: audit: type=1400 audit(1755043431.711:1434): avc: denied { watch } for pid=5222 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.3757813382/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c92,c508 tclass=file permissive=0 Aug 13 00:03:51.711000 audit[5222]: AVC avc: denied { watch } for pid=5222 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.3757813382/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c92,c508 tclass=file permissive=0 Aug 13 00:03:51.711000 audit[5222]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000636280 a2=fc6 a3=0 items=0 ppid=4206 pid=5222 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 key=(null) Aug 13 00:03:51.743672 kernel: audit: type=1300 audit(1755043431.711:1434): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000636280 a2=fc6 a3=0 items=0 ppid=4206 pid=5222 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 key=(null) Aug 13 00:03:51.711000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:03:51.756332 kernel: audit: type=1327 audit(1755043431.711:1434): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:03:51.802643 kubelet[2737]: I0813 00:03:51.802541 2737 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-qhqx2" podStartSLOduration=32.570978815 podStartE2EDuration="50.802488077s" podCreationTimestamp="2025-08-13 00:03:01 +0000 UTC" firstStartedPulling="2025-08-13 00:03:31.521478713 +0000 UTC m=+57.821887165" lastFinishedPulling="2025-08-13 00:03:49.752987963 +0000 UTC m=+76.053396427" observedRunningTime="2025-08-13 00:03:50.721980498 +0000 UTC m=+77.022388974" watchObservedRunningTime="2025-08-13 00:03:51.802488077 +0000 UTC m=+78.102896553" Aug 13 00:03:51.896000 audit[5715]: NETFILTER_CFG table=filter:132 family=2 entries=10 op=nft_register_rule pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:51.896000 audit[5715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:51.918299 kernel: audit: type=1325 audit(1755043431.896:1435): table=filter:132 family=2 entries=10 op=nft_register_rule pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:51.918451 kernel: audit: type=1300 audit(1755043431.896:1435): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:51.896000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:51.930419 kernel: audit: type=1327 audit(1755043431.896:1435): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:51.939000 audit[5715]: NETFILTER_CFG table=nat:133 family=2 entries=36 op=nft_register_chain pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:51.939000 audit[5715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:51.959797 kernel: audit: type=1325 audit(1755043431.939:1436): table=nat:133 family=2 entries=36 op=nft_register_chain pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:03:51.959962 kernel: audit: type=1300 audit(1755043431.939:1436): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:51.939000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:51.966225 kernel: audit: type=1327 audit(1755043431.939:1436): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:03:52.932462 systemd[1]: Started sshd@12-172.31.18.163:22-139.178.89.65:36958.service. Aug 13 00:03:52.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.18.163:22-139.178.89.65:36958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:52.943309 kernel: audit: type=1130 audit(1755043432.931:1437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.18.163:22-139.178.89.65:36958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:53.128000 audit[5719]: USER_ACCT pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:53.132351 sshd[5719]: Accepted publickey for core from 139.178.89.65 port 36958 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:53.131000 audit[5719]: CRED_ACQ pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:53.131000 audit[5719]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2a2afb0 a2=3 a3=1 items=0 ppid=1 pid=5719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:53.131000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:53.134027 sshd[5719]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:53.143660 systemd-logind[1647]: New session 13 of user core. Aug 13 00:03:53.147575 systemd[1]: Started session-13.scope. Aug 13 00:03:53.157000 audit[5719]: USER_START pid=5719 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:53.161000 audit[5721]: CRED_ACQ pid=5721 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:53.470432 sshd[5719]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:53.472000 audit[5719]: USER_END pid=5719 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:53.472000 audit[5719]: CRED_DISP pid=5719 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:53.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.18.163:22-139.178.89.65:36958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:53.476480 systemd-logind[1647]: Session 13 logged out. Waiting for processes to exit. Aug 13 00:03:53.477095 systemd[1]: sshd@12-172.31.18.163:22-139.178.89.65:36958.service: Deactivated successfully. Aug 13 00:03:53.478742 systemd[1]: session-13.scope: Deactivated successfully. Aug 13 00:03:53.481370 systemd-logind[1647]: Removed session 13. Aug 13 00:03:55.932834 systemd[1]: run-containerd-runc-k8s.io-e700297ba4ad131f981ecd8c61e7338d0e7377a8427e88e9e44fc05955e060ba-runc.MuMKIL.mount: Deactivated successfully. Aug 13 00:03:58.502616 systemd[1]: Started sshd@13-172.31.18.163:22-139.178.89.65:36972.service. Aug 13 00:03:58.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.163:22-139.178.89.65:36972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:58.505851 kernel: kauditd_printk_skb: 10 callbacks suppressed Aug 13 00:03:58.506010 kernel: audit: type=1130 audit(1755043438.502:1446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.163:22-139.178.89.65:36972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:58.704106 sshd[5758]: Accepted publickey for core from 139.178.89.65 port 36972 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:03:58.702000 audit[5758]: USER_ACCT pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:58.716446 sshd[5758]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:58.713000 audit[5758]: CRED_ACQ pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:58.726934 kernel: audit: type=1101 audit(1755043438.702:1447): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:58.727082 kernel: audit: type=1103 audit(1755043438.713:1448): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:58.713000 audit[5758]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc8a2740 a2=3 a3=1 items=0 ppid=1 pid=5758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:58.748515 kernel: audit: type=1006 audit(1755043438.713:1449): pid=5758 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Aug 13 00:03:58.748658 kernel: audit: type=1300 audit(1755043438.713:1449): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc8a2740 a2=3 a3=1 items=0 ppid=1 pid=5758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:58.748714 kernel: audit: type=1327 audit(1755043438.713:1449): proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:58.713000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:03:58.752557 systemd-logind[1647]: New session 14 of user core. Aug 13 00:03:58.757916 systemd[1]: Started session-14.scope. Aug 13 00:03:58.773000 audit[5758]: USER_START pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:58.787000 audit[5760]: CRED_ACQ pid=5760 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:58.798677 kernel: audit: type=1105 audit(1755043438.773:1450): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:58.798823 kernel: audit: type=1103 audit(1755043438.787:1451): pid=5760 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:59.107199 sshd[5758]: pam_unix(sshd:session): session closed for user core Aug 13 00:03:59.107000 audit[5758]: USER_END pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:59.108000 audit[5758]: CRED_DISP pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:59.124380 systemd[1]: sshd@13-172.31.18.163:22-139.178.89.65:36972.service: Deactivated successfully. Aug 13 00:03:59.125844 systemd[1]: session-14.scope: Deactivated successfully. Aug 13 00:03:59.134306 kernel: audit: type=1106 audit(1755043439.107:1452): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:59.134432 kernel: audit: type=1104 audit(1755043439.108:1453): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:03:59.134465 systemd-logind[1647]: Session 14 logged out. Waiting for processes to exit. Aug 13 00:03:59.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.163:22-139.178.89.65:36972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:59.136826 systemd-logind[1647]: Removed session 14. Aug 13 00:04:04.143732 systemd[1]: Started sshd@14-172.31.18.163:22-139.178.89.65:37164.service. Aug 13 00:04:04.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.163:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:04.147741 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:04.147880 kernel: audit: type=1130 audit(1755043444.144:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.163:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:04.336571 sshd[5770]: Accepted publickey for core from 139.178.89.65 port 37164 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:04.335000 audit[5770]: USER_ACCT pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.350372 sshd[5770]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:04.348000 audit[5770]: CRED_ACQ pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.363406 kernel: audit: type=1101 audit(1755043444.335:1456): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.363562 kernel: audit: type=1103 audit(1755043444.348:1457): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.372361 kernel: audit: type=1006 audit(1755043444.348:1458): pid=5770 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Aug 13 00:04:04.371417 systemd[1]: Started session-15.scope. Aug 13 00:04:04.371635 systemd-logind[1647]: New session 15 of user core. Aug 13 00:04:04.348000 audit[5770]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b4b660 a2=3 a3=1 items=0 ppid=1 pid=5770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:04.383202 kernel: audit: type=1300 audit(1755043444.348:1458): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b4b660 a2=3 a3=1 items=0 ppid=1 pid=5770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:04.348000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:04.387455 kernel: audit: type=1327 audit(1755043444.348:1458): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:04.394000 audit[5770]: USER_START pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.410000 audit[5772]: CRED_ACQ pid=5772 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.422899 kernel: audit: type=1105 audit(1755043444.394:1459): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.423152 kernel: audit: type=1103 audit(1755043444.410:1460): pid=5772 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.727198 sshd[5770]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:04.728000 audit[5770]: USER_END pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.736000 systemd[1]: sshd@14-172.31.18.163:22-139.178.89.65:37164.service: Deactivated successfully. Aug 13 00:04:04.737415 systemd[1]: session-15.scope: Deactivated successfully. Aug 13 00:04:04.739677 systemd-logind[1647]: Session 15 logged out. Waiting for processes to exit. Aug 13 00:04:04.741918 systemd-logind[1647]: Removed session 15. Aug 13 00:04:04.728000 audit[5770]: CRED_DISP pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.754429 kernel: audit: type=1106 audit(1755043444.728:1461): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.754626 kernel: audit: type=1104 audit(1755043444.728:1462): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:04.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.163:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:09.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.163:22-139.178.89.65:45832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:09.756984 systemd[1]: Started sshd@15-172.31.18.163:22-139.178.89.65:45832.service. Aug 13 00:04:09.760314 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:09.760434 kernel: audit: type=1130 audit(1755043449.756:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.163:22-139.178.89.65:45832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:09.954599 sshd[5788]: Accepted publickey for core from 139.178.89.65 port 45832 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:09.953000 audit[5788]: USER_ACCT pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:09.966531 sshd[5788]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:09.964000 audit[5788]: CRED_ACQ pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:09.979555 kernel: audit: type=1101 audit(1755043449.953:1465): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:09.979723 kernel: audit: type=1103 audit(1755043449.964:1466): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:09.986357 systemd-logind[1647]: New session 16 of user core. Aug 13 00:04:09.991018 kernel: audit: type=1006 audit(1755043449.964:1467): pid=5788 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Aug 13 00:04:09.993320 kernel: audit: type=1300 audit(1755043449.964:1467): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf95f8c0 a2=3 a3=1 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.964000 audit[5788]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf95f8c0 a2=3 a3=1 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.994399 systemd[1]: Started session-16.scope. Aug 13 00:04:09.964000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:10.022454 kernel: audit: type=1327 audit(1755043449.964:1467): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:10.006000 audit[5788]: USER_START pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.037003 kernel: audit: type=1105 audit(1755043450.006:1468): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.011000 audit[5792]: CRED_ACQ pid=5792 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.050798 kernel: audit: type=1103 audit(1755043450.011:1469): pid=5792 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.334019 sshd[5788]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:10.335000 audit[5788]: USER_END pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.340557 systemd-logind[1647]: Session 16 logged out. Waiting for processes to exit. Aug 13 00:04:10.351723 systemd[1]: sshd@15-172.31.18.163:22-139.178.89.65:45832.service: Deactivated successfully. Aug 13 00:04:10.353251 systemd[1]: session-16.scope: Deactivated successfully. Aug 13 00:04:10.336000 audit[5788]: CRED_DISP pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.357681 systemd-logind[1647]: Removed session 16. Aug 13 00:04:10.365278 kernel: audit: type=1106 audit(1755043450.335:1470): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.365465 kernel: audit: type=1104 audit(1755043450.336:1471): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:10.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.163:22-139.178.89.65:45832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:11.489892 systemd[1]: run-containerd-runc-k8s.io-f19a2a569b0abde5d0132f7cfe8de454374d6b65572ee9215ab3eec4af5861b1-runc.89YcCD.mount: Deactivated successfully. Aug 13 00:04:11.558084 systemd[1]: run-containerd-runc-k8s.io-95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83-runc.9XG9Pm.mount: Deactivated successfully. Aug 13 00:04:11.839000 audit[5840]: NETFILTER_CFG table=filter:134 family=2 entries=9 op=nft_register_rule pid=5840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:11.839000 audit[5840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc63b28d0 a2=0 a3=1 items=0 ppid=2885 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:11.839000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:11.844000 audit[5840]: NETFILTER_CFG table=nat:135 family=2 entries=31 op=nft_register_chain pid=5840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:11.844000 audit[5840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffc63b28d0 a2=0 a3=1 items=0 ppid=2885 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:11.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:15.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.163:22-139.178.89.65:45846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:15.364931 systemd[1]: Started sshd@16-172.31.18.163:22-139.178.89.65:45846.service. Aug 13 00:04:15.367502 kernel: kauditd_printk_skb: 7 callbacks suppressed Aug 13 00:04:15.367605 kernel: audit: type=1130 audit(1755043455.364:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.163:22-139.178.89.65:45846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:15.557000 audit[5844]: USER_ACCT pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.558861 sshd[5844]: Accepted publickey for core from 139.178.89.65 port 45846 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:15.571924 sshd[5844]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:15.569000 audit[5844]: CRED_ACQ pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.583679 kernel: audit: type=1101 audit(1755043455.557:1476): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.583829 kernel: audit: type=1103 audit(1755043455.569:1477): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.590453 systemd-logind[1647]: New session 17 of user core. Aug 13 00:04:15.593097 systemd[1]: Started session-17.scope. Aug 13 00:04:15.597448 kernel: audit: type=1006 audit(1755043455.569:1478): pid=5844 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Aug 13 00:04:15.569000 audit[5844]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdadd9270 a2=3 a3=1 items=0 ppid=1 pid=5844 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:15.608306 kernel: audit: type=1300 audit(1755043455.569:1478): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdadd9270 a2=3 a3=1 items=0 ppid=1 pid=5844 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:15.569000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:15.612736 kernel: audit: type=1327 audit(1755043455.569:1478): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:15.609000 audit[5844]: USER_START pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.627892 kernel: audit: type=1105 audit(1755043455.609:1479): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.613000 audit[5846]: CRED_ACQ pid=5846 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.638473 kernel: audit: type=1103 audit(1755043455.613:1480): pid=5846 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.963927 sshd[5844]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:15.964000 audit[5844]: USER_END pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.969873 systemd[1]: session-17.scope: Deactivated successfully. Aug 13 00:04:15.970955 systemd[1]: sshd@16-172.31.18.163:22-139.178.89.65:45846.service: Deactivated successfully. Aug 13 00:04:15.972730 systemd-logind[1647]: Session 17 logged out. Waiting for processes to exit. Aug 13 00:04:15.975279 systemd-logind[1647]: Removed session 17. Aug 13 00:04:15.964000 audit[5844]: CRED_DISP pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.987988 kernel: audit: type=1106 audit(1755043455.964:1481): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.988187 kernel: audit: type=1104 audit(1755043455.964:1482): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:15.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.163:22-139.178.89.65:45846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:16.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.18.163:22-139.178.89.65:45858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:16.005915 systemd[1]: Started sshd@17-172.31.18.163:22-139.178.89.65:45858.service. Aug 13 00:04:16.186000 audit[5856]: USER_ACCT pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:16.187760 sshd[5856]: Accepted publickey for core from 139.178.89.65 port 45858 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:16.188000 audit[5856]: CRED_ACQ pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:16.188000 audit[5856]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5f897f0 a2=3 a3=1 items=0 ppid=1 pid=5856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:16.188000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:16.190995 sshd[5856]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:16.201051 systemd[1]: Started session-18.scope. Aug 13 00:04:16.203401 systemd-logind[1647]: New session 18 of user core. Aug 13 00:04:16.218000 audit[5856]: USER_START pid=5856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:16.224000 audit[5858]: CRED_ACQ pid=5858 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:16.875604 sshd[5856]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:16.876000 audit[5856]: USER_END pid=5856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:16.876000 audit[5856]: CRED_DISP pid=5856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:16.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.18.163:22-139.178.89.65:45858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:16.882466 systemd[1]: session-18.scope: Deactivated successfully. Aug 13 00:04:16.883663 systemd[1]: sshd@17-172.31.18.163:22-139.178.89.65:45858.service: Deactivated successfully. Aug 13 00:04:16.886001 systemd-logind[1647]: Session 18 logged out. Waiting for processes to exit. Aug 13 00:04:16.892369 systemd-logind[1647]: Removed session 18. Aug 13 00:04:16.915235 systemd[1]: Started sshd@18-172.31.18.163:22-139.178.89.65:45862.service. Aug 13 00:04:16.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.18.163:22-139.178.89.65:45862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:17.081000 audit[5866]: USER_ACCT pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:17.083539 sshd[5866]: Accepted publickey for core from 139.178.89.65 port 45862 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:17.084000 audit[5866]: CRED_ACQ pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:17.085000 audit[5866]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed011650 a2=3 a3=1 items=0 ppid=1 pid=5866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:17.085000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:17.087502 sshd[5866]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:17.097635 systemd[1]: Started session-19.scope. Aug 13 00:04:17.100823 systemd-logind[1647]: New session 19 of user core. Aug 13 00:04:17.111000 audit[5866]: USER_START pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:17.113000 audit[5868]: CRED_ACQ pid=5868 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.355776 sshd[5866]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:21.373747 kernel: kauditd_printk_skb: 20 callbacks suppressed Aug 13 00:04:21.373930 kernel: audit: type=1106 audit(1755043461.358:1499): pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.358000 audit[5866]: USER_END pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.386337 systemd[1]: sshd@18-172.31.18.163:22-139.178.89.65:45862.service: Deactivated successfully. Aug 13 00:04:21.388168 systemd[1]: session-19.scope: Deactivated successfully. Aug 13 00:04:21.388561 systemd[1]: session-19.scope: Consumed 1.219s CPU time. Aug 13 00:04:21.358000 audit[5866]: CRED_DISP pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.399166 kernel: audit: type=1104 audit(1755043461.358:1500): pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.401519 systemd-logind[1647]: Session 19 logged out. Waiting for processes to exit. Aug 13 00:04:21.405013 systemd[1]: Started sshd@19-172.31.18.163:22-139.178.89.65:45960.service. Aug 13 00:04:21.409830 systemd-logind[1647]: Removed session 19. Aug 13 00:04:21.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.18.163:22-139.178.89.65:45862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:21.420881 kernel: audit: type=1131 audit(1755043461.385:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.18.163:22-139.178.89.65:45862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:21.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.163:22-139.178.89.65:45960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:21.431086 kernel: audit: type=1130 audit(1755043461.406:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.163:22-139.178.89.65:45960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:21.486000 audit[5882]: NETFILTER_CFG table=filter:136 family=2 entries=20 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.486000 audit[5882]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.506698 kernel: audit: type=1325 audit(1755043461.486:1503): table=filter:136 family=2 entries=20 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.506875 kernel: audit: type=1300 audit(1755043461.486:1503): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.486000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:21.516312 kernel: audit: type=1327 audit(1755043461.486:1503): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:21.521000 audit[5882]: NETFILTER_CFG table=nat:137 family=2 entries=26 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.530313 kernel: audit: type=1325 audit(1755043461.521:1504): table=nat:137 family=2 entries=26 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.521000 audit[5882]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.545326 kernel: audit: type=1300 audit(1755043461.521:1504): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.521000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:21.554306 kernel: audit: type=1327 audit(1755043461.521:1504): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:21.589000 audit[5884]: NETFILTER_CFG table=filter:138 family=2 entries=32 op=nft_register_rule pid=5884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.589000 audit[5884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdcd9fa40 a2=0 a3=1 items=0 ppid=2885 pid=5884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:21.597000 audit[5884]: NETFILTER_CFG table=nat:139 family=2 entries=26 op=nft_register_rule pid=5884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:21.597000 audit[5884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffdcd9fa40 a2=0 a3=1 items=0 ppid=2885 pid=5884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.597000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:21.626000 audit[5880]: USER_ACCT pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.628137 sshd[5880]: Accepted publickey for core from 139.178.89.65 port 45960 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:21.633701 sshd[5880]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:21.631000 audit[5880]: CRED_ACQ pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.631000 audit[5880]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb8d1300 a2=3 a3=1 items=0 ppid=1 pid=5880 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:21.631000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:21.644129 systemd-logind[1647]: New session 20 of user core. Aug 13 00:04:21.646638 systemd[1]: Started session-20.scope. Aug 13 00:04:21.660000 audit[5880]: USER_START pid=5880 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:21.663000 audit[5885]: CRED_ACQ pid=5885 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.363879 sshd[5880]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:22.366000 audit[5880]: USER_END pid=5880 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.366000 audit[5880]: CRED_DISP pid=5880 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.163:22-139.178.89.65:45960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:22.372155 systemd[1]: sshd@19-172.31.18.163:22-139.178.89.65:45960.service: Deactivated successfully. Aug 13 00:04:22.373362 systemd-logind[1647]: Session 20 logged out. Waiting for processes to exit. Aug 13 00:04:22.375048 systemd[1]: session-20.scope: Deactivated successfully. Aug 13 00:04:22.376862 systemd-logind[1647]: Removed session 20. Aug 13 00:04:22.396351 systemd[1]: Started sshd@20-172.31.18.163:22-139.178.89.65:45966.service. Aug 13 00:04:22.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.18.163:22-139.178.89.65:45966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:22.578000 audit[5893]: USER_ACCT pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.580255 sshd[5893]: Accepted publickey for core from 139.178.89.65 port 45966 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:22.581000 audit[5893]: CRED_ACQ pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.581000 audit[5893]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe87a5fc0 a2=3 a3=1 items=0 ppid=1 pid=5893 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:22.581000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:22.583542 sshd[5893]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:22.592467 systemd-logind[1647]: New session 21 of user core. Aug 13 00:04:22.594977 systemd[1]: Started session-21.scope. Aug 13 00:04:22.603000 audit[5893]: USER_START pid=5893 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.606000 audit[5895]: CRED_ACQ pid=5895 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.913140 sshd[5893]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:22.914000 audit[5893]: USER_END pid=5893 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.914000 audit[5893]: CRED_DISP pid=5893 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:22.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.18.163:22-139.178.89.65:45966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:22.919400 systemd[1]: sshd@20-172.31.18.163:22-139.178.89.65:45966.service: Deactivated successfully. Aug 13 00:04:22.920932 systemd[1]: session-21.scope: Deactivated successfully. Aug 13 00:04:22.923133 systemd-logind[1647]: Session 21 logged out. Waiting for processes to exit. Aug 13 00:04:22.926232 systemd-logind[1647]: Removed session 21. Aug 13 00:04:23.641646 amazon-ssm-agent[1652]: 2025-08-13 00:04:23 INFO [HealthCheck] HealthCheck reporting agent health. Aug 13 00:04:25.947825 systemd[1]: run-containerd-runc-k8s.io-e700297ba4ad131f981ecd8c61e7338d0e7377a8427e88e9e44fc05955e060ba-runc.EunHuP.mount: Deactivated successfully. Aug 13 00:04:27.942777 systemd[1]: Started sshd@21-172.31.18.163:22-139.178.89.65:45970.service. Aug 13 00:04:27.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.18.163:22-139.178.89.65:45970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:27.951772 kernel: kauditd_printk_skb: 27 callbacks suppressed Aug 13 00:04:27.951929 kernel: audit: type=1130 audit(1755043467.948:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.18.163:22-139.178.89.65:45970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:28.134000 audit[5928]: USER_ACCT pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.146297 sshd[5928]: Accepted publickey for core from 139.178.89.65 port 45970 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:28.147000 audit[5928]: CRED_ACQ pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.159632 kernel: audit: type=1101 audit(1755043468.134:1525): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.159770 kernel: audit: type=1103 audit(1755043468.147:1526): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.149560 sshd[5928]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:28.147000 audit[5928]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8b88d40 a2=3 a3=1 items=0 ppid=1 pid=5928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:28.169551 kernel: audit: type=1006 audit(1755043468.147:1527): pid=5928 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Aug 13 00:04:28.147000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:28.185997 kernel: audit: type=1300 audit(1755043468.147:1527): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8b88d40 a2=3 a3=1 items=0 ppid=1 pid=5928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:28.186144 kernel: audit: type=1327 audit(1755043468.147:1527): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:28.188181 systemd[1]: Started session-22.scope. Aug 13 00:04:28.188450 systemd-logind[1647]: New session 22 of user core. Aug 13 00:04:28.198000 audit[5928]: USER_START pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.211000 audit[5930]: CRED_ACQ pid=5930 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.224152 kernel: audit: type=1105 audit(1755043468.198:1528): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.224347 kernel: audit: type=1103 audit(1755043468.211:1529): pid=5930 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.523532 sshd[5928]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:28.524000 audit[5928]: USER_END pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.528254 systemd[1]: session-22.scope: Deactivated successfully. Aug 13 00:04:28.529686 systemd[1]: sshd@21-172.31.18.163:22-139.178.89.65:45970.service: Deactivated successfully. Aug 13 00:04:28.540231 systemd-logind[1647]: Session 22 logged out. Waiting for processes to exit. Aug 13 00:04:28.542432 systemd-logind[1647]: Removed session 22. Aug 13 00:04:28.524000 audit[5928]: CRED_DISP pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.554717 kernel: audit: type=1106 audit(1755043468.524:1530): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.554842 kernel: audit: type=1104 audit(1755043468.524:1531): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:28.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.18.163:22-139.178.89.65:45970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:28.996000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:28.996000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4019adc0e0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:04:28.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:04:28.997000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:28.997000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4005e87ec0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:04:28.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:04:29.001000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7347 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:29.001000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=400d693560 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:04:29.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:04:29.011000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:29.011000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=400d6939b0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:04:29.011000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:04:29.016000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:29.016000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=401070dde0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:04:29.016000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:29.016000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=400a259050 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:04:29.016000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:04:29.016000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:04:30.159000 audit[5940]: NETFILTER_CFG table=filter:140 family=2 entries=20 op=nft_register_rule pid=5940 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:30.159000 audit[5940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff3b37db0 a2=0 a3=1 items=0 ppid=2885 pid=5940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:30.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:30.168000 audit[5940]: NETFILTER_CFG table=nat:141 family=2 entries=110 op=nft_register_chain pid=5940 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:30.168000 audit[5940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffff3b37db0 a2=0 a3=1 items=0 ppid=2885 pid=5940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:30.168000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:30.622000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:30.622000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:30.622000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400098f040 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:30.622000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:30.622000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001195710 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:30.622000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:32.964884 kernel: kauditd_printk_skb: 31 callbacks suppressed Aug 13 00:04:32.965074 kernel: audit: type=1400 audit(1755043472.951:1543): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:32.951000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:32.951000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098f380 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:32.951000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:32.983428 kernel: audit: type=1300 audit(1755043472.951:1543): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098f380 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:32.965000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:33.007303 kernel: audit: type=1327 audit(1755043472.951:1543): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:33.007453 kernel: audit: type=1400 audit(1755043472.965:1544): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:32.965000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400098f800 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:33.020969 kernel: audit: type=1300 audit(1755043472.965:1544): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400098f800 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:32.965000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:33.032192 kernel: audit: type=1327 audit(1755043472.965:1544): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:32.972000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:33.043988 kernel: audit: type=1400 audit(1755043472.972:1545): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:32.972000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098fa60 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:33.057639 kernel: audit: type=1300 audit(1755043472.972:1545): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098fa60 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:32.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:33.068981 kernel: audit: type=1327 audit(1755043472.972:1545): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:32.980000 audit[2427]: AVC avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:32.980000 audit[2427]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009678a0 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:04:33.079385 kernel: audit: type=1400 audit(1755043472.980:1546): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:32.980000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:33.552748 systemd[1]: Started sshd@22-172.31.18.163:22-139.178.89.65:44330.service. Aug 13 00:04:33.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.18.163:22-139.178.89.65:44330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:33.725000 audit[5945]: USER_ACCT pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:33.727314 sshd[5945]: Accepted publickey for core from 139.178.89.65 port 44330 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:33.728000 audit[5945]: CRED_ACQ pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:33.728000 audit[5945]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeae23ac0 a2=3 a3=1 items=0 ppid=1 pid=5945 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:33.728000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:33.730507 sshd[5945]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:33.739937 systemd-logind[1647]: New session 23 of user core. Aug 13 00:04:33.741051 systemd[1]: Started session-23.scope. Aug 13 00:04:33.752000 audit[5945]: USER_START pid=5945 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:33.756000 audit[5947]: CRED_ACQ pid=5947 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:34.086096 sshd[5945]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:34.086000 audit[5945]: USER_END pid=5945 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:34.087000 audit[5945]: CRED_DISP pid=5945 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:34.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.18.163:22-139.178.89.65:44330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:34.091811 systemd[1]: sshd@22-172.31.18.163:22-139.178.89.65:44330.service: Deactivated successfully. Aug 13 00:04:34.094293 systemd[1]: session-23.scope: Deactivated successfully. Aug 13 00:04:34.097086 systemd-logind[1647]: Session 23 logged out. Waiting for processes to exit. Aug 13 00:04:34.100501 systemd-logind[1647]: Removed session 23. Aug 13 00:04:39.119711 systemd[1]: Started sshd@23-172.31.18.163:22-139.178.89.65:43188.service. Aug 13 00:04:39.131834 kernel: kauditd_printk_skb: 13 callbacks suppressed Aug 13 00:04:39.131957 kernel: audit: type=1130 audit(1755043479.119:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.163:22-139.178.89.65:43188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:39.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.163:22-139.178.89.65:43188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:39.300000 audit[5996]: USER_ACCT pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.305197 sshd[5996]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:39.313543 sshd[5996]: Accepted publickey for core from 139.178.89.65 port 43188 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:39.323809 systemd-logind[1647]: New session 24 of user core. Aug 13 00:04:39.325518 systemd[1]: Started session-24.scope. Aug 13 00:04:39.303000 audit[5996]: CRED_ACQ pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.340013 kernel: audit: type=1101 audit(1755043479.300:1557): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.340129 kernel: audit: type=1103 audit(1755043479.303:1558): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.349324 kernel: audit: type=1006 audit(1755043479.303:1559): pid=5996 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Aug 13 00:04:39.303000 audit[5996]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7738030 a2=3 a3=1 items=0 ppid=1 pid=5996 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:39.361494 kernel: audit: type=1300 audit(1755043479.303:1559): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7738030 a2=3 a3=1 items=0 ppid=1 pid=5996 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:39.303000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:39.365427 kernel: audit: type=1327 audit(1755043479.303:1559): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:39.369000 audit[5996]: USER_START pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.384000 audit[5998]: CRED_ACQ pid=5998 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.396539 kernel: audit: type=1105 audit(1755043479.369:1560): pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.396689 kernel: audit: type=1103 audit(1755043479.384:1561): pid=5998 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.675510 sshd[5996]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:39.676000 audit[5996]: USER_END pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.676000 audit[5996]: CRED_DISP pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.702758 kernel: audit: type=1106 audit(1755043479.676:1562): pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.702910 kernel: audit: type=1104 audit(1755043479.676:1563): pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:39.693425 systemd[1]: sshd@23-172.31.18.163:22-139.178.89.65:43188.service: Deactivated successfully. Aug 13 00:04:39.694746 systemd[1]: session-24.scope: Deactivated successfully. Aug 13 00:04:39.704288 systemd-logind[1647]: Session 24 logged out. Waiting for processes to exit. Aug 13 00:04:39.706608 systemd-logind[1647]: Removed session 24. Aug 13 00:04:39.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.163:22-139.178.89.65:43188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:44.705247 systemd[1]: Started sshd@24-172.31.18.163:22-139.178.89.65:43202.service. Aug 13 00:04:44.725623 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:44.725813 kernel: audit: type=1130 audit(1755043484.712:1565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.163:22-139.178.89.65:43202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:44.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.163:22-139.178.89.65:43202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:44.874000 audit[6049]: USER_ACCT pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:44.879064 sshd[6049]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:44.887612 sshd[6049]: Accepted publickey for core from 139.178.89.65 port 43202 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:44.876000 audit[6049]: CRED_ACQ pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:44.901563 kernel: audit: type=1101 audit(1755043484.874:1566): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:44.901696 kernel: audit: type=1103 audit(1755043484.876:1567): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:44.909101 kernel: audit: type=1006 audit(1755043484.877:1568): pid=6049 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Aug 13 00:04:44.909953 systemd-logind[1647]: New session 25 of user core. Aug 13 00:04:44.912003 systemd[1]: Started session-25.scope. Aug 13 00:04:44.926434 kernel: audit: type=1300 audit(1755043484.877:1568): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4854210 a2=3 a3=1 items=0 ppid=1 pid=6049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:44.877000 audit[6049]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4854210 a2=3 a3=1 items=0 ppid=1 pid=6049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:44.877000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:44.932361 kernel: audit: type=1327 audit(1755043484.877:1568): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:44.938000 audit[6049]: USER_START pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:44.952312 kernel: audit: type=1105 audit(1755043484.938:1569): pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:44.942000 audit[6051]: CRED_ACQ pid=6051 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:44.963321 kernel: audit: type=1103 audit(1755043484.942:1570): pid=6051 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:45.222047 sshd[6049]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:45.222000 audit[6049]: USER_END pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:45.226928 systemd[1]: session-25.scope: Deactivated successfully. Aug 13 00:04:45.228459 systemd[1]: sshd@24-172.31.18.163:22-139.178.89.65:43202.service: Deactivated successfully. Aug 13 00:04:45.222000 audit[6049]: CRED_DISP pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:45.246206 kernel: audit: type=1106 audit(1755043485.222:1571): pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:45.246404 kernel: audit: type=1104 audit(1755043485.222:1572): pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:45.246310 systemd-logind[1647]: Session 25 logged out. Waiting for processes to exit. Aug 13 00:04:45.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.163:22-139.178.89.65:43202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:45.250483 systemd-logind[1647]: Removed session 25. Aug 13 00:04:49.898390 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:04:49.898544 kernel: audit: type=1400 audit(1755043489.891:1574): avc: denied { watch } for pid=5271 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.1286318736/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c369 tclass=file permissive=0 Aug 13 00:04:49.891000 audit[5271]: AVC avc: denied { watch } for pid=5271 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.1286318736/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c369 tclass=file permissive=0 Aug 13 00:04:49.891000 audit[5271]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400131e6c0 a2=fc6 a3=0 items=0 ppid=4381 pid=5271 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 key=(null) Aug 13 00:04:49.920825 kernel: audit: type=1300 audit(1755043489.891:1574): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400131e6c0 a2=fc6 a3=0 items=0 ppid=4381 pid=5271 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 key=(null) Aug 13 00:04:49.891000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:04:49.932953 kernel: audit: type=1327 audit(1755043489.891:1574): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:04:50.250069 systemd[1]: Started sshd@25-172.31.18.163:22-139.178.89.65:56386.service. Aug 13 00:04:50.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.18.163:22-139.178.89.65:56386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:50.275310 kernel: audit: type=1130 audit(1755043490.258:1575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.18.163:22-139.178.89.65:56386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:50.433000 audit[6067]: USER_ACCT pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.437953 sshd[6067]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:50.446633 sshd[6067]: Accepted publickey for core from 139.178.89.65 port 56386 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:50.435000 audit[6067]: CRED_ACQ pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.448591 kernel: audit: type=1101 audit(1755043490.433:1576): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.460309 kernel: audit: type=1103 audit(1755043490.435:1577): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.435000 audit[6067]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea0f7280 a2=3 a3=1 items=0 ppid=1 pid=6067 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:50.482392 kernel: audit: type=1006 audit(1755043490.435:1578): pid=6067 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Aug 13 00:04:50.482514 kernel: audit: type=1300 audit(1755043490.435:1578): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea0f7280 a2=3 a3=1 items=0 ppid=1 pid=6067 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:50.435000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:50.488523 kernel: audit: type=1327 audit(1755043490.435:1578): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:50.485230 systemd-logind[1647]: New session 26 of user core. Aug 13 00:04:50.487426 systemd[1]: Started session-26.scope. Aug 13 00:04:50.500000 audit[6067]: USER_START pid=6067 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.503000 audit[6069]: CRED_ACQ pid=6069 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.515482 kernel: audit: type=1105 audit(1755043490.500:1579): pid=6067 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.781804 sshd[6067]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:50.782000 audit[6067]: USER_END pid=6067 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.783000 audit[6067]: CRED_DISP pid=6067 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:50.787870 systemd-logind[1647]: Session 26 logged out. Waiting for processes to exit. Aug 13 00:04:50.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.18.163:22-139.178.89.65:56386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:50.790933 systemd[1]: session-26.scope: Deactivated successfully. Aug 13 00:04:50.792188 systemd[1]: sshd@25-172.31.18.163:22-139.178.89.65:56386.service: Deactivated successfully. Aug 13 00:04:50.798231 systemd-logind[1647]: Removed session 26. Aug 13 00:04:51.727000 audit[5222]: AVC avc: denied { watch } for pid=5222 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.3757813382/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c92,c508 tclass=file permissive=0 Aug 13 00:04:51.727000 audit[5222]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4002340f80 a2=fc6 a3=0 items=0 ppid=4206 pid=5222 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 key=(null) Aug 13 00:04:51.727000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:04:55.814583 systemd[1]: Started sshd@26-172.31.18.163:22-139.178.89.65:56398.service. Aug 13 00:04:55.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.163:22-139.178.89.65:56398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:55.820289 kernel: kauditd_printk_skb: 7 callbacks suppressed Aug 13 00:04:55.820439 kernel: audit: type=1130 audit(1755043495.814:1585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.163:22-139.178.89.65:56398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:56.014000 audit[6093]: USER_ACCT pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.026478 sshd[6093]: Accepted publickey for core from 139.178.89.65 port 56398 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:04:56.029839 sshd[6093]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:56.041365 kernel: audit: type=1101 audit(1755043496.014:1586): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.041531 kernel: audit: type=1103 audit(1755043496.027:1587): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.027000 audit[6093]: CRED_ACQ pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.051051 systemd[1]: Started session-27.scope. Aug 13 00:04:56.054141 systemd-logind[1647]: New session 27 of user core. Aug 13 00:04:56.064972 kernel: audit: type=1006 audit(1755043496.027:1588): pid=6093 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Aug 13 00:04:56.081069 kernel: audit: type=1300 audit(1755043496.027:1588): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec17c000 a2=3 a3=1 items=0 ppid=1 pid=6093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.027000 audit[6093]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec17c000 a2=3 a3=1 items=0 ppid=1 pid=6093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.027000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:56.104203 kernel: audit: type=1327 audit(1755043496.027:1588): proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:56.104410 kernel: audit: type=1105 audit(1755043496.091:1589): pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.091000 audit[6093]: USER_START pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.105000 audit[6111]: CRED_ACQ pid=6111 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.118337 kernel: audit: type=1103 audit(1755043496.105:1590): pid=6111 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.391928 sshd[6093]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:56.394000 audit[6093]: USER_END pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.409501 systemd[1]: sshd@26-172.31.18.163:22-139.178.89.65:56398.service: Deactivated successfully. Aug 13 00:04:56.410925 systemd[1]: session-27.scope: Deactivated successfully. Aug 13 00:04:56.413361 systemd-logind[1647]: Session 27 logged out. Waiting for processes to exit. Aug 13 00:04:56.416746 systemd-logind[1647]: Removed session 27. Aug 13 00:04:56.394000 audit[6093]: CRED_DISP pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.419624 kernel: audit: type=1106 audit(1755043496.394:1591): pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:04:56.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.163:22-139.178.89.65:56398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:56.438318 kernel: audit: type=1104 audit(1755043496.394:1592): pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.441990 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:05:01.442253 kernel: audit: type=1130 audit(1755043501.428:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.163:22-139.178.89.65:40932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:05:01.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.163:22-139.178.89.65:40932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:05:01.429737 systemd[1]: Started sshd@27-172.31.18.163:22-139.178.89.65:40932.service. Aug 13 00:05:01.612800 sshd[6132]: Accepted publickey for core from 139.178.89.65 port 40932 ssh2: RSA SHA256:VHsMFr69bquTAmMxwTFVl2uJICDxuaiLF9bCAtZNNGI Aug 13 00:05:01.611000 audit[6132]: USER_ACCT pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.625548 sshd[6132]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:05:01.623000 audit[6132]: CRED_ACQ pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.636193 kernel: audit: type=1101 audit(1755043501.611:1595): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.636367 kernel: audit: type=1103 audit(1755043501.623:1596): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.643398 kernel: audit: type=1006 audit(1755043501.623:1597): pid=6132 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Aug 13 00:05:01.645431 kernel: audit: type=1300 audit(1755043501.623:1597): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1b4ba80 a2=3 a3=1 items=0 ppid=1 pid=6132 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:01.623000 audit[6132]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1b4ba80 a2=3 a3=1 items=0 ppid=1 pid=6132 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:01.623000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:05:01.660716 kernel: audit: type=1327 audit(1755043501.623:1597): proctitle=737368643A20636F7265205B707269765D Aug 13 00:05:01.665632 systemd-logind[1647]: New session 28 of user core. Aug 13 00:05:01.668749 systemd[1]: Started session-28.scope. Aug 13 00:05:01.690000 audit[6132]: USER_START pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.703000 audit[6135]: CRED_ACQ pid=6135 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.706330 kernel: audit: type=1105 audit(1755043501.690:1598): pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.717411 kernel: audit: type=1103 audit(1755043501.703:1599): pid=6135 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:01.987849 sshd[6132]: pam_unix(sshd:session): session closed for user core Aug 13 00:05:01.988000 audit[6132]: USER_END pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:02.002755 systemd[1]: sshd@27-172.31.18.163:22-139.178.89.65:40932.service: Deactivated successfully. Aug 13 00:05:02.004189 systemd[1]: session-28.scope: Deactivated successfully. Aug 13 00:05:02.007828 kernel: audit: type=1106 audit(1755043501.988:1600): pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:02.006964 systemd-logind[1647]: Session 28 logged out. Waiting for processes to exit. Aug 13 00:05:01.988000 audit[6132]: CRED_DISP pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:02.023600 systemd-logind[1647]: Removed session 28. Aug 13 00:05:02.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.163:22-139.178.89.65:40932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:05:02.030636 kernel: audit: type=1104 audit(1755043501.988:1601): pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Aug 13 00:05:11.536124 systemd[1]: run-containerd-runc-k8s.io-95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83-runc.tZOIpu.mount: Deactivated successfully. Aug 13 00:05:28.215231 systemd[1]: cri-containerd-5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62.scope: Deactivated successfully. Aug 13 00:05:28.215847 systemd[1]: cri-containerd-5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62.scope: Consumed 6.985s CPU time. Aug 13 00:05:28.219000 audit: BPF prog-id=84 op=UNLOAD Aug 13 00:05:28.222621 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:05:28.222772 kernel: audit: type=1334 audit(1755043528.219:1603): prog-id=84 op=UNLOAD Aug 13 00:05:28.219000 audit: BPF prog-id=97 op=UNLOAD Aug 13 00:05:28.231113 kernel: audit: type=1334 audit(1755043528.219:1604): prog-id=97 op=UNLOAD Aug 13 00:05:28.270518 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62-rootfs.mount: Deactivated successfully. Aug 13 00:05:28.272713 env[1658]: time="2025-08-13T00:05:28.272651152Z" level=info msg="shim disconnected" id=5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62 Aug 13 00:05:28.273537 env[1658]: time="2025-08-13T00:05:28.273474893Z" level=warning msg="cleaning up after shim disconnected" id=5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62 namespace=k8s.io Aug 13 00:05:28.273632 env[1658]: time="2025-08-13T00:05:28.273533525Z" level=info msg="cleaning up dead shim" Aug 13 00:05:28.288074 env[1658]: time="2025-08-13T00:05:28.287987607Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:05:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6225 runtime=io.containerd.runc.v2\n" Aug 13 00:05:28.998000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:28.998000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:29.019656 kernel: audit: type=1400 audit(1755043528.998:1605): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:29.019854 kernel: audit: type=1400 audit(1755043528.998:1606): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:28.998000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=4005e86450 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:29.032727 kernel: audit: type=1300 audit(1755043528.998:1606): arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=4005e86450 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:28.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:29.044530 kernel: audit: type=1327 audit(1755043528.998:1606): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:28.998000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400be99fa0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:29.057439 kernel: audit: type=1300 audit(1755043528.998:1605): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400be99fa0 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:28.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:29.068909 kernel: audit: type=1327 audit(1755043528.998:1605): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:29.002000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7347 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:29.072678 kernel: audit: type=1400 audit(1755043529.002:1607): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7347 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:29.002000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=401d472c00 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:29.083501 kubelet[2737]: I0813 00:05:29.083441 2737 scope.go:117] "RemoveContainer" containerID="5b05290b2cfb601028916485c5890a121800f69e741b04742c7ad54743977c62" Aug 13 00:05:29.089800 env[1658]: time="2025-08-13T00:05:29.089726574Z" level=info msg="CreateContainer within sandbox \"dd48dd949cb635fa3a8848917ce174342ec562554c6a626665a714a9d8d66b78\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Aug 13 00:05:29.093369 kernel: audit: type=1300 audit(1755043529.002:1607): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=401d472c00 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:29.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:29.012000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:29.012000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=401d472d20 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:29.012000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:29.017000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:29.017000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=401d472e10 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:29.017000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:29.017000 audit[2417]: AVC avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:29.017000 audit[2417]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4007672920 a2=fc6 a3=0 items=0 ppid=2254 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c613,c821 key=(null) Aug 13 00:05:29.017000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313633002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Aug 13 00:05:29.131646 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3769365264.mount: Deactivated successfully. Aug 13 00:05:29.153086 env[1658]: time="2025-08-13T00:05:29.152999226Z" level=info msg="CreateContainer within sandbox \"dd48dd949cb635fa3a8848917ce174342ec562554c6a626665a714a9d8d66b78\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"0bd069ed2dfc018ae7249362df2925c79b670cbec1d7de8584c0c82ef00f86f3\"" Aug 13 00:05:29.154448 env[1658]: time="2025-08-13T00:05:29.154400060Z" level=info msg="StartContainer for \"0bd069ed2dfc018ae7249362df2925c79b670cbec1d7de8584c0c82ef00f86f3\"" Aug 13 00:05:29.189806 systemd[1]: Started cri-containerd-0bd069ed2dfc018ae7249362df2925c79b670cbec1d7de8584c0c82ef00f86f3.scope. Aug 13 00:05:29.236752 systemd[1]: cri-containerd-295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea.scope: Deactivated successfully. Aug 13 00:05:29.236000 audit: BPF prog-id=117 op=UNLOAD Aug 13 00:05:29.237357 systemd[1]: cri-containerd-295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea.scope: Consumed 32.919s CPU time. Aug 13 00:05:29.240000 audit: BPF prog-id=120 op=UNLOAD Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.249000 audit: BPF prog-id=234 op=LOAD Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2242 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:29.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062643036396564326466633031386165373234393336326466323932 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2242 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:29.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062643036396564326466633031386165373234393336326466323932 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit: BPF prog-id=235 op=LOAD Aug 13 00:05:29.252000 audit[6245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2242 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:29.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062643036396564326466633031386165373234393336326466323932 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit: BPF prog-id=236 op=LOAD Aug 13 00:05:29.252000 audit[6245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2242 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:29.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062643036396564326466633031386165373234393336326466323932 Aug 13 00:05:29.252000 audit: BPF prog-id=236 op=UNLOAD Aug 13 00:05:29.252000 audit: BPF prog-id=235 op=UNLOAD Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { perfmon } for pid=6245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit[6245]: AVC avc: denied { bpf } for pid=6245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:29.252000 audit: BPF prog-id=237 op=LOAD Aug 13 00:05:29.252000 audit[6245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2242 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:29.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062643036396564326466633031386165373234393336326466323932 Aug 13 00:05:29.309964 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea-rootfs.mount: Deactivated successfully. Aug 13 00:05:29.311944 env[1658]: time="2025-08-13T00:05:29.311876023Z" level=info msg="shim disconnected" id=295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea Aug 13 00:05:29.312596 env[1658]: time="2025-08-13T00:05:29.311949175Z" level=warning msg="cleaning up after shim disconnected" id=295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea namespace=k8s.io Aug 13 00:05:29.312596 env[1658]: time="2025-08-13T00:05:29.311972179Z" level=info msg="cleaning up dead shim" Aug 13 00:05:29.335207 env[1658]: time="2025-08-13T00:05:29.335132442Z" level=info msg="StartContainer for \"0bd069ed2dfc018ae7249362df2925c79b670cbec1d7de8584c0c82ef00f86f3\" returns successfully" Aug 13 00:05:29.344194 env[1658]: time="2025-08-13T00:05:29.344121968Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:05:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6274 runtime=io.containerd.runc.v2\n" Aug 13 00:05:30.091551 kubelet[2737]: I0813 00:05:30.091517 2737 scope.go:117] "RemoveContainer" containerID="295af81156ac094aa78f60551fd6f222890d1e305927f7bb149853c0760241ea" Aug 13 00:05:30.095534 env[1658]: time="2025-08-13T00:05:30.095305417Z" level=info msg="CreateContainer within sandbox \"9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Aug 13 00:05:30.128819 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1552570345.mount: Deactivated successfully. Aug 13 00:05:30.129205 env[1658]: time="2025-08-13T00:05:30.129144064Z" level=info msg="CreateContainer within sandbox \"9d3928ede8c668e4e34776835a3da0cbf8679f25e7aa4e3609a4e2e32667a44d\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"06b8a2293ae5e4c46470ac69d831f59cb3010f795b5d788fae8976e87c704524\"" Aug 13 00:05:30.132814 env[1658]: time="2025-08-13T00:05:30.131548076Z" level=info msg="StartContainer for \"06b8a2293ae5e4c46470ac69d831f59cb3010f795b5d788fae8976e87c704524\"" Aug 13 00:05:30.181531 systemd[1]: Started cri-containerd-06b8a2293ae5e4c46470ac69d831f59cb3010f795b5d788fae8976e87c704524.scope. Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.226000 audit: BPF prog-id=238 op=LOAD Aug 13 00:05:30.228000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.228000 audit[6302]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2789 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:30.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623861323239336165356534633436343730616336396438333166 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2789 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:30.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623861323239336165356534633436343730616336396438333166 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.229000 audit: BPF prog-id=239 op=LOAD Aug 13 00:05:30.229000 audit[6302]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2789 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:30.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623861323239336165356534633436343730616336396438333166 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.232000 audit: BPF prog-id=240 op=LOAD Aug 13 00:05:30.232000 audit[6302]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2789 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:30.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623861323239336165356534633436343730616336396438333166 Aug 13 00:05:30.235000 audit: BPF prog-id=240 op=UNLOAD Aug 13 00:05:30.235000 audit: BPF prog-id=239 op=UNLOAD Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { perfmon } for pid=6302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit[6302]: AVC avc: denied { bpf } for pid=6302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:30.235000 audit: BPF prog-id=241 op=LOAD Aug 13 00:05:30.235000 audit[6302]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2789 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:30.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623861323239336165356534633436343730616336396438333166 Aug 13 00:05:30.263700 env[1658]: time="2025-08-13T00:05:30.263625651Z" level=info msg="StartContainer for \"06b8a2293ae5e4c46470ac69d831f59cb3010f795b5d788fae8976e87c704524\" returns successfully" Aug 13 00:05:33.076000 audit[6255]: AVC avc: denied { watch } for pid=6255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:33.076000 audit[6255]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003930e0 a2=fc6 a3=0 items=0 ppid=2242 pid=6255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:05:33.076000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:33.077000 audit[6255]: AVC avc: denied { watch } for pid=6255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:33.077000 audit[6255]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000c36060 a2=fc6 a3=0 items=0 ppid=2242 pid=6255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) Aug 13 00:05:33.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:33.513575 systemd[1]: cri-containerd-6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52.scope: Deactivated successfully. Aug 13 00:05:33.514116 systemd[1]: cri-containerd-6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52.scope: Consumed 3.199s CPU time. Aug 13 00:05:33.523722 kernel: kauditd_printk_skb: 132 callbacks suppressed Aug 13 00:05:33.523916 kernel: audit: type=1334 audit(1755043533.517:1651): prog-id=76 op=UNLOAD Aug 13 00:05:33.517000 audit: BPF prog-id=76 op=UNLOAD Aug 13 00:05:33.527136 kernel: audit: type=1334 audit(1755043533.517:1652): prog-id=86 op=UNLOAD Aug 13 00:05:33.517000 audit: BPF prog-id=86 op=UNLOAD Aug 13 00:05:33.557390 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52-rootfs.mount: Deactivated successfully. Aug 13 00:05:33.559569 env[1658]: time="2025-08-13T00:05:33.559490206Z" level=info msg="shim disconnected" id=6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52 Aug 13 00:05:33.560175 env[1658]: time="2025-08-13T00:05:33.559571398Z" level=warning msg="cleaning up after shim disconnected" id=6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52 namespace=k8s.io Aug 13 00:05:33.560175 env[1658]: time="2025-08-13T00:05:33.559600810Z" level=info msg="cleaning up dead shim" Aug 13 00:05:33.573164 env[1658]: time="2025-08-13T00:05:33.573090691Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:05:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6342 runtime=io.containerd.runc.v2\n" Aug 13 00:05:34.106698 kubelet[2737]: I0813 00:05:34.106649 2737 scope.go:117] "RemoveContainer" containerID="6938228157a96eea0e6fb4487d9954159f78ad6ce4c46fe40a9b8d042b8dfb52" Aug 13 00:05:34.110362 env[1658]: time="2025-08-13T00:05:34.110256889Z" level=info msg="CreateContainer within sandbox \"e9fc21c2054e81ebe2826393d31bead254fa3dce11b68d03355f77446ee02528\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Aug 13 00:05:34.142994 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3018493494.mount: Deactivated successfully. Aug 13 00:05:34.149568 env[1658]: time="2025-08-13T00:05:34.149489135Z" level=info msg="CreateContainer within sandbox \"e9fc21c2054e81ebe2826393d31bead254fa3dce11b68d03355f77446ee02528\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"d1dcd8eaeba2846ae163a75f83f3dd9d077594e6f772d62db17b1f59d09403f6\"" Aug 13 00:05:34.150444 env[1658]: time="2025-08-13T00:05:34.150383388Z" level=info msg="StartContainer for \"d1dcd8eaeba2846ae163a75f83f3dd9d077594e6f772d62db17b1f59d09403f6\"" Aug 13 00:05:34.203917 systemd[1]: Started cri-containerd-d1dcd8eaeba2846ae163a75f83f3dd9d077594e6f772d62db17b1f59d09403f6.scope. Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272903 kernel: audit: type=1400 audit(1755043534.254:1653): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.273380 kernel: audit: type=1400 audit(1755043534.254:1654): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.273443 kernel: audit: type=1400 audit(1755043534.254:1655): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.289062 kernel: audit: type=1400 audit(1755043534.254:1656): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.300065 kernel: audit: type=1400 audit(1755043534.254:1657): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.308353 kernel: audit: type=1400 audit(1755043534.254:1658): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.320412 kernel: audit: type=1400 audit(1755043534.254:1659): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.337545 kernel: audit: type=1400 audit(1755043534.254:1660): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.255000 audit: BPF prog-id=242 op=LOAD Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2277 pid=6364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:34.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431646364386561656261323834366165313633613735663833663364 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2277 pid=6364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:34.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431646364386561656261323834366165313633613735663833663364 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.264000 audit: BPF prog-id=243 op=LOAD Aug 13 00:05:34.264000 audit[6364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2277 pid=6364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:34.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431646364386561656261323834366165313633613735663833663364 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.272000 audit: BPF prog-id=244 op=LOAD Aug 13 00:05:34.272000 audit[6364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2277 pid=6364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:34.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431646364386561656261323834366165313633613735663833663364 Aug 13 00:05:34.280000 audit: BPF prog-id=244 op=UNLOAD Aug 13 00:05:34.280000 audit: BPF prog-id=243 op=UNLOAD Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { perfmon } for pid=6364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit[6364]: AVC avc: denied { bpf } for pid=6364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:34.280000 audit: BPF prog-id=245 op=LOAD Aug 13 00:05:34.280000 audit[6364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2277 pid=6364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:34.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431646364386561656261323834366165313633613735663833663364 Aug 13 00:05:34.369714 env[1658]: time="2025-08-13T00:05:34.369429686Z" level=info msg="StartContainer for \"d1dcd8eaeba2846ae163a75f83f3dd9d077594e6f772d62db17b1f59d09403f6\" returns successfully" Aug 13 00:05:36.603165 systemd[1]: run-containerd-runc-k8s.io-f19a2a569b0abde5d0132f7cfe8de454374d6b65572ee9215ab3eec4af5861b1-runc.MxY9x8.mount: Deactivated successfully. Aug 13 00:05:37.320584 kubelet[2737]: E0813 00:05:37.320509 2737 controller.go:195] "Failed to update lease" err="Put \"https://172.31.18.163:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-163?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Aug 13 00:05:37.451143 systemd[1]: run-containerd-runc-k8s.io-95463ac542182e64b2e3f8c28232341df3eb86abf983074c314f19814c2e0e83-runc.Iq6RHF.mount: Deactivated successfully.